Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VvzG3INWjh002CnYDd7qXT4wuyw.roa
File: VvzG3INWjh002CnYDd7qXT4wuyw.roa (raw, json)
Hash identifier: AQgKEDrRbVn2u3sD7wlFGQhq56tpNw9Dir/9g8t6FF0=
Subject key identifier: 56:FC:C6:DC:83:56:8E:1D:34:D8:29:D8:0D:DE:EA:5D:3E:30:BB:2C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0196800283A8F3598F5CAE2BB4857ED98EF7
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VvzG3INWjh002CnYDd7qXT4wuyw.roa
Signing time: Tue 29 Apr 2025 05:26:10 +0000
ROA not before: Tue 29 Apr 2025 05:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273221
IP address blocks: 77.247.120.0/24 maxlen: 24
77.247.121.0/24 maxlen: 24
77.247.122.0/24 maxlen: 24
77.247.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:02:83:a8:f3:59:8f:5c:ae:2b:b4:85:7e:d9:8e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Apr 29 05:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56fcc6dc83568e1d34d829d80ddeea5d3e30bb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:cc:78:4d:32:99:a9:76:d5:10:2b:9d:e0:
7d:0a:b7:9d:c3:a6:9f:88:13:bf:fd:ea:4c:70:d0:
59:32:a5:3a:a7:df:93:bb:06:a9:e1:91:c4:c3:fe:
c7:24:d1:83:6c:9a:2a:56:69:74:23:13:91:d0:f3:
71:d8:7e:51:a4:03:5b:1f:82:02:c4:ac:c9:26:cd:
97:15:a7:32:a1:f0:fb:44:de:80:3d:19:5e:c2:f1:
4c:82:34:56:59:db:e4:b4:85:09:fb:82:ca:df:3e:
63:99:c9:0c:df:09:eb:c9:aa:8c:f7:9d:ec:c2:74:
36:9a:7f:46:5a:22:78:b3:f7:74:d2:71:dc:9c:04:
79:60:19:c8:c2:13:c7:86:02:da:3f:e6:1e:84:3d:
71:af:58:5c:4b:9b:37:a6:4e:07:eb:6a:c7:45:dd:
1e:0c:8b:54:9e:97:18:82:fa:e5:b4:5a:96:a8:60:
97:1c:1c:a2:86:01:ae:4e:8a:05:94:90:db:61:49:
a3:5f:87:6e:df:69:8f:93:0b:c8:c2:eb:16:f8:26:
da:f4:55:45:3b:f9:f0:22:a0:8a:6e:47:26:fb:80:
9f:c7:0b:b3:0d:2e:36:29:fb:e5:5e:74:4c:e2:b3:
81:95:53:34:3d:3f:58:14:10:65:26:f6:44:26:75:
5c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FC:C6:DC:83:56:8E:1D:34:D8:29:D8:0D:DE:EA:5D:3E:30:BB:2C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VvzG3INWjh002CnYDd7qXT4wuyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.120.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:45:d3:fb:86:e5:ce:dc:d6:ce:ef:0d:29:4c:ae:c4:37:e3:
30:02:b2:16:25:47:b4:51:95:48:04:47:58:17:65:1a:59:55:
53:71:8d:ef:20:32:7c:a4:8a:07:10:e2:93:34:6e:d0:07:94:
1a:51:a1:78:67:06:ae:6a:48:42:ce:15:a9:a5:75:fb:88:0d:
13:2d:ad:e5:2b:e1:8b:d2:1a:cc:00:87:54:2c:79:ac:fd:9f:
4d:2d:1a:53:3f:4f:b1:c2:29:b3:5e:cd:ba:a8:81:d4:c9:44:
6a:53:40:5f:77:e0:16:9f:63:20:de:9c:f2:39:34:77:d4:2a:
2e:2a:16:a1:aa:a1:97:9f:78:12:e5:41:2b:90:2c:5d:37:2a:
b7:3a:66:a6:19:31:d0:fb:be:04:87:59:52:12:6f:e2:25:48:
c6:91:23:2d:71:da:12:4c:e3:a5:6f:e1:b3:c5:1f:f5:2e:0a:
46:c8:75:bc:b0:88:e8:5a:fe:9b:42:c1:01:ce:e6:af:91:0f:
b6:22:99:6e:08:14:59:e5:89:62:92:f2:81:b9:86:b7:ed:e9:
88:d3:95:ac:9c:7a:3d:ee:14:af:b6:36:bf:85:3f:6a:31:9c:
d3:0d:ce:d9:a0:f3:9e:02:69:fe:c3:be:60:02:1f:c4:7b:9a:
69:d4:64:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:44:34 2025 by rpki-client