Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/edj-Nzc5ZyQ1EBo-pYW6Vxmxn_I.roa
File: edj-Nzc5ZyQ1EBo-pYW6Vxmxn_I.roa (raw, json)
Hash identifier: JzSuAxfLTtYd9sd/xUG0/03y1qhGe2/owO2FilFU2TM=
Subject key identifier: 79:D8:FE:37:37:39:67:24:35:10:1A:3E:A5:85:BA:57:19:B1:9F:F2
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0197A28F287D3A8A71877E0B915C2D4F7269
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/edj-Nzc5ZyQ1EBo-pYW6Vxmxn_I.roa
Signing time: Tue 24 Jun 2025 15:29:40 +0000
ROA not before: Tue 24 Jun 2025 15:29:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 77.83.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:8f:28:7d:3a:8a:71:87:7e:0b:91:5c:2d:4f:72:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jun 24 15:29:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79d8fe373739672435101a3ea585ba5719b19ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:18:45:6a:4a:fc:32:b5:5d:4c:66:cb:22:
dd:ca:70:4b:68:d6:9a:7b:05:07:42:dc:0b:4c:3c:
c6:eb:ae:9d:34:06:dc:70:a9:39:cf:f7:ec:58:b0:
cf:6b:29:67:70:98:77:e1:b8:ec:4c:ea:8b:75:c1:
e5:e4:fc:4b:49:bb:df:53:8d:80:d6:cf:a6:e8:78:
56:01:3c:fd:33:22:90:6b:cf:4c:21:9f:d7:7a:af:
2a:ed:38:66:fb:e7:af:b0:ed:09:de:7e:c4:20:66:
43:8a:ec:99:3f:a3:a3:78:a1:29:84:2f:34:04:f3:
c1:ce:11:f7:00:98:dc:81:6a:0e:62:4b:53:16:7c:
bf:51:a1:cb:37:f8:ae:b4:4f:4e:a1:c0:af:52:13:
24:a3:f0:f6:16:9e:d3:8e:2b:15:eb:6b:40:5f:7d:
db:23:82:3f:d4:c5:89:74:ba:18:71:49:aa:58:76:
c9:7d:80:cb:47:d1:10:4b:ea:1f:60:84:32:be:a7:
3c:9a:45:46:8c:94:f0:88:7c:df:49:09:06:40:10:
42:0e:d8:40:d5:c9:9d:bc:79:51:67:e1:74:8f:bf:
bf:aa:06:03:d7:6b:26:d0:01:06:0e:2c:dc:4f:04:
6a:7b:38:34:21:9c:3f:a5:88:c4:7e:83:18:59:9a:
6f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:FE:37:37:39:67:24:35:10:1A:3E:A5:85:BA:57:19:B1:9F:F2
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/edj-Nzc5ZyQ1EBo-pYW6Vxmxn_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.244.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:70:ff:38:42:76:e2:41:f1:54:82:ff:d9:f2:df:e6:d5:05:
99:75:27:09:b0:24:6f:f5:14:9f:d2:ff:ed:f8:73:a6:8d:9e:
ee:b0:89:68:c0:bf:05:af:e5:ec:a7:86:86:37:bf:2e:0f:a9:
be:62:4f:b7:43:00:95:be:d0:c3:8d:ca:7c:6d:e8:9a:37:2b:
63:96:d1:44:b5:55:ed:73:88:f6:3d:51:01:45:3f:1a:a5:e5:
2e:bf:96:0d:29:da:28:30:19:67:f7:21:54:21:38:dd:9c:69:
56:19:37:5c:3c:33:00:5b:bc:71:00:d5:30:3b:b4:d9:a5:c3:
0e:97:b4:52:89:6e:d0:69:63:5d:8c:a1:99:bc:93:b7:38:a9:
b3:9c:7d:63:af:7e:65:28:0d:2b:71:b2:58:8d:21:97:f9:29:
5a:8f:92:bb:a1:f7:66:b0:d6:1c:8a:22:0c:06:36:ac:2b:49:
c6:f5:f0:13:06:d3:37:63:64:34:87:8c:de:fb:1d:ac:ac:ad:
28:22:34:99:07:01:77:ed:30:e0:8b:03:41:d6:04:cd:8d:34:
17:ae:62:49:a6:6a:99:b5:2b:65:3d:f3:df:48:11:e5:59:30:
66:e1:a8:24:87:f5:3b:35:23:4e:af:b3:ad:a5:5d:b3:7b:18:
40:b5:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:36:02 2025 by rpki-client