Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/egWiNnqY9Vl0Wup08EirG2JX11M.roa
File: egWiNnqY9Vl0Wup08EirG2JX11M.roa (raw, json)
Hash identifier: cdwWkaZBw0jnB5ddN/k9GlCFftOqTidrPnaELenZvX8=
Subject key identifier: 7A:05:A2:36:7A:98:F5:59:74:5A:EA:74:F0:48:AB:1B:62:57:D7:53
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 01977C48D6A1B8CDFDB73610002598946100
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/egWiNnqY9Vl0Wup08EirG2JX11M.roa
Signing time: Tue 17 Jun 2025 05:07:17 +0000
ROA not before: Tue 17 Jun 2025 05:07:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20292
IP address blocks: 91.204.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:48:d6:a1:b8:cd:fd:b7:36:10:00:25:98:94:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Jun 17 05:07:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a05a2367a98f559745aea74f048ab1b6257d753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:b3:a5:64:ee:dd:0c:22:94:e5:85:a8:cb:
65:dc:44:ed:e5:35:52:30:3d:e7:3a:0f:3f:27:fe:
44:f3:38:c4:ba:98:88:8a:30:f2:a8:76:60:e9:10:
00:43:3b:c8:9f:36:aa:ad:f2:b6:bf:ab:79:43:3f:
94:f2:09:da:41:6b:fc:c2:66:0f:e9:e9:9f:65:0b:
9a:a3:72:ef:65:16:21:0a:4e:10:46:08:82:b1:3d:
4a:7f:9f:dd:33:77:74:e4:db:86:79:30:10:c2:81:
0b:1c:1b:08:7d:37:a5:0f:23:c5:35:89:7d:f8:3b:
a2:bc:eb:7a:97:56:3a:f2:6c:cb:a1:c6:cb:23:30:
2f:65:61:9b:f1:11:ff:d4:73:8c:f1:f1:ca:2c:8d:
d8:e1:b9:1b:3a:4c:ea:59:93:cd:f1:f4:b1:f8:99:
4b:a2:1d:9d:b5:c7:8d:25:9f:59:4f:1c:28:ef:7b:
b5:0a:1c:c0:18:ca:af:af:8f:3a:1c:6f:1c:56:a2:
0d:ee:be:7d:f0:12:19:b0:15:8d:d3:01:a7:5e:9c:
7c:b1:d2:9a:f2:6a:81:f2:cf:15:e8:98:d8:dc:f1:
5d:c7:c0:33:07:f9:c6:84:45:1d:3b:46:0d:23:e8:
46:9a:95:76:4d:26:39:d0:05:1f:49:46:f7:b2:e9:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:05:A2:36:7A:98:F5:59:74:5A:EA:74:F0:48:AB:1B:62:57:D7:53
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/egWiNnqY9Vl0Wup08EirG2JX11M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.73.0/24
Signature Algorithm: sha256WithRSAEncryption
40:da:92:06:22:ac:44:c9:7b:0e:eb:6a:41:28:6a:3b:8c:f5:
a9:84:1b:27:cb:48:4f:6e:b6:b5:11:b0:5d:0c:dd:0c:9c:47:
3f:a7:7a:de:a0:63:76:17:73:a0:2f:f5:9a:77:63:bb:c1:eb:
1c:5e:30:99:34:3d:cc:c1:02:10:e4:5a:f6:f5:09:73:c0:7a:
5c:cc:d6:a8:99:6b:c0:35:ea:8e:74:02:4c:67:a8:c7:b5:ff:
fd:c5:21:b8:19:38:c5:4b:04:5b:72:b5:1c:fa:2a:d1:32:a7:
53:8d:68:58:01:5f:d4:58:73:49:d4:59:4a:46:35:a9:13:d3:
cb:d0:54:18:6a:99:9d:86:08:80:ac:5c:4f:f7:c2:99:4f:84:
cc:cf:84:1b:13:96:0d:d6:aa:85:20:da:2b:d9:77:76:75:f1:
53:be:1e:1f:f5:db:29:ba:6f:ef:cf:93:ab:1e:54:0c:33:df:
05:c9:d0:90:46:85:26:7d:2d:6f:1d:12:fc:fc:eb:a9:d8:64:
98:79:db:a4:8c:17:08:be:e2:41:b1:92:11:36:db:25:5a:db:
21:1c:a9:b2:64:49:95:3e:ae:d2:b7:26:5b:06:09:2e:9b:35:
a8:ae:31:4d:b7:3d:e7:36:69:5b:d1:fb:a0:89:51:60:9d:94:
95:22:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:27:03 2025 by rpki-client