Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/aUt9STDYB4WpJzoIeOhkBXlmRGY.roa
File: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (raw, json)
Hash identifier: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=
Subject key identifier: 69:4B:7D:49:30:D8:07:85:A9:27:3A:08:78:E8:64:05:79:66:44:66
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 01942823638C513AB119DDC438B1975739EA
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/aUt9STDYB4WpJzoIeOhkBXlmRGY.roa
Signing time: Thu 02 Jan 2025 17:49:55 +0000
ROA not before: Thu 02 Jan 2025 17:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212341
IP address blocks: 77.87.185.0/24 maxlen: 24
185.66.176.0/22 maxlen: 22
185.66.178.0/24 maxlen: 24
2a05:900::/32 maxlen: 32
2a05:901::/32 maxlen: 32
2a05:902::/32 maxlen: 32
2a05:903::/32 maxlen: 32
2a05:904::/32 maxlen: 32
2a05:905::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:63:8c:51:3a:b1:19:dd:c4:38:b1:97:57:39:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Jan 2 17:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=694b7d4930d80785a9273a0878e8640579664466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:52:69:37:9c:2f:4e:0f:16:a3:44:3e:d6:
e4:59:03:15:b9:18:c9:bd:d4:e5:ba:ff:6f:58:26:
1b:d9:0f:22:8f:48:7b:2f:0f:bb:2d:09:0f:a3:8b:
76:c2:24:5c:34:3f:66:9c:ed:6f:62:a9:7d:20:71:
b5:70:61:85:cb:ff:23:85:30:79:43:53:6e:12:fc:
53:4f:ac:f4:b2:76:4b:ce:18:c7:8e:ff:cd:16:06:
ca:70:92:20:d2:cf:42:ae:64:3e:03:12:23:85:89:
c6:ee:01:27:55:f5:2b:3f:41:74:1f:31:9a:78:e1:
5c:67:38:57:66:7d:ce:ec:14:66:16:dc:f6:2f:08:
16:cf:0b:01:b8:82:79:3c:2b:34:48:fa:07:10:ac:
ee:f9:69:7d:74:f2:0b:15:a8:10:f2:9d:e9:db:98:
8a:24:6f:18:e1:0f:eb:72:60:3d:92:d4:d5:2a:b1:
51:59:44:a3:55:8d:5c:84:fe:54:ef:0c:63:41:32:
13:17:a1:2c:46:3b:20:5e:0c:8f:af:e3:c6:22:aa:
75:96:d8:86:73:b5:55:7c:fc:88:28:b9:0d:1f:72:
2f:76:91:19:c9:43:61:98:b1:7a:d7:76:42:ce:c2:
28:eb:0e:38:24:16:87:24:e6:05:d1:06:0d:22:9a:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4B:7D:49:30:D8:07:85:A9:27:3A:08:78:E8:64:05:79:66:44:66
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/aUt9STDYB4WpJzoIeOhkBXlmRGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.185.0/24
185.66.176.0/22
IPv6:
2a05:900::-2a05:905:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9d:8c:55:c6:92:7e:74:f7:3e:b0:6a:1f:e5:a1:96:ae:97:10:
3c:2d:92:07:62:99:f0:dd:ac:e0:a0:a8:35:34:42:61:1a:6c:
12:18:c4:5b:16:1d:7f:9c:d0:b8:47:79:dc:a8:5b:63:76:e3:
46:a0:fd:ea:33:b1:40:bd:c8:02:66:2e:23:bc:dd:91:30:8f:
e4:2d:08:c2:22:f6:78:83:dd:6c:97:73:1c:1b:a5:a4:62:d6:
66:28:4d:64:81:ca:10:3a:8c:2f:b6:28:e0:c2:2a:db:5f:f5:
45:71:1f:fb:5d:ff:76:ad:b6:d1:ff:ad:78:5c:dc:3c:74:67:
2d:d4:3d:f8:b9:39:e7:cb:89:4c:ab:8c:db:67:8b:ef:cd:0f:
62:0c:1e:a9:4d:8f:7b:05:53:69:0e:3e:05:26:5b:b7:95:16:
ef:dc:8f:25:ac:a7:25:4f:9d:22:8c:aa:7f:76:a5:d4:19:7b:
c3:a9:0d:7d:c7:89:fe:6b:d5:95:45:c0:b0:e2:2a:38:ac:16:
37:3c:cd:6d:0a:df:5d:03:cd:45:22:1d:64:03:9b:14:b6:df:
d0:6e:7b:d4:2a:d3:a3:b8:5a:51:ba:4a:13:4d:01:42:f2:23:
39:a9:0d:68:bd:52:e5:dc:d9:75:51:c4:fb:7f:e5:46:a9:1b:
95:b7:8a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:26 2025 by rpki-client