Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/SAF1KbjuvZdI9BSVM80ADIZ6zn0.roa
File: SAF1KbjuvZdI9BSVM80ADIZ6zn0.roa (raw, json)
Hash identifier: wfp9L/QbKQTs8wDMXGcfyHh9p8y5+4/kclZuUrsUs5I=
Subject key identifier: 48:01:75:29:B8:EE:BD:97:48:F4:14:95:33:CD:00:0C:86:7A:CE:7D
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 0197889089C2BBDAEF81C68521A1C1089294
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/SAF1KbjuvZdI9BSVM80ADIZ6zn0.roa
Signing time: Thu 19 Jun 2025 14:21:03 +0000
ROA not before: Thu 19 Jun 2025 14:21:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 79.110.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:90:89:c2:bb:da:ef:81:c6:85:21:a1:c1:08:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Jun 19 14:21:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48017529b8eebd9748f4149533cd000c867ace7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:21:59:d3:de:98:3c:22:e3:b0:7d:05:e8:
53:92:a9:71:6c:e7:5f:f3:28:14:83:da:e6:d6:86:
eb:b2:da:54:78:12:ae:b5:c1:c6:d7:58:75:7e:2c:
a2:0d:76:fb:88:88:68:7f:9a:a7:13:e9:14:22:a1:
e4:fe:40:b9:85:aa:13:4e:09:08:97:6f:5c:35:81:
30:3b:99:cd:40:23:c7:e6:5d:76:75:4d:18:87:89:
f1:c7:21:11:57:60:ad:72:dc:d2:b2:2f:c8:87:1b:
c4:ee:4d:69:e0:6b:7a:5c:f5:e1:94:cf:de:69:a6:
fb:39:b2:22:64:f0:db:89:72:74:9d:36:de:6f:b7:
42:0c:64:df:44:3d:08:33:ba:61:14:b4:6f:25:d9:
d9:12:21:01:af:56:1c:b8:d9:d4:93:cb:77:56:56:
fe:6b:a7:14:32:11:e2:3a:ad:29:db:71:51:5b:90:
b2:83:6c:97:2a:1e:56:0c:fd:6c:4a:1a:81:ba:df:
91:5d:01:39:3b:7f:44:df:cc:c7:2c:56:eb:17:3f:
c0:2a:e5:29:56:54:a5:22:65:ef:c2:5e:48:b6:f1:
3a:5f:a7:47:54:b7:0e:da:1e:ea:35:22:0d:eb:27:
c0:84:36:fb:b0:da:3f:43:77:02:77:51:0b:a9:3e:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:01:75:29:B8:EE:BD:97:48:F4:14:95:33:CD:00:0C:86:7A:CE:7D
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/SAF1KbjuvZdI9BSVM80ADIZ6zn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:64:78:be:68:71:c2:aa:72:73:2b:82:53:b5:8e:bb:cc:63:
fd:86:55:81:35:48:39:8a:d9:78:5f:4f:47:d6:99:48:08:67:
87:de:77:36:bc:76:78:84:97:2f:63:58:d6:bf:bc:d3:73:24:
14:35:0b:1c:54:1e:cb:cf:72:4d:c2:0a:e9:1d:dc:d0:56:e2:
f1:ca:c6:f7:25:db:bd:2f:ca:2a:79:db:61:a7:ba:24:93:a1:
c0:af:6b:24:37:87:15:98:b6:9e:cd:6b:84:a2:aa:d4:d3:dc:
4f:0d:77:af:01:39:64:e7:49:80:92:50:77:59:91:6a:8a:84:
78:50:53:6c:cb:e6:c8:db:f8:90:74:5f:2d:ed:67:33:ea:19:
73:b8:c6:64:40:bc:ca:d9:ce:ee:80:63:99:58:98:68:86:77:
f4:de:7c:b1:a4:2b:29:92:19:5c:ce:e0:40:ed:a6:41:15:2a:
90:ab:86:99:8b:31:dd:9d:c8:b0:39:42:33:08:b9:93:3f:75:
e8:eb:8c:22:d7:fc:eb:12:34:f6:cd:02:94:c0:01:55:fb:60:
e9:9f:6a:ce:09:70:45:b2:c3:8f:09:a0:d9:c9:5a:70:a9:d9:
61:97:9b:25:be:c0:05:37:e4:7c:fc:9f:21:50:23:06:ec:67:
00:27:90:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:15:36 2025 by rpki-client