Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/x74EOmKncD9l8_LhQCmRyXpIz94.roa
File: x74EOmKncD9l8_LhQCmRyXpIz94.roa (raw, json)
Hash identifier: XUKb+7lZadJCXvjC4Jazh1w2/bHedabOWN8tK0nZBp8=
Subject key identifier: C7:BE:04:3A:62:A7:70:3F:65:F3:F2:E1:40:29:91:C9:7A:48:CF:DE
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 01942521886CB10434CD622592BA20898E99
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/x74EOmKncD9l8_LhQCmRyXpIz94.roa
Signing time: Thu 02 Jan 2025 03:49:02 +0000
ROA not before: Thu 02 Jan 2025 03:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 77.72.184.0/24 maxlen: 24
77.72.185.0/24 maxlen: 24
77.72.186.0/24 maxlen: 24
77.72.187.0/24 maxlen: 24
77.72.188.0/24 maxlen: 24
77.72.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:88:6c:b1:04:34:cd:62:25:92:ba:20:89:8e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Jan 2 03:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7be043a62a7703f65f3f2e1402991c97a48cfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:97:5e:9f:c6:f4:8e:29:71:06:bf:43:6e:
5f:50:dd:58:ef:a0:58:ea:2a:f0:4a:6a:3d:27:98:
b4:dc:8c:dc:ae:99:71:ec:52:d3:00:1e:82:e6:bd:
bd:8b:0e:b5:f4:26:ae:0d:91:4b:82:4f:68:41:0e:
d3:dc:56:8e:8c:65:9f:fb:3b:68:f5:ae:25:5b:2b:
69:bc:c4:0d:89:7c:2d:f2:af:1b:03:61:8a:92:48:
0c:3b:8c:fc:14:a6:73:3c:67:34:80:25:7a:c5:56:
f5:0a:ac:06:a9:29:0f:a5:20:59:40:09:96:8a:2a:
10:3e:88:ac:98:3a:50:e0:c1:fd:e8:68:95:f1:7c:
5f:4e:47:42:89:a9:7b:05:50:35:02:3d:e1:58:41:
d3:0e:35:b0:b5:69:ac:af:f7:e0:c6:ca:72:0a:b5:
87:e2:de:0e:cc:2c:f7:b6:77:e4:9b:2b:0d:56:8b:
26:23:bc:76:8d:69:d8:a9:1c:89:90:40:8e:2a:02:
58:f7:6b:9d:be:09:66:6a:a0:4e:e5:62:b7:df:79:
e6:b8:14:a9:8c:3b:92:d7:ca:97:6f:30:a5:0b:41:
38:cf:64:79:47:2f:06:f4:16:79:66:b2:ed:e0:fd:
1d:88:26:9a:66:ba:6b:da:24:65:63:d0:65:1c:a1:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BE:04:3A:62:A7:70:3F:65:F3:F2:E1:40:29:91:C9:7A:48:CF:DE
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/x74EOmKncD9l8_LhQCmRyXpIz94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.184.0-77.72.189.255
Signature Algorithm: sha256WithRSAEncryption
7f:0d:1f:4c:d1:14:de:65:32:6e:44:7f:e5:27:50:7f:46:1f:
b8:26:14:a7:9a:52:ad:25:27:2e:d0:57:36:28:dc:87:62:0f:
2c:01:9e:b1:ed:82:08:24:3e:58:5b:64:dd:c2:c4:e2:87:f5:
91:cd:85:66:dd:07:39:85:0e:c3:70:e4:ac:ff:0f:ee:09:7a:
20:a9:e5:78:8e:90:af:80:e3:0b:0a:a7:26:d1:f4:e3:7c:2c:
a8:07:75:12:08:f6:52:99:79:aa:72:b1:d8:9c:da:1e:00:fe:
f0:43:6b:83:ff:b4:0c:de:d8:fe:d2:ba:3e:3c:ad:d1:b9:98:
48:25:ed:87:86:b0:1a:36:fa:1a:dc:d6:5f:c2:a2:ba:7f:e2:
67:08:5b:d3:5e:95:3b:a8:76:27:4d:02:21:ff:4a:33:b9:4d:
ac:8e:1a:65:29:13:43:8f:10:3d:02:d3:1d:8c:96:25:c8:d3:
15:ef:fd:7d:68:63:04:85:1c:ae:73:cc:dc:ae:0a:9a:3b:15:
13:77:7e:20:7d:23:e4:cf:cd:36:bb:3f:03:6e:02:7f:7a:b8:
70:dd:48:46:9b:33:62:a9:46:07:c7:bb:ed:34:5c:3e:13:de:
90:ae:40:d0:8e:10:8e:60:f4:df:6c:3d:00:8a:3f:bf:df:7a:
e7:d9:ad:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:46:56 2025 by rpki-client