Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/oB9bZbRwGhzU8WuOdPBmky_nv2k.roa
File: oB9bZbRwGhzU8WuOdPBmky_nv2k.roa (raw, json)
Hash identifier: 1SnSLuXNNFwu9oud/OcFmIuzLgq0f2HlkrbZraM+p3Q=
Subject key identifier: A0:1F:5B:65:B4:70:1A:1C:D4:F1:6B:8E:74:F0:66:93:2F:E7:BF:69
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 019777F50D4C1668D2529C4D64DA0E4385FE
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/oB9bZbRwGhzU8WuOdPBmky_nv2k.roa
Signing time: Mon 16 Jun 2025 08:57:17 +0000
ROA not before: Mon 16 Jun 2025 08:57:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48955
IP address blocks: 91.212.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f5:0d:4c:16:68:d2:52:9c:4d:64:da:0e:43:85:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Jun 16 08:57:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a01f5b65b4701a1cd4f16b8e74f066932fe7bf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:3b:f8:8d:81:b3:62:17:bb:cd:94:4a:1a:
78:6d:fa:1e:4c:c4:86:e6:f5:c0:c7:c8:14:d6:ed:
68:51:d4:c2:81:03:d5:ac:76:a9:20:01:44:2e:02:
dd:e8:df:6b:7f:95:64:06:ac:4c:15:20:46:f5:01:
a3:b8:a4:1f:1f:9e:66:d9:87:f8:ec:61:c3:f0:af:
62:5c:8d:5c:56:10:ad:65:ce:dd:c9:08:fd:ee:ab:
3b:5a:0e:04:8e:b6:ca:0e:f8:8f:8f:38:58:46:25:
69:5f:84:06:8e:60:dc:be:14:87:d7:11:4b:13:79:
eb:90:13:d6:3f:12:69:32:a7:19:2e:36:81:16:51:
d3:14:5a:7d:a7:79:7d:cc:94:55:a0:94:6c:38:a2:
13:fa:90:38:90:e4:c1:c9:52:8d:96:06:e9:47:31:
8f:bc:dc:03:fd:d7:23:86:cd:d6:8a:93:6c:71:5c:
68:ac:53:43:62:fc:bd:84:99:98:f7:52:12:8b:6b:
c4:57:99:60:74:9c:2f:91:00:c5:5c:e9:1c:aa:28:
ef:d3:78:41:38:09:06:84:73:24:fb:b2:e8:2c:9f:
7d:c1:a5:18:0f:63:ab:37:3a:0e:18:a2:8b:41:e1:
7f:58:e3:63:4c:93:60:77:79:e9:89:39:a3:e4:8a:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1F:5B:65:B4:70:1A:1C:D4:F1:6B:8E:74:F0:66:93:2F:E7:BF:69
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/oB9bZbRwGhzU8WuOdPBmky_nv2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.74.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:26:69:9c:1a:4d:94:46:3c:db:9e:04:c6:ff:1b:ae:a8:37:
44:59:e4:00:79:ef:77:7d:63:0c:16:5a:88:76:2f:bb:d4:cf:
90:62:ef:9d:64:b1:ee:12:30:53:e4:97:b9:50:4e:15:ef:78:
75:3c:88:4e:73:b1:28:81:22:2d:e9:2d:ee:ac:b1:2a:b3:18:
d1:98:cf:3a:b8:ba:0b:5a:34:ad:ec:32:58:3e:e6:ad:d2:3d:
ff:41:f7:09:a1:f5:ca:68:5b:ba:2c:03:2b:15:8a:1f:b7:25:
95:71:35:33:97:fb:a3:79:2b:19:3a:d7:33:da:f7:f8:04:a0:
3b:b4:d5:be:c6:76:f3:26:b6:cb:33:02:e5:8a:00:09:20:05:
48:75:84:eb:82:50:03:26:d4:d6:8e:3d:b1:f9:dc:b0:cd:f8:
53:14:04:36:25:7f:a0:83:d4:34:34:c3:62:2e:ec:3d:b7:38:
a2:b9:d8:78:67:c0:13:7b:dc:a7:01:d5:ba:d6:52:e5:9c:0c:
47:0d:2b:e0:d3:0b:06:7c:4c:d8:d9:2c:4f:d5:c0:a1:06:89:
a1:44:f8:81:75:b3:d7:ae:a7:30:77:8c:73:db:5d:e7:e4:50:
bd:ad:ce:4b:bf:d5:b7:6a:ff:e3:d4:d7:b4:d1:fd:6e:e9:83:
be:b0:ad:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:22:40 2025 by rpki-client