Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/zaNwxj2L7Rv3Ag3yOTaE8ywz-X8.roa
File: zaNwxj2L7Rv3Ag3yOTaE8ywz-X8.roa (raw, json)
Hash identifier: FWtS/Zmb6js9uR2wayKJhPmihHTbDfbggHKTL98KeAk=
Subject key identifier: CD:A3:70:C6:3D:8B:ED:1B:F7:02:0D:F2:39:36:84:F3:2C:33:F9:7F
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA41FF6695AC9B50350E0ACF5D6165
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/zaNwxj2L7Rv3Ag3yOTaE8ywz-X8.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 983
IP address blocks: 77.37.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:ff:66:95:ac:9b:50:35:0e:0a:cf:5d:61:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cda370c63d8bed1bf7020df2393684f32c33f97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:37:bd:55:a3:80:b5:42:d0:97:64:92:af:
1c:e7:22:e8:e2:22:a6:ad:4c:7e:66:22:5b:b5:c9:
96:f9:fd:57:d3:d5:d3:db:11:17:21:af:7e:72:22:
e2:70:a3:63:ed:95:4d:dc:93:8f:3e:38:d2:e7:aa:
24:b4:2f:0c:f5:8d:46:fe:0a:df:01:b4:27:bc:cf:
3b:6d:33:dc:03:83:86:1c:e9:4a:8b:9d:6a:f5:c2:
5c:a7:bf:83:dc:46:9c:d2:de:6e:af:cb:ca:f1:82:
6b:a5:a0:67:08:48:d8:9d:ab:dd:ee:0c:47:f8:f4:
59:79:94:36:eb:89:d2:a7:e4:f9:d0:8f:a7:c1:bf:
30:a5:48:32:a4:4b:c9:02:9b:90:fa:6b:44:d9:7e:
20:70:82:c8:9b:13:93:75:43:50:a3:fd:60:0f:02:
1a:fb:3a:5f:56:9c:3d:07:e9:9d:a1:11:80:d4:9e:
3f:47:41:6b:dc:aa:12:f5:6c:37:ee:81:7b:33:c1:
81:6a:16:10:89:45:ba:f7:41:eb:4b:09:fd:56:13:
08:59:33:34:36:a5:e3:e5:9b:33:61:10:53:2a:7b:
07:31:b6:ef:d1:31:ca:e4:7e:5f:b4:05:50:05:de:
10:89:3b:8c:95:9f:15:88:a7:e5:68:83:7b:87:b4:
fd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A3:70:C6:3D:8B:ED:1B:F7:02:0D:F2:39:36:84:F3:2C:33:F9:7F
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/zaNwxj2L7Rv3Ag3yOTaE8ywz-X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.77.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f8:31:51:17:6a:92:16:7d:ef:6d:61:83:d2:f4:40:b4:63:
d4:9d:51:7b:8c:19:d4:60:e5:d7:50:22:ec:a6:23:c5:5a:d9:
a6:f6:37:20:bb:78:5f:4c:1d:b3:05:d6:e5:60:7a:fd:90:88:
ba:80:da:55:7b:5b:5e:3c:c2:b0:de:f4:03:52:b4:da:11:dc:
44:ea:60:b9:78:7d:b3:bb:37:fb:74:2c:22:16:c0:69:68:ce:
2f:95:5e:ab:d0:64:72:f7:7c:16:e2:6a:ac:66:75:c0:d7:6b:
ee:21:e0:a7:ee:37:d6:82:36:60:c2:11:88:17:df:d2:86:95:
8e:2e:f1:45:a7:b5:79:06:1e:5f:67:f5:52:d5:b0:fc:82:cb:
26:78:4a:10:b8:7b:7a:b5:d5:8f:0b:04:f1:cb:9a:63:68:e0:
64:49:04:6c:3e:89:09:e9:fb:12:a5:80:23:19:63:c6:66:ca:
71:50:56:b0:3c:a2:97:54:12:0d:31:e2:75:aa:f2:05:7a:1c:
49:ef:cd:35:9d:aa:b1:bd:d9:9f:e2:4c:1c:74:ae:73:34:b5:
d8:6f:c6:e8:dc:cc:10:77:86:7c:37:00:28:6c:fe:6a:eb:2e:
4f:4f:a4:4b:a7:40:f5:27:bf:0d:4c:9a:c3:18:fe:90:cd:64:
52:c4:d4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:13 2025 by rpki-client