Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/u3fVEc-RK0U4DFHiTlygDyKj4rI.roa
File: u3fVEc-RK0U4DFHiTlygDyKj4rI.roa (raw, json)
Hash identifier: Us98OeKKFK/pD4hLHv0TSn5RO0cC7LOagG2XI+ndne0=
Subject key identifier: BB:77:D5:11:CF:91:2B:45:38:0C:51:E2:4E:5C:A0:0F:22:A3:E2:B2
Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725
Certificate serial: 01941F8C970932FBFFF00EDB4ACCD657E4C7
Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/u3fVEc-RK0U4DFHiTlygDyKj4rI.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50045
IP address blocks: 80.77.160.0/24 maxlen: 24
2a02:2518:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 10:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:97:09:32:fb:ff:f0:0e:db:4a:cc:d6:57:e4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2900e4655ab349a4632b140719dc97230431725
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb77d511cf912b45380c51e24e5ca00f22a3e2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:a8:5c:ae:d6:2c:16:1a:eb:aa:31:01:81:
f0:4e:ac:c2:ae:65:4f:c6:f4:6f:a3:65:e6:d4:8a:
51:86:3b:11:c2:5b:97:93:ca:df:3b:e0:41:2f:0f:
96:21:02:45:a6:6f:ff:29:16:5f:66:78:43:a5:0b:
65:b7:95:98:99:80:5a:e7:5b:d7:0e:4c:a2:27:a2:
67:33:b4:bd:c3:ff:41:00:a9:48:8c:0a:d8:5a:36:
4e:ca:7e:02:02:0f:12:35:75:0c:bf:90:c1:e4:05:
4b:43:bc:d4:78:73:e2:21:c6:41:e3:15:57:22:f0:
9c:02:85:ac:3e:cf:93:39:b0:cf:66:3d:23:4e:c8:
af:96:d4:d5:f1:1a:6d:73:ab:62:1d:35:64:a0:12:
9c:0c:b6:7f:7a:6f:30:42:48:c9:d6:eb:9b:30:0c:
b5:3a:e6:1b:a5:ee:53:af:0d:b6:34:14:ac:64:af:
2c:90:df:71:6e:66:b1:d1:63:9f:84:ee:a6:9e:cc:
79:4b:c2:bd:5b:02:79:fa:28:96:11:5f:81:95:b4:
75:d2:0d:e8:ec:77:fd:5b:2b:b0:df:4c:1c:2c:4b:
c0:93:e9:2a:b8:98:c9:b6:4c:e6:db:8a:c6:4d:51:
23:25:c6:47:c7:ae:9d:a6:c9:a8:e2:a6:3b:41:a2:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:77:D5:11:CF:91:2B:45:38:0C:51:E2:4E:5C:A0:0F:22:A3:E2:B2
X509v3 Authority Key Identifier:
keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/u3fVEc-RK0U4DFHiTlygDyKj4rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.160.0/24
IPv6:
2a02:2518:e000::/36
Signature Algorithm: sha256WithRSAEncryption
a3:47:8d:22:41:3b:f6:72:67:a6:7c:f9:a9:9d:fa:d7:df:44:
d2:00:10:ae:59:f9:c8:8e:de:d6:aa:3c:c8:94:3e:e5:2b:b1:
9b:bf:2f:ee:f3:d0:2d:6c:42:f5:5c:a1:81:5e:68:85:8a:24:
a5:f6:8d:a1:03:29:e4:57:48:66:6f:70:79:90:de:36:2a:43:
56:cc:a3:79:c1:d8:73:9f:f5:ec:a0:6a:80:ce:f0:55:80:80:
97:af:47:78:00:cf:0f:a5:f3:6b:76:31:38:93:e9:fc:2a:15:
4a:3f:52:bc:01:ec:dd:4e:e9:aa:db:90:d8:cd:38:f1:c6:39:
38:97:47:c3:66:c5:d5:4a:02:80:d7:52:2c:5c:e5:9a:ca:21:
da:a8:37:bf:bf:19:db:01:4a:ae:bb:ed:72:58:9f:d5:31:2f:
2f:33:58:7b:48:b3:21:f9:20:f4:53:4c:49:3e:1e:6c:3d:ac:
09:09:d3:14:16:76:49:16:0d:13:3a:30:b9:83:db:4d:b5:fa:
bd:c0:a2:fa:81:62:d6:ef:e5:d3:fb:42:29:d5:03:05:49:13:
10:62:ee:9c:e0:c4:bc:d3:23:5f:af:f6:b7:c1:3d:a6:70:a3:
7f:98:e8:a1:1b:ae:23:d2:51:20:88:62:12:34:25:fc:53:2f:
d1:a9:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 20:06:50 2025 by rpki-client