Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/G3ImFHLtbmsMf5rUjwyvseD1Jdo.roa
File: G3ImFHLtbmsMf5rUjwyvseD1Jdo.roa (raw, json)
Hash identifier: 536+ZfqIcxOTwtAgeQmAiAD0GC8gTXOk5hvJScPdPy8=
Subject key identifier: 1B:72:26:14:72:ED:6E:6B:0C:7F:9A:D4:8F:0C:AF:B1:E0:F5:25:DA
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0194282425F47EE384CF0C226446C6CEF5DF
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/G3ImFHLtbmsMf5rUjwyvseD1Jdo.roa
Signing time: Thu 02 Jan 2025 17:50:45 +0000
ROA not before: Thu 02 Jan 2025 17:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57912
IP address blocks: 77.76.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:25:f4:7e:e3:84:cf:0c:22:64:46:c6:ce:f5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b72261472ed6e6b0c7f9ad48f0cafb1e0f525da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:1a:ee:eb:d6:10:80:62:be:02:a3:fb:02:
a5:7b:fc:97:47:a7:90:b4:f5:17:4a:97:9e:50:b4:
ec:04:f9:5d:09:fd:7e:0f:51:a8:f9:cf:3c:23:80:
f7:21:cf:be:ed:52:0c:d6:c2:60:2e:a1:d3:97:96:
4d:cf:92:ea:37:84:3b:33:1f:60:d2:d7:2e:e1:fe:
3f:be:3a:5f:74:a2:0f:14:97:72:ad:c4:a8:ac:4d:
37:28:1c:1c:ff:f6:1a:02:11:98:81:7e:be:d4:ec:
10:90:e5:64:39:78:39:4c:51:84:65:18:49:b2:1f:
fd:d2:d7:82:ed:ec:78:5f:35:05:68:07:06:48:26:
6b:2b:3e:e9:52:17:b4:ab:81:31:91:3a:b6:1a:b2:
d6:1e:53:5d:d6:bf:81:0a:5a:08:2e:1d:00:37:c5:
45:22:bb:69:aa:68:fd:f2:35:8a:81:37:57:f1:da:
46:8b:2c:3d:f8:83:25:e9:fd:0b:ac:d3:8e:66:89:
2d:f1:07:60:ec:12:35:fd:32:17:7c:73:78:fc:7b:
b8:83:d8:b1:32:64:3e:ab:7c:0a:d0:a5:29:72:62:
c7:65:ba:64:75:85:06:90:02:ac:f2:8a:73:cd:23:
36:40:eb:4d:7a:63:df:d3:05:f5:c6:30:07:45:34:
cc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:72:26:14:72:ED:6E:6B:0C:7F:9A:D4:8F:0C:AF:B1:E0:F5:25:DA
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/G3ImFHLtbmsMf5rUjwyvseD1Jdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.12.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a9:50:9d:63:69:a4:88:ec:c9:43:d1:0c:47:a1:5f:69:2d:
ea:da:a3:e2:a4:92:ff:33:49:a2:db:eb:86:56:6f:86:9a:d1:
22:e8:05:2d:f2:8e:e1:bc:94:0a:64:f6:f3:6b:f5:60:cf:e6:
c8:8f:c0:82:85:5a:b1:55:88:48:be:37:be:17:d5:84:93:d0:
67:e7:e3:c5:e5:ca:69:fa:c9:9a:70:56:aa:0b:f8:b9:a9:82:
0b:00:f7:d2:62:d8:8a:d2:5a:3b:4e:e6:b1:b3:14:4a:e8:cc:
12:32:fb:9a:c0:0a:8a:7a:85:7f:6d:7d:ad:f4:96:c4:69:ac:
5c:59:53:da:18:c2:df:e2:a2:5f:09:bb:b6:59:c9:46:b9:5d:
38:30:75:d2:7e:94:8c:f3:c8:14:b9:18:da:58:34:88:9b:2b:
cc:cb:5d:15:37:38:0f:54:5f:e1:fc:f0:f0:f4:e1:28:18:d5:
d6:af:e4:12:79:d2:6e:6f:65:df:89:3b:94:07:61:66:ab:93:
70:b6:2d:1d:54:e3:ef:e3:b2:5e:74:33:df:9e:26:0e:af:56:
e2:99:a4:49:32:dd:74:9f:ac:46:37:85:40:4f:03:72:59:fb:
a7:8b:02:4b:1e:4f:5d:85:dc:a8:2d:5f:c0:0b:52:6a:98:6a:
32:97:ce:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:25 2025 by rpki-client