Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Jdd260HXesX5eW-WuT6EaoXoml0.roa
File: Jdd260HXesX5eW-WuT6EaoXoml0.roa (raw, json)
Hash identifier: g3Nz1ZC0uKmly/c5w4Rsf0YvaQSRfzXp08mvX6iOj7E=
Subject key identifier: 25:D7:76:EB:41:D7:7A:C5:F9:79:6F:96:B9:3E:84:6A:85:E8:9A:5D
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D3D594A85FE441002E14456622EBA
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Jdd260HXesX5eW-WuT6EaoXoml0.roa
Signing time: Wed 01 Jan 2025 15:47:49 +0000
ROA not before: Wed 01 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206850
IP address blocks: 77.74.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3d:59:4a:85:fe:44:10:02:e1:44:56:62:2e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25d776eb41d77ac5f9796f96b93e846a85e89a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:f7:9c:1a:08:83:7f:53:78:d8:38:d9:16:
b9:76:56:89:59:25:43:df:4c:b6:2f:b5:94:c5:55:
1c:0d:ae:77:8f:c9:21:c0:77:f3:e4:b7:e8:66:8f:
7b:d6:ec:67:60:8c:41:3d:27:e9:9f:06:35:25:14:
45:8b:7b:c2:10:d9:65:41:94:a0:50:b8:55:8b:53:
df:ec:1a:ab:39:09:ba:c0:76:2c:9e:3a:c6:32:fb:
be:d8:df:0d:6f:99:71:f2:76:1b:d6:80:56:c2:3d:
8a:1f:6b:0c:c0:fd:93:3d:21:7e:4b:f5:a7:1f:29:
c8:4e:b2:5d:0a:7b:af:7c:61:7b:f6:62:83:11:85:
72:d3:82:8a:e0:3f:cb:01:e2:2a:8d:16:21:f1:95:
20:06:65:7c:57:6a:25:46:8e:58:5c:33:17:0f:85:
3f:68:aa:23:59:e3:c1:8d:02:fa:84:ff:68:69:d6:
8a:7c:16:23:99:95:96:35:66:5c:b8:73:44:ee:47:
47:96:b4:06:f6:01:3b:38:bc:33:96:88:c4:64:92:
2f:da:bf:4a:2b:fe:aa:29:48:eb:ea:05:45:0b:e1:
06:0b:e9:6d:80:37:e0:e2:f4:75:1f:18:60:6a:ea:
f2:70:7b:ff:e6:c9:38:5b:e0:99:1c:76:94:08:b6:
48:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D7:76:EB:41:D7:7A:C5:F9:79:6F:96:B9:3E:84:6A:85:E8:9A:5D
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Jdd260HXesX5eW-WuT6EaoXoml0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.76.0/24
Signature Algorithm: sha256WithRSAEncryption
64:0d:77:a3:a9:36:61:df:03:b2:21:de:ab:af:10:2f:22:19:
23:81:30:14:84:de:8b:c1:ca:8a:8a:57:ee:99:cb:16:6e:2a:
15:85:0f:0a:9e:a7:09:9e:71:99:ef:04:09:19:66:29:bb:55:
eb:94:32:1a:65:39:5a:92:68:b6:eb:22:5b:1f:b6:a3:e4:44:
55:44:b4:f6:31:70:25:c0:38:12:27:5a:ee:e0:c8:93:2a:ae:
53:94:6f:10:07:be:fc:a3:17:1e:a0:31:af:a5:6d:af:86:bc:
5c:8f:79:8e:ca:80:85:cc:6c:3c:56:4b:cf:62:86:9a:08:f1:
2b:ab:d7:fb:c8:ef:c0:5b:40:7b:a3:87:15:43:12:89:71:d1:
e7:4d:61:84:4f:d1:7b:46:50:31:a3:55:e4:ae:0c:ba:c9:a1:
0b:df:09:4e:62:ce:f0:5a:3a:b6:e6:85:de:75:82:18:74:6c:
4b:e7:ce:33:d8:e2:70:9d:94:7e:e1:6f:d6:4f:20:19:f7:d3:
10:15:78:83:17:be:ac:c8:9f:fe:35:25:46:41:5b:e2:15:31:
fd:3d:9d:f3:32:00:09:2a:4d:e9:26:64:17:f4:2c:69:01:2b:
08:62:c5:47:9a:0c:46:16:29:0e:24:a0:78:61:3f:fa:53:dd:
fd:7f:39:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:10 2025 by rpki-client