Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/vdc8LHeirosn85jHF2y6k4tZWpE.roa
File: vdc8LHeirosn85jHF2y6k4tZWpE.roa (raw, json)
Hash identifier: bWLLd9BGuNkbp8DQiZZnq80FzJLO4Q8aaegMFqU4oPI=
Subject key identifier: BD:D7:3C:2C:77:A2:AE:8B:27:F3:98:C7:17:6C:BA:93:8B:59:5A:91
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 019425FC72398C3AFCFAFD09A77BC9CDC402
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/vdc8LHeirosn85jHF2y6k4tZWpE.roa
Signing time: Thu 02 Jan 2025 07:48:08 +0000
ROA not before: Thu 02 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199224
IP address blocks: 77.74.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:72:39:8c:3a:fc:fa:fd:09:a7:7b:c9:cd:c4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Jan 2 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdd73c2c77a2ae8b27f398c7176cba938b595a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:ce:5a:8f:94:d2:48:4d:4a:a5:19:95:d9:
e3:33:ef:1d:6f:c4:7a:c6:5a:01:53:64:33:4c:50:
b4:35:21:73:74:16:fb:41:50:5d:ee:83:49:75:4c:
77:dd:45:27:e5:47:4b:44:25:e8:d2:8b:c5:4e:d8:
61:bc:79:75:7f:ff:e2:a8:7f:9f:5b:ee:4a:3f:7a:
fc:c0:8c:1c:37:c6:18:50:96:56:f5:f4:96:3e:cf:
16:6e:a6:e7:19:76:85:45:a1:c5:38:24:3a:cc:c7:
7a:91:f3:d3:bc:33:24:a3:c5:c2:61:41:59:75:ef:
c2:64:96:33:29:1a:f5:ba:3f:0c:c7:16:83:3b:c5:
b8:cc:a8:4d:19:6a:67:05:79:e6:6d:31:7b:85:27:
41:e0:1a:6a:80:35:e4:30:1e:25:9b:b9:c4:7c:27:
ec:48:52:4f:b6:47:b6:42:8c:14:3d:2b:d8:7d:ee:
bc:ae:32:aa:1f:8b:38:df:3b:55:02:23:e9:ed:e6:
88:0e:c1:d3:71:d9:db:77:0a:8b:10:cd:c2:65:cc:
2a:2e:c4:bd:f3:29:53:4b:e7:13:a2:5e:b1:00:ae:
ef:9f:02:98:d0:bc:5f:4f:1a:5d:01:d5:af:c0:a7:
01:c4:e9:bf:53:02:63:6c:18:8a:40:25:d8:82:46:
85:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D7:3C:2C:77:A2:AE:8B:27:F3:98:C7:17:6C:BA:93:8B:59:5A:91
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/vdc8LHeirosn85jHF2y6k4tZWpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.104.0/23
Signature Algorithm: sha256WithRSAEncryption
55:05:dd:cb:60:d8:3f:d4:1e:bf:ed:f2:22:5f:5a:47:c3:29:
6f:e9:10:bc:84:d4:13:c4:db:56:e2:da:91:ad:ae:0d:42:bd:
df:ad:52:04:98:a3:bf:11:b8:d7:e4:60:a7:73:02:a3:98:32:
3e:a5:69:f0:14:c7:2e:fd:77:a0:ab:48:47:4c:80:b6:9d:a0:
00:1d:29:7c:7d:d7:23:8a:66:dc:33:e5:71:ac:d2:bf:0d:04:
99:49:ad:97:8f:c6:2f:8f:75:02:a2:a3:4c:11:c1:35:2b:6a:
5e:b7:a2:c3:7a:16:bc:a0:ee:2e:57:07:fa:53:04:ae:59:3a:
db:21:d8:60:d2:70:b7:7e:b3:ca:5d:31:50:b5:67:25:0f:e9:
ed:d0:51:ff:5f:9a:9f:2d:bc:20:ea:e3:10:c5:86:ae:ed:f4:
ba:d5:85:40:f8:b1:bd:5d:3b:5d:47:da:a8:fc:fe:23:bf:9a:
57:d6:cd:dc:27:c4:86:a8:58:85:46:c5:2f:9d:8e:a5:2b:fd:
18:bb:09:0b:cd:8c:fc:8c:68:0b:a1:e8:43:a6:c9:67:7b:c1:
25:3a:30:5f:0c:a6:a5:fa:04:68:fb:fe:00:7e:36:68:a0:64:
bc:3a:42:1e:1a:36:a1:0d:a4:50:88:2f:43:47:c0:3d:be:3e:
f2:a9:fa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:31:07 2025 by rpki-client