Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1Lb3amuENNw7Q5wQtjvcKSdAS7o.roa
File: 1Lb3amuENNw7Q5wQtjvcKSdAS7o.roa (raw, json)
Hash identifier: NEYY/xjbwdkudYEZZ2KWaw32wMK+/a0ShTG+jfkQXa8=
Subject key identifier: D4:B6:F7:6A:6B:84:34:DC:3B:43:9C:10:B6:3B:DC:29:27:40:4B:BA
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D3C42AFAFC5903D6B80F27F4A2BDD
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1Lb3amuENNw7Q5wQtjvcKSdAS7o.roa
Signing time: Wed 01 Jan 2025 15:47:48 +0000
ROA not before: Wed 01 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204827
IP address blocks: 77.220.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3c:42:af:af:c5:90:3d:6b:80:f2:7f:4a:2b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4b6f76a6b8434dc3b439c10b63bdc2927404bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:54:ec:e1:a2:0d:20:20:7f:6d:22:6a:ec:
3b:77:f9:96:f9:b7:bf:18:94:c1:74:17:08:d6:75:
8e:84:c6:4e:9f:cc:14:59:61:3a:a6:c4:15:d5:75:
f7:e6:62:b1:19:15:16:ce:6c:a5:b6:fc:6d:7c:f4:
68:c9:ae:f9:5e:45:65:cb:6f:9a:33:44:7b:bc:7c:
72:35:6f:ef:b8:92:22:68:80:16:9a:84:d4:7d:dc:
28:df:60:99:0d:d5:ee:71:64:07:d3:15:98:a9:b3:
23:88:03:d8:c6:b4:62:13:96:15:33:24:67:f8:5c:
1e:bc:f4:f9:a2:64:fc:67:7b:3c:ed:f8:28:84:73:
ee:1c:59:dd:cb:3e:5b:f7:d3:09:96:64:a5:b0:97:
8b:b5:4b:7c:0a:56:f7:08:d0:81:7c:46:12:7e:53:
bf:61:44:f6:82:83:04:76:fa:b9:a7:d2:c2:01:88:
4e:ef:73:b5:14:05:59:a4:6d:17:27:e8:70:a0:cf:
f4:16:46:ed:83:83:42:16:d9:62:9c:64:f4:cd:6d:
be:45:ad:51:db:f6:64:f6:75:b9:bf:11:ca:2d:ae:
22:09:49:2e:c3:32:36:e8:e7:13:e7:2b:1d:16:54:
79:81:63:0c:cf:54:80:d7:f5:fa:d1:ba:bf:6b:7a:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B6:F7:6A:6B:84:34:DC:3B:43:9C:10:B6:3B:DC:29:27:40:4B:BA
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1Lb3amuENNw7Q5wQtjvcKSdAS7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.210.0/24
Signature Algorithm: sha256WithRSAEncryption
48:01:d0:c1:82:39:38:54:ef:01:32:3e:28:7c:20:90:b2:9e:
5a:b6:ca:95:01:5a:b8:21:10:6d:d5:b9:e9:a5:ec:ce:a9:da:
66:cd:6c:f7:2c:5c:09:ee:44:79:b4:f8:d6:61:ca:56:b2:26:
9f:26:00:cb:7e:e9:36:50:d9:ec:ac:c1:74:0a:e0:29:c6:45:
2d:76:3b:2b:3f:51:f7:0f:7a:0a:4a:c5:a6:93:0f:d2:61:a7:
07:5a:61:9d:a1:78:59:4e:1d:de:54:c6:a2:ec:83:07:c4:a3:
e1:e0:03:0c:6d:00:36:14:24:50:26:80:b2:1c:fc:ff:ae:71:
06:0e:40:2c:be:1c:14:26:09:93:d8:6f:e2:7b:db:a8:3c:2e:
d0:12:d6:ae:33:39:cc:4b:2a:72:d2:37:f7:cc:9f:61:07:2d:
a7:29:84:d8:04:1b:d3:50:00:61:60:e1:e4:83:76:b1:e1:e4:
eb:ef:d2:8f:41:74:0e:f2:70:e9:89:34:bb:3d:ab:4e:09:84:
e4:c4:20:b6:8b:c4:5f:ba:84:4c:e0:c3:31:03:04:d0:94:f7:
e7:6e:d7:9b:a6:39:48:e1:ae:3d:cb:92:02:26:a8:97:3f:76:
09:6b:24:fc:9b:2f:88:1a:9f:65:ce:c8:b8:0c:40:11:fb:8c:
ed:09:68:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:54:57 2025 by rpki-client