Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa
File: DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa (raw, json)
Hash identifier: YoSjsmqBi7UGbr0YdaEV1pXh33zn8N/CDmlmvP42wg0=
Subject key identifier: 0E:01:B2:19:BC:08:FD:9F:A1:6C:1C:2A:04:C8:59:65:BE:AF:4B:07
Certificate issuer: /CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Certificate serial: 019425FC116D4B65D4CA799F8817828FC19B
Authority key identifier: C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa
Signing time: Thu 02 Jan 2025 07:47:44 +0000
ROA not before: Thu 02 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198736
IP address blocks: 77.111.236.0/24 maxlen: 24
77.111.237.0/24 maxlen: 24
77.111.238.0/23 maxlen: 23
77.232.168.0/21 maxlen: 21
82.163.128.0/22 maxlen: 22
82.163.232.0/22 maxlen: 22
95.141.160.0/20 maxlen: 20
131.117.184.0/21 maxlen: 21
149.255.120.0/21 maxlen: 21
185.7.244.0/22 maxlen: 22
2a00:c5c0:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:11:6d:4b:65:d4:ca:79:9f:88:17:82:8f:c1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Validity
Not Before: Jan 2 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e01b219bc08fd9fa16c1c2a04c85965beaf4b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:d1:ab:1c:17:77:77:7d:62:c6:a8:fc:a3:
11:bd:07:69:b4:ee:f1:d9:d3:c8:8d:4d:b5:40:b1:
be:82:fa:f4:d3:84:11:00:00:b1:4e:2b:00:b8:c4:
a3:52:4b:45:ce:0d:71:fa:c2:07:40:20:f6:63:55:
93:f6:24:fb:17:2c:55:89:4a:04:de:3c:c2:0f:2f:
2b:6b:15:da:a4:4c:2c:88:2a:44:1c:e3:dd:ac:c3:
27:39:bd:4e:03:5b:92:f7:9f:1c:0a:6a:65:e6:ab:
90:a0:bf:8d:05:eb:77:e6:bc:60:62:0a:ba:7a:2b:
64:e1:48:6e:3c:bf:77:7c:d6:72:fc:ca:9f:3e:12:
06:ae:d9:74:eb:af:64:54:55:15:d0:2e:85:36:f2:
c9:5a:3b:26:58:42:02:a9:51:4b:cd:06:ab:f3:69:
a6:11:6e:f9:50:03:97:59:91:a4:01:75:a6:2f:d9:
5b:bf:fa:ca:71:50:51:82:c7:5b:a7:e3:5d:e5:3e:
42:25:f5:db:77:05:b2:b7:f0:02:cd:7b:f8:b3:d8:
88:41:92:41:c6:7f:99:b1:31:f9:21:3a:ec:33:50:
11:d5:6c:ac:93:3f:13:86:49:e0:dd:4b:31:ff:f0:
c6:ef:d1:86:97:07:1a:a3:01:67:e7:0e:f3:9f:3c:
e5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:01:B2:19:BC:08:FD:9F:A1:6C:1C:2A:04:C8:59:65:BE:AF:4B:07
X509v3 Authority Key Identifier:
keyid:C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.236.0/22
77.232.168.0/21
82.163.128.0/22
82.163.232.0/22
95.141.160.0/20
131.117.184.0/21
149.255.120.0/21
185.7.244.0/22
IPv6:
2a00:c5c0:a000::/36
Signature Algorithm: sha256WithRSAEncryption
68:fe:6c:7e:14:cd:e5:be:5b:40:d0:fe:bd:5d:59:96:fe:6b:
8f:88:d6:97:ce:9c:c2:28:2e:0b:0f:12:59:63:da:dd:0b:c3:
34:81:a0:ad:c8:44:43:38:2b:12:c1:66:a8:98:62:6c:b0:47:
d4:7b:c0:73:a7:48:33:be:1f:e2:f1:ab:07:42:fa:49:38:38:
94:f4:eb:68:82:62:c6:1f:cf:3b:bb:cb:65:aa:95:9e:85:38:
9d:39:1b:e3:96:98:97:3f:8c:69:2f:dc:1f:a8:2d:9e:ac:21:
e9:d0:fd:34:95:72:eb:de:2b:31:36:dc:30:bf:af:9a:82:eb:
68:aa:51:17:dd:f5:33:f9:10:7a:9e:64:25:cf:2e:f2:18:8a:
77:3a:0d:cf:18:e7:9a:65:d3:53:9b:2f:c9:d6:c1:ea:b4:40:
bc:87:da:c7:d3:4f:c4:56:96:ff:fc:5e:89:7e:aa:fa:77:7a:
58:b0:31:15:4b:82:07:e9:7e:53:39:84:64:58:10:21:ea:47:
6d:13:48:4d:07:be:56:d8:0e:b4:60:f4:9b:5d:ad:1f:af:ad:
b1:f5:8b:03:ef:5d:3b:eb:36:24:6d:cb:b3:ad:e5:00:20:2e:
cf:7a:81:55:82:8c:b4:b5:4a:0e:05:be:89:3c:95:ca:ac:b0:
12:32:c6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:11:17 2025 by rpki-client