Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/V5zbutGfbh5lgD5tOB55BSZL6mM.roa
File: V5zbutGfbh5lgD5tOB55BSZL6mM.roa (raw, json)
Hash identifier: 8dfbuUOKEzC/ptg0//A1zNKfTmzKWKS3nTLCemG3GRo=
Subject key identifier: 57:9C:DB:BA:D1:9F:6E:1E:65:80:3E:6D:38:1E:79:05:26:4B:EA:63
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0194258F22953941B729FA3ECC12B599A578
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/V5zbutGfbh5lgD5tOB55BSZL6mM.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44620
IP address blocks: 77.83.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:22:95:39:41:b7:29:fa:3e:cc:12:b5:99:a5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=579cdbbad19f6e1e65803e6d381e7905264bea63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ef:98:61:8e:7d:e7:8b:f6:7e:9c:e4:44:75:
6b:62:56:c1:57:f0:ed:79:7b:c0:ef:4c:2c:72:74:
85:19:2e:6c:cd:ad:a6:b0:1f:89:60:91:e2:f9:cb:
fd:1b:0d:10:7e:05:d1:bd:49:f0:aa:a5:44:c6:ad:
37:60:dd:fd:89:84:be:5f:68:d8:b5:83:44:30:99:
ff:57:cf:c6:cc:f8:4f:81:c1:e5:57:8f:24:0b:ef:
f6:e5:9a:16:99:94:4d:9f:89:b9:eb:24:3f:60:9f:
6a:63:4c:c0:80:3b:ed:34:7f:1f:dd:25:7f:72:65:
88:9f:7d:6d:4b:e6:58:48:d9:36:9c:71:40:b8:71:
be:8e:d6:de:85:f1:0d:f3:63:de:82:3b:93:ab:04:
01:49:e7:10:8d:94:49:d9:56:fb:e7:5a:de:21:47:
be:a3:c8:64:de:40:67:85:c1:37:7c:6e:bb:7d:fe:
32:d4:9d:a8:83:a7:14:f4:67:ec:c3:5a:b0:85:0e:
82:e5:a9:2a:15:5f:58:a2:2d:12:78:22:41:8b:2b:
10:07:ae:bf:62:17:02:4c:3b:4d:0f:38:54:03:c0:
dc:a7:b8:1f:97:af:ee:6a:2f:2a:99:d0:7f:ea:02:
f7:cc:fa:c1:1f:18:2b:bd:11:6f:d6:45:43:04:73:
4b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9C:DB:BA:D1:9F:6E:1E:65:80:3E:6D:38:1E:79:05:26:4B:EA:63
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/V5zbutGfbh5lgD5tOB55BSZL6mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:cd:ac:23:d2:dc:48:9f:5b:ad:2d:dd:10:e2:f9:65:06:38:
38:5e:9b:88:0c:2a:0f:f9:84:d9:d8:5d:49:e1:af:f3:74:48:
a3:4e:4e:1a:b3:cc:ca:76:69:ad:e9:7f:d1:5e:f0:82:9a:f5:
51:eb:10:6f:20:40:0e:6b:5d:14:47:75:0c:f2:ea:d2:28:a4:
b3:d9:2b:8d:69:8f:7e:6f:3a:d0:6d:03:d9:6c:92:45:0f:ba:
b5:f1:f0:6b:da:01:15:1b:fb:8e:35:35:c9:d5:d1:d9:ae:30:
e6:fd:6a:9b:c2:8e:0d:78:66:58:f0:bb:e7:c9:2a:01:16:b5:
b2:8b:e6:ca:89:5a:31:ea:35:12:06:50:d6:ac:b8:d8:a1:56:
dc:95:b7:69:32:17:74:8e:b8:57:e2:6d:8a:85:f7:e2:b9:de:
3c:c0:56:5d:86:b9:d5:c0:e5:f5:b1:98:74:25:ed:55:70:42:
9b:1e:4a:f4:ac:cc:02:22:4b:e4:20:93:ea:99:0b:2d:36:0d:
f1:65:2d:11:0e:bd:bd:8a:64:8e:ed:05:7a:fd:f2:98:06:25:
71:75:d9:d2:44:ac:e4:ac:55:9a:96:7f:2e:2f:77:1f:7d:0c:
17:6b:36:8d:29:12:59:38:6a:14:c5:db:fc:ed:09:90:5f:41:
8f:fa:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:58 2025 by rpki-client