Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2Q1EsGtW74Rf8DEek_duOfS7Dh4.roa
File: 2Q1EsGtW74Rf8DEek_duOfS7Dh4.roa (raw, json)
Hash identifier: Jokq9lObzqL/qji1vGDz/xcrnQOdEh0j/qOLg1O6bPs=
Subject key identifier: D9:0D:44:B0:6B:56:EF:84:5F:F0:31:1E:93:F7:6E:39:F4:BB:0E:1E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01962F5F0A8E32A33FD09D72622391A5815D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2Q1EsGtW74Rf8DEek_duOfS7Dh4.roa
Signing time: Sun 13 Apr 2025 13:37:59 +0000
ROA not before: Sun 13 Apr 2025 13:37:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214556
IP address blocks: 77.90.27.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:5f:0a:8e:32:a3:3f:d0:9d:72:62:23:91:a5:81:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 13 13:37:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d90d44b06b56ef845ff0311e93f76e39f4bb0e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:d4:c9:95:21:c9:f9:3e:4b:7d:bd:c8:d8:
e9:4a:01:15:5e:67:9e:f2:c6:40:f2:e3:5c:8d:e9:
eb:5e:af:77:02:d8:96:cb:aa:cf:f4:8c:e5:af:14:
e4:36:b5:4d:2f:d5:6d:2f:70:77:21:c4:11:47:6e:
fa:7a:23:74:e8:53:64:54:ff:73:cb:1e:5b:24:55:
42:23:7b:5b:2e:d0:0e:83:0d:ad:8a:b6:01:38:31:
ff:1a:fb:92:d8:99:c8:a3:bd:7f:5c:d2:2c:f1:f2:
f2:83:c1:3a:57:4b:67:76:64:ce:a0:b0:73:e6:25:
4c:93:79:36:14:e9:d8:04:c4:b6:da:1d:f7:24:98:
2c:16:9d:9b:62:79:c1:2a:ab:de:dd:e9:b8:53:a9:
76:31:0b:4b:fe:33:28:a7:8e:3f:b7:d6:01:77:4f:
a4:3b:31:8d:c8:1b:6a:b6:fe:d6:24:4d:c2:f2:fe:
d1:8a:92:36:d3:f2:e0:3a:47:33:8b:4a:24:56:d1:
1a:ec:9a:dc:22:e0:bd:b3:ac:96:e1:32:00:61:e1:
86:57:4d:44:bf:d7:6a:fb:d2:54:d3:00:64:80:ef:
62:b9:2f:ec:1d:d0:72:6f:e5:2f:9d:17:2c:d8:45:
7f:47:db:e8:3e:21:02:63:75:d3:5c:01:94:a2:2e:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0D:44:B0:6B:56:EF:84:5F:F0:31:1E:93:F7:6E:39:F4:BB:0E:1E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2Q1EsGtW74Rf8DEek_duOfS7Dh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.27.0/24
77.90.47.0/24
Signature Algorithm: sha256WithRSAEncryption
13:23:76:24:f9:f3:13:f4:b5:99:2e:cc:51:98:80:af:80:d3:
10:14:ce:8a:57:1e:55:86:53:15:89:1b:14:ea:f4:15:de:f8:
d7:46:d3:1d:29:96:2d:ac:92:4e:69:3a:f7:c2:aa:72:7c:c7:
7a:5f:19:2e:5e:f4:53:19:39:01:35:f7:69:4f:0f:da:04:4f:
ec:24:7f:e5:e2:1c:60:a7:40:fd:1c:cb:03:a8:5a:fe:c1:fe:
47:0f:bf:4e:03:80:19:9c:ae:58:f9:4a:cf:0c:bb:dc:ee:a6:
de:89:0e:6c:51:9e:8e:88:47:44:3d:50:92:c6:ab:7d:6e:b6:
f4:9e:1b:b5:07:07:0d:98:46:8b:36:21:d3:13:b9:ab:f6:4d:
92:2b:b2:fe:c7:64:cf:11:1e:a6:44:00:12:39:56:ab:45:3d:
6d:e7:20:33:72:a7:23:ea:fb:54:65:3d:40:0f:4a:79:0d:d8:
68:17:f5:d8:fe:8d:75:8e:e2:9f:c2:4f:f6:22:37:a1:39:0f:
37:bc:36:ac:70:42:34:c5:73:2f:85:64:d0:6e:7b:94:dd:24:
34:0a:b2:67:e5:e5:0d:27:22:45:a7:c2:6e:a4:26:25:04:20:
a4:e5:30:17:b6:b2:c1:6e:32:82:ad:a4:89:eb:d9:e0:84:08:
48:ed:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:26:50 2025 by rpki-client