Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/Zq7eQ3eZsYsNNl6x7QgRl2tG0cY.roa
File: Zq7eQ3eZsYsNNl6x7QgRl2tG0cY.roa (raw, json)
Hash identifier: 2PLYNC5TQEo40dtz6r8G2q2NVhdYFgS71ZBpW7mlx1I=
Subject key identifier: 66:AE:DE:43:77:99:B1:8B:0D:36:5E:B1:ED:08:11:97:6B:46:D1:C6
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 019710BBD7BF8CD12F8065502545F19B51B9
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/Zq7eQ3eZsYsNNl6x7QgRl2tG0cY.roa
Signing time: Tue 27 May 2025 07:53:55 +0000
ROA not before: Tue 27 May 2025 07:53:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56500
IP address blocks: 91.225.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:bb:d7:bf:8c:d1:2f:80:65:50:25:45:f1:9b:51:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: May 27 07:53:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66aede437799b18b0d365eb1ed0811976b46d1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:8b:a2:61:5a:c0:b1:66:3d:da:01:e0:db:
b5:68:03:95:c3:5e:9e:89:ab:b3:25:0d:f7:63:aa:
c3:20:da:ef:10:4b:5e:b4:ee:f2:6b:7d:14:f6:b0:
30:3b:ec:ad:70:36:47:56:16:f0:93:fd:a3:d8:28:
2e:90:0f:f6:34:6b:5f:b5:68:f7:69:43:e3:23:07:
17:0d:ee:88:82:f7:33:3e:de:8c:80:f6:0a:6d:89:
66:64:95:61:26:15:fb:c6:8c:98:8e:4c:dc:fd:25:
18:5e:f6:ba:26:df:c9:01:78:40:69:2a:ca:e4:e8:
7d:bf:51:5a:3d:a1:cd:99:83:d2:ad:d0:3e:b5:8e:
0a:0d:86:89:c7:b4:fc:d7:28:53:3e:e2:b8:bb:49:
a2:69:2d:54:63:e5:2c:e3:f7:b5:9b:36:9d:67:48:
65:39:6c:87:2c:fe:bd:b0:f6:8e:5d:b0:45:4b:85:
b2:36:00:cd:7a:68:ca:90:d6:f5:87:f6:c0:fa:5d:
94:1f:e0:87:08:d0:c9:55:c7:6a:9d:17:15:e7:ee:
44:c2:71:fa:76:c3:52:5a:7b:92:8c:01:7c:be:0d:
ae:39:8b:c6:c7:be:b1:ba:e7:d8:21:42:da:dd:9f:
20:f9:d3:34:ea:a7:7d:58:7e:a5:e6:71:df:2e:15:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AE:DE:43:77:99:B1:8B:0D:36:5E:B1:ED:08:11:97:6B:46:D1:C6
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/Zq7eQ3eZsYsNNl6x7QgRl2tG0cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.161.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3a:7b:d6:3c:55:b8:e5:1c:4e:b7:f2:3e:c7:8e:71:e7:41:
f7:a6:23:73:72:0a:62:72:f1:ab:8f:00:4f:f3:8d:b7:b6:f5:
e5:58:9c:cf:61:e9:00:3d:3d:67:05:de:5f:a9:cc:9f:bb:e6:
2d:48:db:15:b6:30:ac:d2:fa:86:1e:cf:7d:78:6d:9e:f8:f7:
73:e3:33:fb:cf:f7:7c:a0:75:c8:cd:ca:c0:71:aa:e9:13:6e:
3e:f0:ff:89:37:60:13:33:8e:76:28:ab:7e:39:e8:85:18:cc:
00:da:08:d8:80:0c:5b:c0:ee:80:5c:01:78:5e:4e:1d:16:a9:
94:db:05:b3:0c:f1:20:30:cc:f6:e5:a5:6e:44:f0:d0:e7:c8:
56:93:e1:39:e4:13:1e:ed:97:0b:2f:d0:6c:82:56:ea:b8:da:
9d:42:54:ea:35:6c:14:df:9e:2f:b4:a8:98:5b:4f:e6:0b:94:
95:a0:a0:da:d9:0c:54:f7:c3:25:45:23:85:52:b2:64:a5:a9:
01:7c:f3:ff:f4:8c:a5:4b:42:d6:72:2a:74:21:33:ff:ac:1f:
75:fa:3d:ff:07:95:74:d4:e0:66:88:ad:fc:e8:89:40:84:9c:
2b:b7:e0:17:9c:2e:cf:3c:8c:f0:56:27:fa:d0:b5:10:e3:1d:
75:0e:d8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:29:32 2025 by rpki-client