Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/cFSFiUfgBt4Spc18H9-ZzF1183k.roa
File: cFSFiUfgBt4Spc18H9-ZzF1183k.roa (raw, json)
Hash identifier: ZNWRHScgd4Ned1XFsxXmg0KrCa9M5D/jC/IqkvHvkmQ=
Subject key identifier: 70:54:85:89:47:E0:06:DE:12:A5:CD:7C:1F:DF:99:CC:5D:75:F3:79
Certificate issuer: /CN=556e82265afb6ba60ee0b0c503c48ca8a09edb34
Certificate serial: 019523AFDCEDBE96A75CBC450E675C7802D5
Authority key identifier: 55:6E:82:26:5A:FB:6B:A6:0E:E0:B0:C5:03:C4:8C:A8:A0:9E:DB:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/cFSFiUfgBt4Spc18H9-ZzF1183k.roa
Signing time: Thu 20 Feb 2025 14:08:02 +0000
ROA not before: Thu 20 Feb 2025 14:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42876
IP address blocks: 77.221.224.0/19 maxlen: 19
77.221.254.0/23 maxlen: 23
86.54.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:af:dc:ed:be:96:a7:5c:bc:45:0e:67:5c:78:02:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556e82265afb6ba60ee0b0c503c48ca8a09edb34
Validity
Not Before: Feb 20 14:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7054858947e006de12a5cd7c1fdf99cc5d75f379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:60:ff:84:1b:57:07:68:f1:89:59:cd:60:
24:7a:81:f4:bd:ab:9a:24:ae:cb:8b:e1:10:68:a5:
38:d4:66:37:2d:cc:fd:70:be:d8:c0:c9:0d:e7:64:
46:72:8b:e2:20:de:6c:fd:b1:e2:0f:4a:0a:8a:ac:
7a:85:50:44:63:cd:fc:e0:5f:b9:52:56:a5:c3:15:
f9:4f:e3:fb:c4:04:46:90:1f:61:b5:e1:d1:15:8a:
a1:fc:61:96:fa:5e:1a:36:76:50:f5:e6:6c:3b:80:
b4:f9:b6:94:33:77:31:9a:c9:a8:fd:70:6b:2e:dd:
06:9d:9c:41:e9:fb:45:36:7a:34:03:35:d2:25:22:
de:7d:13:07:9a:72:66:15:69:3e:f3:33:87:4c:49:
14:0c:8a:b5:68:2b:2d:3c:d5:c4:2a:e6:93:33:c5:
ee:90:ec:9e:0e:e5:71:b3:2d:30:ff:36:95:fe:3e:
69:82:f2:31:4a:6d:52:93:b2:9c:81:6a:19:93:30:
9e:f6:84:d0:b3:c3:77:63:fc:92:3c:93:52:3e:35:
4c:a3:f8:e3:56:a4:5f:78:7a:ce:83:b4:96:13:c2:
71:92:c4:f3:95:c1:e7:4b:f3:e6:c9:74:1b:5f:e7:
23:ce:6d:7b:a8:f5:8b:6d:cc:c2:30:3e:29:75:ed:
e7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:54:85:89:47:E0:06:DE:12:A5:CD:7C:1F:DF:99:CC:5D:75:F3:79
X509v3 Authority Key Identifier:
keyid:55:6E:82:26:5A:FB:6B:A6:0E:E0:B0:C5:03:C4:8C:A8:A0:9E:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/cFSFiUfgBt4Spc18H9-ZzF1183k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/92d5b2-f793-489d-84c9-6bbca4d757a3/1/VW6CJlr7a6YO4LDFA8SMqKCe2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.224.0/19
86.54.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:7d:e1:e3:9b:b8:b8:e4:47:b4:2e:5a:5e:52:23:24:1d:e3:
76:a9:19:98:79:64:d5:5e:7f:c4:bb:05:0d:f2:c0:ba:9a:d1:
4a:a5:37:32:4f:72:f5:67:0c:04:ef:f4:d1:fb:b9:b2:33:28:
76:18:91:64:0b:ce:06:af:d8:dd:71:91:0c:b4:0f:ae:b7:17:
ab:ea:1f:26:b3:ea:6d:77:d6:ec:e9:a8:1b:57:f2:75:54:c7:
3a:c7:68:4b:dd:15:3c:b9:c9:07:81:3d:1f:b1:b5:64:2e:f5:
42:ef:ad:b5:4a:72:da:84:52:cc:cb:d4:df:f2:a0:50:d6:f3:
b7:f9:83:59:4b:e5:f9:ae:30:d3:1b:6d:72:98:7e:17:73:26:
37:64:56:99:73:5d:f5:97:86:54:87:a5:69:d1:f0:19:24:39:
9a:95:5d:fc:f6:e7:ac:19:af:bb:92:c9:a8:5e:79:17:41:4e:
d0:b5:61:11:09:06:e7:f2:c7:4d:9e:e5:59:cb:a5:4e:8a:54:
00:c2:42:5f:46:7e:e9:9e:45:20:8f:73:6b:25:2d:f4:f3:4d:
f1:3a:26:cc:46:4d:6b:02:69:5f:bb:a3:b3:c4:71:4d:b1:72:
f2:8a:0b:0e:60:c5:d3:97:e9:25:a7:8d:ac:e2:76:42:3b:b0:
da:aa:3b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:46:19 2025 by rpki-client