Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/o9arxy8BV1cYwd7iSPspa4XP2pQ.roa
File: o9arxy8BV1cYwd7iSPspa4XP2pQ.roa (raw, json)
Hash identifier: d+zP4aJZH5NB/qmM1FWB6H43sW8ExQpahHNi6+kdqkc=
Subject key identifier: A3:D6:AB:C7:2F:01:57:57:18:C1:DE:E2:48:FB:29:6B:85:CF:DA:94
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194222014BA60C05675AC89618BE4D6C0E0
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/o9arxy8BV1cYwd7iSPspa4XP2pQ.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 77.111.102.0/23 maxlen: 24
77.111.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:14:ba:60:c0:56:75:ac:89:61:8b:e4:d6:c0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3d6abc72f01575718c1dee248fb296b85cfda94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:ee:80:c8:15:00:f7:67:94:9d:39:e1:1a:
54:fb:ae:9c:fd:3b:01:e6:3c:36:94:ae:2e:bb:81:
92:7b:8c:06:a8:4b:d0:d9:90:4e:3d:39:27:8d:f3:
e2:a4:8c:8e:a4:39:fc:41:e8:31:3d:90:7a:36:6a:
84:5d:43:91:a3:35:85:a5:ee:46:00:84:72:d4:4b:
2f:40:a8:ad:6d:69:3d:a9:ff:c9:3f:91:4a:1c:af:
be:e9:ab:39:b3:2e:91:0d:e6:37:fe:79:97:95:19:
cc:55:b5:28:3e:15:c6:76:ee:61:c5:ac:2a:03:f4:
5d:ca:7c:c3:de:a0:ed:ac:a2:4d:6a:1c:da:86:60:
d9:8c:cc:44:29:16:43:67:42:12:c7:73:08:05:a8:
40:9e:30:e1:e0:56:f4:06:97:d8:66:ea:83:42:1d:
71:e9:44:ee:73:57:90:6a:25:28:21:9e:37:bf:db:
71:80:4d:d4:3b:57:53:b8:e5:b2:27:8f:07:79:0c:
4b:4c:42:16:27:26:70:5d:75:e8:c3:74:43:dc:87:
a7:fe:60:c4:4c:86:8e:1a:3b:cf:78:9a:3b:8b:57:
35:01:b4:d8:5a:a0:4b:ec:e0:b3:93:8b:54:54:ca:
4f:c2:5c:c5:1d:f6:ac:54:07:bd:b5:aa:cd:2d:78:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D6:AB:C7:2F:01:57:57:18:C1:DE:E2:48:FB:29:6B:85:CF:DA:94
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/o9arxy8BV1cYwd7iSPspa4XP2pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.102.0-77.111.105.255
Signature Algorithm: sha256WithRSAEncryption
67:26:7a:b6:0d:9b:d0:99:05:23:8a:d2:b9:f1:ce:32:18:a2:
ab:09:2c:09:c0:0b:c3:b6:d1:74:9d:2e:5d:31:44:0c:59:52:
14:06:c4:93:a6:37:21:13:61:b2:63:69:2a:73:19:cf:16:c8:
33:44:fc:9d:2f:2c:ac:32:8b:cb:c8:82:92:a2:f5:f6:4f:8e:
bd:af:ef:b7:4c:ef:4b:e4:f8:d8:fc:3d:67:9b:2d:9d:cd:10:
51:68:ba:6e:94:34:fa:6f:4c:c8:38:10:4d:1b:6a:f0:41:e9:
b7:d5:fd:d3:ad:24:aa:eb:5c:af:03:1c:c9:0f:09:6c:17:93:
d5:7a:e8:d6:ec:2f:37:89:4d:5e:9d:f7:b6:85:26:5d:2e:4e:
69:a2:65:b2:57:1c:5e:a8:6b:52:6e:f4:87:21:cc:ea:ac:dc:
78:ae:13:24:03:14:0e:b0:61:5a:1d:be:b5:95:b8:19:e2:1a:
8d:ab:4a:4c:be:7b:02:ae:d7:28:27:a6:32:4e:ca:7b:e0:f6:
ab:4a:b2:10:15:1a:03:74:c5:ab:70:71:ba:68:7b:d9:82:dc:
00:fb:fe:6d:00:25:96:4e:bc:0d:bd:a0:07:51:66:e2:18:1f:
8c:c4:ba:3e:34:30:ab:07:3b:70:93:33:e9:75:f4:bb:ba:54:
ec:2e:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:47 2025 by rpki-client