Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/_ZvG0PlF42L37wxQnyxCZfeMoAM.roa
File: _ZvG0PlF42L37wxQnyxCZfeMoAM.roa (raw, json)
Hash identifier: Z8GPW7jOAC9/r+ylozkesuGuO/RAGB5R1mOtBovFWng=
Subject key identifier: FD:9B:C6:D0:F9:45:E3:62:F7:EF:0C:50:9F:2C:42:65:F7:8C:A0:03
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 01976A6F7214CC79AE84816FF0D91847E189
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/_ZvG0PlF42L37wxQnyxCZfeMoAM.roa
Signing time: Fri 13 Jun 2025 17:56:18 +0000
ROA not before: Fri 13 Jun 2025 17:56:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213520
IP address blocks: 77.110.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:6f:72:14:cc:79:ae:84:81:6f:f0:d9:18:47:e1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Jun 13 17:56:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd9bc6d0f945e362f7ef0c509f2c4265f78ca003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:c9:ca:4b:cf:af:da:29:37:f9:62:bf:d2:
54:20:a9:84:8d:3a:d9:9b:c2:75:3a:81:7d:fc:c5:
9f:e1:52:f2:0a:a3:07:bc:e8:da:2d:ea:db:79:3a:
54:e5:e2:9d:1a:70:fa:d5:69:ae:10:56:99:6a:3b:
2e:4c:54:d9:54:7c:5f:54:83:48:9b:40:5d:9e:29:
8b:e1:0a:e7:06:8b:c4:1f:1c:1c:8e:fa:3a:83:fc:
96:59:fb:aa:bd:1a:36:d8:56:12:99:b3:3a:c7:a3:
d1:31:57:43:2f:77:00:ba:d4:71:bc:3c:b1:fc:e5:
fb:b0:0a:d3:8a:67:46:b6:64:95:47:50:f1:2e:90:
69:6b:50:70:e4:a7:88:6f:2a:fc:a4:87:56:39:4c:
07:f9:68:fd:1b:17:fa:b5:8a:18:cc:f2:3a:e8:61:
dd:77:3d:14:ff:25:35:99:e9:ce:cb:e9:5b:9c:9c:
2f:07:38:4b:d7:51:7f:ce:26:c3:03:89:41:b8:12:
a0:bf:fb:9b:06:74:28:e6:a5:1d:ab:0f:73:b8:0a:
29:03:91:23:c3:85:8c:fa:f5:c2:24:d9:08:4b:72:
5f:03:a5:3f:a8:02:34:be:e7:03:73:17:ed:62:ee:
f3:58:2c:40:50:6d:e2:e1:b3:ed:88:09:89:9c:62:
ee:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9B:C6:D0:F9:45:E3:62:F7:EF:0C:50:9F:2C:42:65:F7:8C:A0:03
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/_ZvG0PlF42L37wxQnyxCZfeMoAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.117.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:33:c2:06:da:8f:9a:f8:37:cc:53:54:30:9c:d9:04:c7:dd:
5f:97:7f:7f:e4:59:65:4d:14:bf:1d:bb:e6:c8:65:12:ab:76:
96:05:b3:8c:9e:b5:f3:0d:57:72:82:9f:4f:6a:1a:98:59:94:
d6:36:14:eb:67:9c:92:9f:84:c7:05:f8:4d:63:87:5d:23:05:
3c:cd:79:ce:ac:88:84:8f:16:16:58:6b:c7:19:33:50:8c:b4:
e5:c2:e1:a0:07:5d:e2:eb:72:54:f4:e2:15:21:8f:5c:40:a9:
df:4c:f2:ab:00:61:66:a6:62:c1:a7:b8:8e:d8:5a:a4:8c:ac:
3d:70:1a:63:28:58:d7:52:86:da:05:80:af:c9:86:e7:a8:31:
58:6c:94:e8:3e:12:55:78:0f:0d:aa:c8:08:c6:29:62:40:31:
8e:b6:e5:1b:2d:fe:73:dd:20:b0:33:2a:95:6d:2a:ac:2e:23:
70:e4:68:54:fe:09:af:a6:e7:4d:89:1a:25:13:ec:78:25:12:
f0:07:b4:66:c8:44:5d:20:23:13:6d:96:fb:78:d3:f7:be:2b:
cc:63:b2:61:41:f0:d0:61:bc:a7:5b:0f:34:9c:8d:75:7c:f0:
51:50:a4:27:f5:6c:2e:03:30:89:21:03:10:f4:bd:e8:99:ca:
69:23:fd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:07:50 2025 by rpki-client