Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/OdaAsWbJBzIj-tZQKsBOWq_EkZA.roa
File: OdaAsWbJBzIj-tZQKsBOWq_EkZA.roa (raw, json)
Hash identifier: DNHWovEbwKrxb8bnNE2RJS1ONhh531Me9XFXCTHJYd0=
Subject key identifier: 39:D6:80:B1:66:C9:07:32:23:FA:D6:50:2A:C0:4E:5A:AF:C4:91:90
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369C9627F2ED712BBEA701F30667767
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/OdaAsWbJBzIj-tZQKsBOWq_EkZA.roa
Signing time: Wed 01 Jan 2025 19:48:42 +0000
ROA not before: Wed 01 Jan 2025 19:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43991
IP address blocks: 77.243.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c9:62:7f:2e:d7:12:bb:ea:70:1f:30:66:77:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39d680b166c9073223fad6502ac04e5aafc49190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:a1:17:53:13:5c:71:9d:7e:a8:13:47:08:
38:f4:dc:1c:20:e9:fa:fc:56:aa:02:9b:09:a7:a7:
6e:f2:11:eb:a6:29:6b:06:9e:1c:55:8f:66:4b:be:
b7:a3:02:b0:f2:c1:07:b7:08:72:44:98:39:bc:1d:
3a:ab:b3:da:2a:11:97:26:c4:db:a8:9b:dc:00:de:
32:fd:0c:cf:88:80:62:d9:44:75:c3:3f:db:57:75:
b0:66:bd:64:ce:ff:3a:4e:c3:4b:e4:df:4e:3c:53:
d5:98:95:c8:af:13:57:f9:b2:22:f1:28:47:f5:a5:
05:28:3e:46:c9:82:29:96:48:74:34:54:d5:fd:e6:
3c:27:fd:09:0f:91:e1:27:0c:7e:c9:f8:a7:d1:e7:
f9:fc:15:41:f2:e0:c8:b0:18:d5:10:26:45:d7:3c:
f5:45:6c:5c:e8:67:82:bc:40:7b:e1:f5:db:60:65:
0a:81:fd:09:e0:54:71:25:16:96:0a:3c:b8:41:e4:
a4:50:16:c7:66:b6:59:ee:cb:40:2a:e5:63:ad:bb:
78:70:a5:14:a3:66:10:4c:04:90:24:ba:bd:53:a6:
62:2d:e7:0d:67:ab:4d:3b:9e:ed:89:7d:da:a7:7c:
b5:2e:0f:82:35:4e:0f:31:db:28:60:ba:da:a2:0d:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D6:80:B1:66:C9:07:32:23:FA:D6:50:2A:C0:4E:5A:AF:C4:91:90
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/OdaAsWbJBzIj-tZQKsBOWq_EkZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.83.0/24
Signature Algorithm: sha256WithRSAEncryption
05:18:21:7c:8e:07:4e:82:d5:17:72:d7:cd:b8:11:9f:9a:31:
5a:96:b0:d6:9a:ea:06:d5:06:ae:52:90:0a:fa:ec:e0:e4:a6:
83:d8:d8:aa:ec:b3:33:f6:05:fe:5b:58:ae:b9:e8:96:7a:72:
c5:af:d6:25:6b:5f:0d:fd:e0:21:bc:1b:61:de:85:3d:93:a5:
3c:79:57:22:e7:cc:68:8e:e5:f9:cb:e6:00:d7:e6:21:35:dc:
71:f1:2a:bb:9b:e1:6d:5c:29:3a:91:fb:cc:76:87:0a:28:c7:
fb:b7:d0:8f:af:a6:e6:a4:22:d0:2c:10:a2:8f:19:a7:e9:a2:
86:b1:7b:9a:1e:cb:c5:61:9a:5c:4b:86:9c:c4:40:b5:94:51:
36:5c:1f:66:b4:f2:9a:15:76:5d:2c:62:7b:e2:0c:67:db:e8:
68:ec:e0:bc:dd:c7:21:5c:50:0f:7b:53:d7:df:5a:67:ce:b6:
c6:b4:27:bb:8e:5f:03:c5:9b:56:a3:84:52:50:a5:5b:98:6e:
45:94:0a:28:b0:26:21:8c:02:92:52:b5:cd:ee:1f:e7:72:b8:
37:a3:61:e6:f8:ad:b6:8e:aa:46:64:ac:fc:7a:31:b1:cb:ab:
44:f8:be:94:e7:8e:ea:4a:db:38:48:8b:93:4a:53:99:cc:9e:
69:75:b0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:31 2025 by rpki-client