Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/FzcrFpqyH1D4pf1jVy8R-w3Yoz8.roa
File: FzcrFpqyH1D4pf1jVy8R-w3Yoz8.roa (raw, json)
Hash identifier: d2MgEpCCzfC5F2sJAzB1xCta9zKOCk/DnqSVe+ZZziw=
Subject key identifier: 17:37:2B:16:9A:B2:1F:50:F8:A5:FD:63:57:2F:11:FB:0D:D8:A3:3F
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 01979DE77DC3DB3D0A5127136B7581FE3DF3
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/FzcrFpqyH1D4pf1jVy8R-w3Yoz8.roa
Signing time: Mon 23 Jun 2025 17:48:03 +0000
ROA not before: Mon 23 Jun 2025 17:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50889
IP address blocks: 89.248.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:e7:7d:c3:db:3d:0a:51:27:13:6b:75:81:fe:3d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jun 23 17:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17372b169ab21f50f8a5fd63572f11fb0dd8a33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:69:62:b8:9e:90:ea:92:1c:e3:26:d7:57:
45:06:8b:44:6e:91:4c:2a:cc:42:0d:fe:94:c8:b1:
58:84:cf:c0:26:e6:80:53:25:40:d0:0b:d5:71:2e:
32:91:5d:73:f2:1a:a7:3a:76:60:f1:1d:69:23:e9:
5d:d0:b0:5d:dc:e0:db:63:32:88:83:55:ce:0d:d2:
38:9e:65:e8:a8:af:cf:24:dd:46:ed:7a:ee:f1:cb:
2b:17:42:c8:b8:1b:00:fb:84:ed:55:71:95:e2:d2:
86:b2:37:7b:48:7e:c8:77:12:37:78:0a:e4:27:b9:
d3:c8:6c:30:60:93:3b:4d:19:28:9e:7e:a8:3e:3f:
69:0c:ac:ce:93:34:34:fd:69:b5:61:5c:70:48:af:
7e:01:86:ff:da:cd:55:aa:0b:91:5c:ad:bc:1e:7b:
97:49:d8:a4:96:c3:16:55:77:f3:00:c2:b1:44:69:
13:ec:bb:6c:2c:20:b0:b6:f0:7e:b7:4c:d2:4c:af:
2a:67:7c:6b:f4:ca:61:71:73:4e:71:b3:ba:18:4c:
1b:ae:32:ae:a9:08:5e:9e:3d:8c:21:f9:52:0d:47:
08:90:cd:e5:53:10:19:45:c4:b0:7b:b0:2b:b4:1d:
50:52:89:ae:d9:06:12:b9:b2:15:a7:d7:26:75:c2:
37:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:37:2B:16:9A:B2:1F:50:F8:A5:FD:63:57:2F:11:FB:0D:D8:A3:3F
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/FzcrFpqyH1D4pf1jVy8R-w3Yoz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.237.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ee:67:e6:c5:ee:e1:e4:1e:f5:19:36:27:65:27:b4:a2:06:
dc:9b:13:83:32:8e:7d:9a:b3:4c:16:92:0d:7a:aa:2a:27:f2:
8b:7d:fa:52:8c:3c:a0:b6:95:6e:91:7f:17:c6:3a:21:61:f6:
f3:f6:d8:e0:d0:6e:fb:57:5d:ee:24:6e:15:43:dc:4d:aa:07:
52:44:10:34:ae:c6:fd:14:6c:e6:42:c9:6a:3d:e3:ae:42:d5:
c6:26:88:d5:6b:91:68:f8:8e:17:7a:7e:05:cb:64:08:19:0a:
42:6a:a8:f1:c2:a5:30:60:61:ff:ff:11:f0:75:6e:69:5f:db:
32:d6:a9:98:89:f1:9c:fa:5f:38:33:c7:dc:32:f5:be:20:59:
1b:50:88:9d:c8:3f:bd:97:8e:d9:52:71:50:29:dd:f6:62:1b:
39:49:77:b5:1d:d8:5c:0a:69:76:de:3e:b9:24:fd:44:e9:90:
5a:a7:92:cd:61:dc:c3:7d:1a:aa:e9:95:02:d0:5f:a3:31:bf:
87:b3:15:87:9f:64:39:6a:ae:cc:67:ea:8b:41:0e:d7:00:9c:
eb:26:9a:ba:fb:f7:a7:86:a8:92:2e:7e:bf:79:c0:c3:1c:ce:
4e:aa:b0:3b:a4:11:35:1c:19:51:c3:49:d1:5e:8a:dc:7c:7f:
1f:48:90:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:54:09 2025 by rpki-client