Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/jw_UZUOgx6yF78j9CZngLPh5MJg.roa
File: jw_UZUOgx6yF78j9CZngLPh5MJg.roa (raw, json)
Hash identifier: CTLi772NuP6ENX6hf9k8r6vRlCcaoedrcUdbAIXJuzo=
Subject key identifier: 8F:0F:D4:65:43:A0:C7:AC:85:EF:C8:FD:09:99:E0:2C:F8:79:30:98
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 0197A29EB905A95792896ACE8C22FF9642E5
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/jw_UZUOgx6yF78j9CZngLPh5MJg.roa
Signing time: Tue 24 Jun 2025 15:46:40 +0000
ROA not before: Tue 24 Jun 2025 15:46:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201691
IP address blocks: 91.216.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:9e:b9:05:a9:57:92:89:6a:ce:8c:22:ff:96:42:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Jun 24 15:46:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f0fd46543a0c7ac85efc8fd0999e02cf8793098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:a9:8d:33:89:b5:f1:ca:81:41:79:74:6f:
1c:70:e0:9d:81:c9:ba:f6:d5:e3:17:eb:eb:8d:ee:
fe:9b:c9:89:7c:5f:27:25:55:a2:71:b1:53:60:5d:
fd:b6:25:f2:50:95:e4:94:1b:dc:c0:31:ad:84:63:
0c:c1:b3:95:7a:5a:08:35:10:e1:3c:90:82:78:1a:
e2:83:0e:b3:8e:a7:a2:92:b5:30:38:56:df:2c:7b:
0c:79:59:41:6c:22:b2:71:10:b9:b3:34:a5:1f:f4:
e2:94:18:4c:ff:7c:0f:92:c7:5b:63:ae:48:74:92:
35:57:91:5b:95:4d:4c:a8:b2:7b:f9:5f:d5:95:7e:
7d:51:c4:81:0a:41:73:bf:e1:a1:8a:cf:85:39:ec:
c3:fc:cd:98:ff:76:7f:3c:77:b4:19:72:27:88:76:
e5:4d:79:0b:33:c2:09:5b:87:b5:fa:88:da:75:d3:
55:f2:16:80:e5:66:d9:c6:66:f6:79:f1:cd:e5:cd:
b2:a7:09:cb:43:06:3e:7f:85:79:9a:ae:d9:a0:ca:
4d:61:2e:32:d7:45:48:77:a7:7c:2b:80:00:ac:48:
51:cd:4f:ed:1b:74:9b:f5:b9:6f:9f:e3:b5:53:a3:
06:af:ee:19:95:6c:a4:dd:03:46:a7:92:41:7a:d1:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0F:D4:65:43:A0:C7:AC:85:EF:C8:FD:09:99:E0:2C:F8:79:30:98
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/jw_UZUOgx6yF78j9CZngLPh5MJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
04:4b:c2:89:33:d2:d7:07:46:d2:ea:d1:f6:26:9e:d4:c6:a3:
44:df:d2:e8:2f:da:76:06:ae:80:31:e5:ed:60:37:96:7f:3e:
37:b1:54:bc:d5:dc:f1:05:59:f4:07:07:f7:c3:ba:f2:ee:09:
57:27:dd:53:8f:91:e8:b9:d8:8f:c2:a7:19:a3:70:6a:35:46:
c2:ee:c1:33:52:54:f5:01:d1:10:7e:c4:ae:de:54:25:09:1e:
f4:b9:de:6e:a3:12:cb:82:2d:80:dc:a5:f6:6c:be:76:87:b6:
19:45:f1:d7:fa:93:ed:7e:c8:31:26:7a:b1:c8:c4:5c:3c:a6:
b5:b3:1c:80:37:63:de:8f:74:f3:c3:36:a5:6b:17:dd:d0:87:
01:23:03:f5:bf:7e:bf:4b:81:0d:4f:e8:d0:28:f3:89:e5:36:
ac:ea:d7:15:65:b9:bc:fb:92:71:bb:99:f7:e4:0c:39:0b:3b:
c1:7b:70:c1:b1:b5:9b:61:bd:7a:c3:82:4f:35:ac:00:ac:0c:
fc:ad:12:8b:2e:c4:b9:ec:8c:17:5f:96:a6:36:6c:99:45:a6:
f0:84:c2:76:2f:65:76:d4:d6:3a:84:3b:da:cb:f0:00:2f:1d:
6d:0a:f0:94:9c:fc:34:c3:b0:f2:cf:11:5f:ae:3f:af:be:7b:
b8:b8:ee:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:27:27 2025 by rpki-client