Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/od-eaeRv-_TtiWVxF1AsQmL-p6M.roa
File: od-eaeRv-_TtiWVxF1AsQmL-p6M.roa (raw, json)
Hash identifier: xxM+CC0rClETGMS9YhA+QBIZ3skgkCaIksfRH7MZZ+U=
Subject key identifier: A1:DF:9E:69:E4:6F:FB:F4:ED:89:65:71:17:50:2C:42:62:FE:A7:A3
Certificate issuer: /CN=59dd05746f9a288756c30afa8c45995b775055f8
Certificate serial: 01978EE2470DE6AA2F7E6D5E6346A0090124
Authority key identifier: 59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/od-eaeRv-_TtiWVxF1AsQmL-p6M.roa
Signing time: Fri 20 Jun 2025 19:48:03 +0000
ROA not before: Fri 20 Jun 2025 19:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210234
IP address blocks: 91.233.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:e2:47:0d:e6:aa:2f:7e:6d:5e:63:46:a0:09:01:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd05746f9a288756c30afa8c45995b775055f8
Validity
Not Before: Jun 20 19:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1df9e69e46ffbf4ed89657117502c4262fea7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:16:09:12:55:48:7b:58:8f:01:c3:cb:97:
92:c5:4b:08:94:33:83:0b:12:37:25:11:32:57:b3:
f5:8a:03:58:40:da:74:c9:aa:6c:8f:0a:e7:21:bb:
e1:77:18:40:73:0a:3c:75:87:79:d8:ef:7c:47:db:
c2:f5:a8:42:2b:78:da:a1:73:40:f5:b0:18:89:3e:
ea:ad:25:b4:27:64:48:da:73:d8:51:5b:15:60:ef:
f2:dc:dc:62:96:e3:d8:87:08:5e:b0:ca:c2:1a:5a:
5e:8a:e1:a0:e3:ca:8e:bf:a4:1f:f5:bd:77:d7:19:
b3:22:45:dc:b3:49:ad:9e:02:88:81:fb:a4:f0:76:
98:61:49:4d:7d:32:3a:56:73:ee:85:52:5f:31:c8:
55:2a:3e:be:55:18:f0:8a:c7:bb:df:12:a9:cc:48:
b7:c4:b6:be:77:f9:c0:47:45:06:da:34:88:0b:fd:
21:8f:92:b7:9a:ff:c3:64:49:e1:01:05:78:55:c6:
17:a3:d4:21:a3:5b:90:96:ba:c1:db:3e:b1:55:c9:
8e:8c:94:68:99:a6:40:46:72:bb:89:e2:4c:61:8d:
e0:59:db:1e:21:b6:f6:4b:9e:fd:b5:94:8e:b4:62:
1f:50:d0:1f:12:18:83:0d:f0:e7:a2:df:d0:07:15:
a0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DF:9E:69:E4:6F:FB:F4:ED:89:65:71:17:50:2C:42:62:FE:A7:A3
X509v3 Authority Key Identifier:
keyid:59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/od-eaeRv-_TtiWVxF1AsQmL-p6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.104.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b5:ca:80:8f:1c:cd:91:bc:29:96:f5:5f:7b:72:0f:d1:b9:
13:4d:44:c3:e8:91:76:6d:5d:61:16:ef:91:81:94:1e:bf:07:
81:93:8c:8e:50:94:f0:90:61:18:87:1b:d4:7d:a8:87:c8:66:
bb:49:2c:c7:62:48:8f:7b:82:30:9c:54:0a:4e:3c:73:2c:03:
85:f0:54:ae:e9:ad:3e:24:f3:00:4e:fc:2d:55:6b:5c:40:4f:
b7:17:81:1a:c8:05:50:22:06:05:2f:22:3c:44:1e:64:2c:b0:
a7:5f:08:64:bc:bb:79:0e:8c:ba:ae:a9:10:42:16:01:84:fd:
3c:d4:22:cb:ba:67:ce:90:ff:0b:d2:11:10:ba:ad:e4:bc:44:
d5:44:1c:36:8e:16:b9:20:a5:c2:ba:51:26:19:47:41:92:2c:
35:21:1e:04:df:07:9a:c1:0a:fc:b3:df:87:b2:c7:04:54:1f:
2b:df:0f:c3:10:b4:97:94:3a:31:9c:e7:7e:af:82:5f:0d:1f:
c8:fa:a2:5e:71:bc:33:23:44:10:97:09:08:39:bd:35:38:1a:
e2:1c:08:0f:21:34:af:6d:53:ab:30:a7:03:cf:95:b4:9e:00:
95:3e:84:4c:fc:c9:42:c6:60:88:b7:7b:f4:ad:3c:11:8c:f4:
27:6b:f0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:17:17 2025 by rpki-client