Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/_2lRv88Gb4s0UGVaP2Mgmxw3ML8.roa
File: _2lRv88Gb4s0UGVaP2Mgmxw3ML8.roa (raw, json)
Hash identifier: kqmxs4EHa2TZhRmR5+4BZAkd9MXd2Id3FkNPJK6jmmM=
Subject key identifier: FF:69:51:BF:CF:06:6F:8B:34:50:65:5A:3F:63:20:9B:1C:37:30:BF
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 01941FFAA5EB6FB5A4534114379A7B565552
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/_2lRv88Gb4s0UGVaP2Mgmxw3ML8.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 77.73.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a5:eb:6f:b5:a4:53:41:14:37:9a:7b:56:55:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff6951bfcf066f8b3450655a3f63209b1c3730bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:3a:ea:27:56:0c:e4:59:b9:81:59:55:c7:
f5:49:d1:89:ac:64:ce:5e:c6:25:cf:cf:58:39:6e:
13:fb:c2:cb:19:0b:75:70:61:6b:ab:06:f3:e7:c3:
54:35:a0:b6:0a:b6:d0:6a:cc:79:d3:8f:74:4f:61:
ca:8c:a3:ae:72:8a:66:02:2b:a7:27:fa:62:17:66:
02:3d:5d:41:78:99:4f:62:ad:06:8e:2f:13:45:06:
85:fe:d1:42:77:fc:a9:75:3e:7d:1e:6a:95:41:66:
c6:c5:2c:d3:e7:e9:07:01:05:15:6a:49:95:0f:5f:
85:25:0c:68:32:ee:3f:53:91:53:99:50:60:52:7a:
d4:95:b9:9c:81:21:c7:90:e1:06:44:f0:b2:47:5b:
c7:01:b2:49:14:50:2f:0f:3a:dc:0b:0d:ad:b4:f2:
ed:8a:1c:22:23:d0:20:df:67:30:a2:6f:b3:33:47:
0c:44:f2:df:14:b9:ab:68:6e:b7:aa:82:d0:21:53:
48:42:49:f8:e1:4b:50:64:a5:ea:f4:52:b5:51:69:
b6:4e:8a:ee:3f:4d:e5:7f:4d:13:39:87:0d:83:9b:
d0:e0:b1:6f:84:e6:03:9d:c2:1b:fd:8c:bc:df:4a:
0b:bb:f0:aa:e4:cb:45:f4:dc:49:c0:c0:eb:5f:12:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:69:51:BF:CF:06:6F:8B:34:50:65:5A:3F:63:20:9B:1C:37:30:BF
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/_2lRv88Gb4s0UGVaP2Mgmxw3ML8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.217.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:41:5e:97:93:8b:53:a9:90:89:26:0f:71:66:06:07:e7:3a:
08:b5:da:8f:2d:a8:b0:2f:f7:13:89:65:6e:f5:dd:1f:80:c3:
8a:5a:a6:6c:dc:31:d6:46:b9:b6:70:b5:dd:c7:c5:2b:e1:b1:
29:aa:ad:87:4c:37:01:51:45:12:77:d1:3e:b2:04:77:b4:84:
16:48:a6:40:d7:36:30:41:34:a0:5c:15:1a:05:18:79:19:87:
4b:8f:c1:76:6d:dd:56:0b:60:ab:0f:39:0f:ed:e8:03:b5:20:
4a:e4:b1:2d:73:7e:a0:f2:1b:a2:d7:b3:a7:1b:89:83:f6:21:
b5:0f:49:30:2b:41:93:d8:9a:87:52:ca:4b:f3:c4:eb:a5:ad:
b8:73:cd:ad:3d:b3:d6:d4:cd:9a:c5:eb:2f:1e:fc:8c:e7:34:
d7:03:61:72:68:ca:79:20:43:cd:89:db:fa:99:28:12:cc:d2:
e8:da:72:8a:a1:f0:5c:77:30:68:4f:d2:12:77:39:6a:7f:fd:
17:4a:07:af:ff:36:64:76:d7:d9:c3:6c:33:3e:2e:40:43:93:
d8:15:ef:64:a4:b9:34:2f:b8:7e:34:f9:f1:a4:35:b1:28:49:
52:c2:0d:da:8a:bc:96:c2:32:dc:84:36:a6:0c:b7:45:6f:28:
38:ff:86:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:20:48 2025 by rpki-client