Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/aBe_qtLg50vG-QMNS0DazoOJIzc.roa
File: aBe_qtLg50vG-QMNS0DazoOJIzc.roa (raw, json)
Hash identifier: o7O5hbF44CxzgFroAfMy5Oe9mhj/OcqkE277oD0IFeY=
Subject key identifier: 68:17:BF:AA:D2:E0:E7:4B:C6:F9:03:0D:4B:40:DA:CE:83:89:23:37
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 01966D4C7905B72DFB61690E2F2F91BAFC9A
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/aBe_qtLg50vG-QMNS0DazoOJIzc.roa
Signing time: Fri 25 Apr 2025 14:14:10 +0000
ROA not before: Fri 25 Apr 2025 14:14:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201642
IP address blocks: 77.111.64.0/22 maxlen: 22
77.111.64.0/23 maxlen: 23
77.111.66.0/23 maxlen: 23
185.143.237.0/24 maxlen: 24
194.164.0.0/23 maxlen: 23
2a14:3200:2a14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6d:4c:79:05:b7:2d:fb:61:69:0e:2f:2f:91:ba:fc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Apr 25 14:14:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6817bfaad2e0e74bc6f9030d4b40dace83892337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:e9:c9:e7:fc:c4:07:62:b9:f2:46:b7:7d:
3c:b4:07:3f:3e:e0:77:1b:33:dc:65:ae:00:e8:64:
ec:3e:e9:b6:3d:e6:6e:94:bb:d3:db:4f:1e:0b:93:
3b:05:c3:25:bb:84:e3:46:b2:cf:62:ba:fc:29:5b:
9c:05:25:cd:60:6f:32:16:33:a1:ed:b9:05:ba:df:
61:5c:4c:9a:bd:f0:99:14:7a:73:25:a8:4e:94:91:
09:86:77:31:92:5b:5f:1b:c3:67:29:aa:80:5d:9a:
5e:91:3f:54:a2:5f:1d:5d:6b:8d:43:03:66:2a:84:
a9:f1:fb:bf:76:f6:8a:41:30:3f:5e:0d:7d:ef:f4:
d8:71:24:05:64:29:95:5b:6e:52:a6:74:2c:2a:1b:
f2:72:ce:fb:d7:ec:4f:a5:b4:31:56:b5:16:15:cf:
e7:81:53:c6:3b:e6:90:2f:b2:ee:d0:70:db:89:cc:
52:e5:e4:2c:32:28:eb:9b:b8:c7:d0:b2:7e:7a:b2:
89:e9:91:ef:d6:2b:17:2f:c8:6c:a2:49:8b:25:f0:
b0:26:36:d8:13:2b:dd:b5:17:21:f8:a6:60:ea:99:
41:1d:6d:5e:67:14:fe:df:ee:37:aa:e9:81:88:63:
08:08:a1:22:8e:c5:62:6a:35:e7:6f:c9:a0:e7:f9:
bc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:17:BF:AA:D2:E0:E7:4B:C6:F9:03:0D:4B:40:DA:CE:83:89:23:37
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/aBe_qtLg50vG-QMNS0DazoOJIzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.64.0/22
185.143.237.0/24
194.164.0.0/23
IPv6:
2a14:3200:2a14::/48
Signature Algorithm: sha256WithRSAEncryption
28:28:20:15:82:cb:6f:df:73:a5:b4:2d:12:e3:41:cd:3e:46:
20:fd:84:b8:cb:72:1f:90:4e:8e:c6:9a:9a:13:b7:c6:a7:c6:
aa:d6:5e:6f:3c:83:94:4a:52:58:4c:24:72:77:39:37:25:31:
f9:58:69:05:6b:3f:46:50:47:1e:fd:a0:1c:6b:48:f7:44:18:
da:3a:6a:a3:7d:62:10:c0:9d:9d:a3:2a:e7:73:f1:ab:6b:53:
0d:01:2e:70:12:43:79:e9:a4:a1:1f:fa:36:8f:df:e2:f9:63:
4d:65:68:aa:3f:4d:2f:69:07:ea:42:4b:1a:2d:1d:f6:30:2d:
94:2d:b1:11:28:7b:a4:0d:fa:7e:d7:19:c4:57:9c:af:21:ca:
33:f9:1d:4b:19:22:4c:71:fd:06:64:e6:64:56:10:c1:8c:bb:
2d:03:3d:aa:ae:24:4e:e8:1f:94:37:ac:f7:dc:8a:42:62:26:
40:60:db:cd:1f:cf:8e:3b:57:91:6b:ca:75:b2:69:80:5b:ee:
8a:10:30:7f:a5:17:00:ea:40:05:fd:7b:84:f9:51:90:98:7a:
3b:dc:53:96:7a:b2:95:a6:7b:2b:d9:09:8f:ab:d9:cb:66:66:
31:a0:56:3e:9f:72:0d:77:f9:49:76:26:10:45:33:d6:37:fd:
e9:5b:c0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:34:24 2025 by rpki-client