Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/77z8QXKc8ERahKIbASlcnYfSpXA.roa
File: 77z8QXKc8ERahKIbASlcnYfSpXA.roa (raw, json)
Hash identifier: 4+qUdKw0CqogSD0bEzw5oz5fN5HdO2eQJ/PSKGd57hQ=
Subject key identifier: EF:BC:FC:41:72:9C:F0:44:5A:84:A2:1B:01:29:5C:9D:87:D2:A5:70
Certificate issuer: /CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Certificate serial: 019420D5AD9B975D183BA588D7F6E79AF63A
Authority key identifier: 8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/77z8QXKc8ERahKIbASlcnYfSpXA.roa
Signing time: Wed 01 Jan 2025 07:47:41 +0000
ROA not before: Wed 01 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2200
IP address blocks: 134.206.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ad:9b:97:5d:18:3b:a5:88:d7:f6:e7:9a:f6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9e7ffe8858387ed1b3a7eca76205ef0e21f6
Validity
Not Before: Jan 1 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efbcfc41729cf0445a84a21b01295c9d87d2a570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bc:7a:21:de:f8:95:76:6d:ab:3a:6f:f8:58:
ae:bc:17:de:5d:38:29:68:28:9f:4e:21:f9:e4:c7:
d7:e0:3f:4e:ef:6a:24:73:c2:7b:aa:77:bb:0e:54:
c0:fe:6d:84:c2:93:f5:56:e2:65:7f:a4:72:7a:dd:
18:53:0b:16:63:b0:0d:68:a7:db:24:e2:3c:b5:b4:
8c:36:1a:ad:2a:98:d2:1c:10:b5:bc:a1:bb:30:80:
82:7b:9a:ca:fd:85:79:47:e5:15:ae:8b:ac:8a:68:
05:75:98:3a:77:5a:6e:ca:13:76:e1:f1:ef:a1:1f:
50:4c:85:91:ff:3b:11:ae:80:1f:0d:e7:4a:1f:7c:
ac:c5:24:9c:5c:16:0f:84:a6:8e:ec:c9:b3:00:ae:
91:ea:72:f9:cb:8e:3e:89:ff:5b:50:81:95:4b:81:
b9:af:06:26:ee:86:b6:a8:27:d0:cb:ce:e8:c3:23:
a8:5c:d9:4c:64:e2:bf:21:06:b0:0c:40:ae:4a:b3:
93:32:83:fe:bb:9a:4b:f6:4a:fc:7f:58:b8:5d:51:
f7:61:79:9e:93:29:eb:58:aa:4c:0b:03:f9:17:c6:
a6:46:20:39:7e:e7:f2:c7:bc:f3:a3:8f:69:8e:1d:
cd:44:ab:7f:7c:4a:30:65:11:c8:75:89:d1:ba:54:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BC:FC:41:72:9C:F0:44:5A:84:A2:1B:01:29:5C:9D:87:D2:A5:70
X509v3 Authority Key Identifier:
keyid:8F:3F:9E:7F:FE:88:58:38:7E:D1:B3:A7:EC:A7:62:05:EF:0E:21:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-ef_6IWDh-0bOn7KdiBe8OIfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/77z8QXKc8ERahKIbASlcnYfSpXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8420e6-8c3e-4ccb-b143-e7acf941f375/1/jz-ef_6IWDh-0bOn7KdiBe8OIfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.206.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:ae:56:2b:c6:e2:e7:48:f4:a7:94:34:95:a7:6e:5e:54:b2:
1a:f3:db:14:3c:27:89:c1:3b:07:db:6a:fa:a7:82:77:d8:e7:
e2:dc:f2:a7:df:d9:11:06:c4:cb:86:75:8d:97:88:83:c8:46:
89:d1:7d:b8:bc:b8:64:e4:bf:fc:3b:4c:af:12:0b:cd:9b:85:
61:a2:e8:ce:f5:22:b3:ad:2a:77:e2:7e:f1:bf:cb:66:f6:11:
ee:ad:5a:c1:35:c6:bb:ef:49:47:89:7d:5e:28:a9:15:11:a7:
42:de:e9:57:db:3c:b7:c4:89:d0:21:24:70:10:9d:66:c7:48:
a2:55:80:b7:2d:a2:04:fb:e6:25:30:6e:6c:ee:4e:84:11:69:
f9:34:05:c8:12:16:7c:dc:0f:1d:63:5d:3d:60:30:2c:15:1a:
dd:fa:c1:eb:16:fb:2c:de:1d:ac:6c:82:9f:34:6c:b8:7c:cf:
20:c8:40:a8:2a:ea:8a:f5:55:42:93:13:d6:76:96:22:7f:e9:
ed:bb:72:46:60:9f:4d:c0:bf:c6:5b:4a:7d:f7:70:4c:e3:40:
1a:c0:6a:dd:e7:31:95:76:a5:68:94:f9:c2:4d:fe:b6:2d:94:
d5:7b:96:de:17:df:41:12:39:ed:e5:ae:7b:65:c4:ea:ec:af:
c8:d3:5c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:46:55 2025 by rpki-client