Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/efPu30dPCju-4pIJ71jJgsdRacM.roa
File: efPu30dPCju-4pIJ71jJgsdRacM.roa (raw, json)
Hash identifier: Gv4sp48MmAuu7ucXxDGtE47NMYnt8tPa86vOcXvxFhQ=
Subject key identifier: 79:F3:EE:DF:47:4F:0A:3B:BE:E2:92:09:EF:58:C9:82:C7:51:69:C3
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 0196AF3ECBBA632D42BDA2CE2C0FE3574CF6
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/efPu30dPCju-4pIJ71jJgsdRacM.roa
Signing time: Thu 08 May 2025 09:34:10 +0000
ROA not before: Thu 08 May 2025 09:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43180
IP address blocks: 91.239.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:3e:cb:ba:63:2d:42:bd:a2:ce:2c:0f:e3:57:4c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: May 8 09:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79f3eedf474f0a3bbee29209ef58c982c75169c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:52:f6:c7:f7:bc:44:49:72:de:a2:d0:18:
1d:5e:9c:16:27:55:a4:76:18:87:e1:3f:1d:3f:ce:
6b:9d:0f:cb:41:e0:58:d2:c2:f7:5a:c4:61:9d:25:
d3:00:64:3d:d2:2a:b0:f5:9a:2e:50:de:8c:b7:4a:
da:6b:fe:e6:bc:ee:6f:cc:fd:b8:c2:af:13:81:dd:
e2:de:ea:4d:ef:97:d5:39:23:db:64:0d:c4:2b:6a:
cd:bc:52:8c:83:c5:b7:d4:b2:53:de:70:52:3b:24:
c9:43:81:6c:f8:fc:c6:73:3b:e8:5f:52:94:37:f7:
c7:70:e8:06:30:a1:08:40:66:0b:3e:a7:af:67:59:
b7:61:9a:17:44:e9:31:92:89:3e:c1:5b:9f:cc:ba:
b5:f8:54:65:e9:9c:c9:46:22:90:d5:64:ec:bb:50:
b3:7d:7b:1f:5c:c7:92:db:ba:5d:43:c5:2b:3e:fe:
eb:12:96:f1:3c:86:f6:33:e7:18:c6:5a:a1:60:c1:
d2:9b:dd:be:84:9c:71:26:52:87:27:3a:01:69:10:
9a:56:c7:61:0a:39:2e:6e:47:6b:fa:28:6d:5e:2e:
25:74:46:fa:e5:1d:b3:98:57:7c:1f:29:71:6f:29:
eb:1b:c5:d6:cf:c1:c2:93:d1:12:45:e5:10:c7:59:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F3:EE:DF:47:4F:0A:3B:BE:E2:92:09:EF:58:C9:82:C7:51:69:C3
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/efPu30dPCju-4pIJ71jJgsdRacM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.77.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2d:b7:16:67:7e:e8:d7:9e:c6:15:f6:b3:92:2e:d0:de:be:
d6:ec:05:eb:59:18:a6:88:be:cb:aa:5d:59:30:8f:ed:5c:75:
c0:f2:8d:ec:04:fa:f9:cc:65:59:74:19:ad:48:4f:85:fb:45:
25:6c:a2:fb:9a:61:5e:40:d0:69:bf:b1:ad:87:9c:27:a4:5b:
51:7f:e7:45:a4:1a:5f:90:b5:8b:c5:1c:85:d5:c2:9c:47:b4:
0f:34:5f:60:96:d0:f3:1a:4d:13:21:74:7c:55:0b:5f:cf:b1:
1e:33:2e:bf:7d:90:6f:b7:c7:8e:46:ab:c4:e0:cc:0d:d5:6e:
06:59:39:d2:d3:45:d8:99:11:35:84:57:c0:43:69:00:d7:c8:
07:fa:95:8e:3e:ef:e9:f6:cb:70:f0:32:3a:13:d9:09:b1:1d:
67:fe:62:f3:31:0e:25:5a:64:9f:e5:5c:a3:08:33:bf:7b:8b:
3c:21:9a:4e:f4:93:18:c1:01:79:98:7a:18:05:7b:0a:a5:4b:
80:09:6b:6a:b9:82:f1:40:98:c2:e5:22:2d:02:85:d5:5b:2d:
9c:fb:92:dc:12:79:08:c4:9d:71:b3:53:e9:39:cb:2c:40:41:
08:fe:af:0a:1f:36:6a:74:d6:60:9f:18:18:db:31:34:81:f3:
4f:1c:ab:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZavPsu6Yy1CvaLOLA/jV0z2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmN2Q4YTc5YmFkNGY5ODNkMGM0OTg5NWFmNTBlYThhMDNl
YmM3MGQwHhcNMjUwNTA4MDkzNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWYzZWVkZjQ3NGYwYTNiYmVlMjkyMDllZjU4Yzk4MmM3NTE2OWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZNS9sf3vERJct6i0BgdXpwWJ1Wk
dhiH4T8dP85rnQ/LQeBY0sL3WsRhnSXTAGQ90iqw9ZouUN6Mt0raa/7mvO5vzP24
wq8Tgd3i3upN75fVOSPbZA3EK2rNvFKMg8W31LJT3nBSOyTJQ4Fs+PzGczvoX1KU
N/fHcOgGMKEIQGYLPqevZ1m3YZoXROkxkok+wVufzLq1+FRl6ZzJRiKQ1WTsu1Cz
fXsfXMeS27pdQ8UrPv7rEpbxPIb2M+cYxlqhYMHSm92+hJxxJlKHJzoBaRCaVsdh
Cjkubkdr+ihtXi4ldEb65R2zmFd8HylxbynrG8XWz8HCk9ESReUQx1kWWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHnz7t9HTwo7vuKSCe9YyYLHUWnDMB8GA1UdIwQY
MBaAFP99inm61PmD0MSYla9Q6ooD68cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2Mt
MDg3M2UzOTk0ZDBlLzEvZWZQdTMwZFBDanUtNHBJSjcxakpnc2RSYWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2MtMDg3M2UzOTk0ZDBl
LzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+9NMA0G
CSqGSIb3DQEBCwUAA4IBAQBZLbcWZ37o157GFfazki7Q3r7W7AXrWRimiL7Lql1Z
MI/tXHXA8o3sBPr5zGVZdBmtSE+F+0UlbKL7mmFeQNBpv7Gth5wnpFtRf+dFpBpf
kLWLxRyF1cKcR7QPNF9gltDzGk0TIXR8VQtfz7EeMy6/fZBvt8eORqvE4MwN1W4G
WTnS00XYmRE1hFfAQ2kA18gH+pWOPu/p9stw8DI6E9kJsR1n/mLzMQ4lWmSf5Vyj
CDO/e4s8IZpO9JMYwQF5mHoYBXsKpUuACWtquYLxQJjC5SItAoXVWy2c+5LcEnkI
xJ1xs1PpOcssQEEI/q8KHzZqdNZgnxgY2zE0gfNPHKth
-----END CERTIFICATE-----
Generated at Sun May 11 07:36:26 2025 by rpki-client