Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/RRRmCOvbyAPnbsaJiqfMhZXykYE.roa
File: RRRmCOvbyAPnbsaJiqfMhZXykYE.roa (raw, json)
Hash identifier: DeCVtTl0igaa8xZ/iKxH13G+svmOWL5YTiQPn2fRoPw=
Subject key identifier: 45:14:66:08:EB:DB:C8:03:E7:6E:C6:89:8A:A7:CC:85:95:F2:91:81
Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Certificate serial: 0197597DACAD5508DD6DD873C5D796BA0D9B
Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/RRRmCOvbyAPnbsaJiqfMhZXykYE.roa
Signing time: Tue 10 Jun 2025 10:58:17 +0000
ROA not before: Tue 10 Jun 2025 10:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5483
IP address blocks: 79.121.74.0/23 maxlen: 23
79.121.76.0/22 maxlen: 22
79.121.120.0/22 maxlen: 22
91.147.214.0/23 maxlen: 23
94.248.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:7d:ac:ad:55:08:dd:6d:d8:73:c5:d7:96:ba:0d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Validity
Not Before: Jun 10 10:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45146608ebdbc803e76ec6898aa7cc8595f29181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:3c:c3:46:fb:4e:98:ba:ff:d0:98:ff:8c:
0a:33:c2:1a:d0:44:b4:91:a0:c5:ed:a9:76:14:db:
33:18:5a:fc:60:37:21:d1:a3:b1:bc:56:b9:d1:0a:
d5:47:11:d4:ae:e2:eb:cf:16:af:5e:11:60:4d:1a:
39:7a:92:00:86:72:f0:30:68:1d:8c:63:a9:23:ec:
10:ca:f7:ef:3c:94:a0:81:db:36:cd:2c:15:a7:e7:
b6:f7:42:47:bb:3c:b6:ba:d0:26:0c:69:aa:75:96:
02:25:af:54:bf:75:76:d3:3a:19:e9:11:0a:f0:99:
33:28:c6:0d:b3:74:43:c2:8b:eb:54:9e:2b:db:d9:
ba:20:00:4a:2e:fc:98:07:99:56:61:31:c5:c7:73:
29:d5:40:28:a6:ad:22:39:37:08:4b:3c:99:4c:7c:
50:ef:17:e8:f5:26:d6:17:d2:ae:38:d6:b4:0f:4e:
68:e6:e8:26:1a:36:e0:80:bf:21:76:9f:da:7c:f1:
5d:31:57:f8:28:3e:38:23:a9:c6:60:7d:ac:1d:c9:
c8:f8:7b:0b:3a:e2:2e:e9:63:a8:a3:6f:10:16:b9:
e6:b8:d5:e9:be:16:e6:d7:10:bd:86:b6:9b:0a:e4:
4c:43:e0:5d:18:22:d5:e2:5b:18:1a:fc:34:ee:3e:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:14:66:08:EB:DB:C8:03:E7:6E:C6:89:8A:A7:CC:85:95:F2:91:81
X509v3 Authority Key Identifier:
keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/RRRmCOvbyAPnbsaJiqfMhZXykYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.74.0-79.121.79.255
79.121.120.0/22
91.147.214.0/23
94.248.248.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:9f:cf:68:5a:f3:21:73:10:92:7d:a4:a9:99:fc:41:3a:53:
15:53:5b:14:54:1f:05:be:0c:08:a1:5a:0e:62:e6:e0:04:3f:
12:be:ae:80:f6:14:77:97:90:7d:90:3d:e8:e9:6a:df:94:d7:
3c:1f:a4:02:f6:d2:7d:44:74:cd:38:31:a1:24:69:57:71:19:
37:d2:d0:2e:b0:24:80:87:ab:71:6f:6e:7b:89:70:db:fb:a9:
27:3f:17:78:f4:9a:0a:6d:08:b6:b9:75:37:55:1e:4c:b3:3a:
78:ca:55:06:33:09:dd:e3:37:8c:c9:93:35:f6:93:fd:8c:68:
2e:86:9d:b2:60:70:98:39:9f:a2:cd:ba:97:7d:f8:d5:a8:65:
0f:df:23:f8:90:98:80:1a:f1:e4:d4:9f:44:b1:67:3d:aa:06:
1c:43:de:f7:b2:92:20:40:f4:a6:bf:b2:f4:fb:be:3c:d3:77:
ee:e1:3c:89:71:60:bc:bd:01:88:6c:62:9e:bd:70:ba:f1:a5:
62:41:4a:10:e1:85:75:0f:9b:4f:a1:b0:3c:2a:c2:8a:d8:3b:
b2:3a:af:7c:ab:4c:9a:80:c6:20:b7:a9:36:39:51:63:f3:bb:
8f:bd:14:ae:96:ed:5e:fd:83:05:a9:56:bb:52:b2:6b:43:a2:
03:a2:fd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:01:04 2025 by rpki-client