Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ecooX1tpy_68qR_5Gf8fapWXtUc.roa
File: ecooX1tpy_68qR_5Gf8fapWXtUc.roa (raw, json)
Hash identifier: 2kOuXNzxZpd4lb4ugOiQtQiNc/5dTKoiRcVu3w5lnUg=
Subject key identifier: 79:CA:28:5F:5B:69:CB:FE:BC:A9:1F:F9:19:FF:1F:6A:95:97:B5:47
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0197E41A10FE6BE250179CF2ED970C877F39
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ecooX1tpy_68qR_5Gf8fapWXtUc.roa
Signing time: Mon 07 Jul 2025 08:56:42 +0000
ROA not before: Mon 07 Jul 2025 08:56:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47690
IP address blocks: 77.47.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:1a:10:fe:6b:e2:50:17:9c:f2:ed:97:0c:87:7f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 7 08:56:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79ca285f5b69cbfebca91ff919ff1f6a9597b547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:fe:35:31:cb:4d:49:c5:24:a5:f2:6e:d6:
17:ef:1e:2f:46:ff:fa:db:ef:90:a1:5d:9e:9d:7b:
81:59:31:65:44:70:de:58:ba:f8:90:95:fa:6e:a3:
0b:da:4b:e6:62:8d:54:b6:a4:b1:6d:0a:6b:42:75:
90:b3:f4:e5:4c:bb:58:92:84:03:0b:6e:f5:68:c4:
38:83:a6:a2:6d:a4:c3:c1:de:15:49:07:b1:cb:00:
ed:73:dd:2f:ed:2f:31:40:16:25:b6:3e:99:0f:92:
3d:86:68:5a:e1:4f:1c:39:1a:af:46:5a:23:ec:d4:
a5:4e:16:39:17:ec:b2:dd:50:6b:79:e6:dc:87:bf:
58:57:e3:e6:0e:b1:78:93:4f:41:2c:f9:14:98:bc:
5c:40:36:dd:b4:a1:45:a3:9f:73:8d:05:45:16:26:
91:5b:bf:33:e1:21:78:c7:cf:d7:31:ef:ae:34:12:
d5:85:a8:0c:ee:4e:fa:73:ec:45:07:97:cd:0d:c4:
ef:48:09:69:02:08:ab:96:4e:e0:82:c3:21:c4:93:
06:4c:e2:2f:09:2f:05:4b:21:32:ac:46:d2:41:25:
8f:5a:4a:aa:89:12:19:65:3b:8d:6d:4e:86:a5:b7:
e2:6b:ed:b7:d3:ee:04:86:c2:81:8b:87:6c:e7:1d:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CA:28:5F:5B:69:CB:FE:BC:A9:1F:F9:19:FF:1F:6A:95:97:B5:47
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ecooX1tpy_68qR_5Gf8fapWXtUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.248.0/22
Signature Algorithm: sha256WithRSAEncryption
65:6e:b6:ec:1d:a2:12:da:d7:45:81:b1:be:7d:e4:0b:9a:c5:
3e:93:4e:96:71:76:40:b9:be:64:58:57:f6:fb:dd:e3:27:64:
74:40:16:d1:87:8c:4e:21:be:e2:2e:b1:4c:43:3b:34:21:fc:
75:48:49:37:f2:15:1b:46:f7:34:a3:89:b1:82:65:8b:54:bf:
b3:54:3b:07:cd:4a:cd:48:30:b8:a3:09:92:20:14:f3:a1:51:
b6:28:61:da:34:17:1f:9f:2f:f9:08:80:ad:15:c5:0b:a7:6e:
f6:f1:a0:6c:a9:10:4c:ab:fa:db:f8:92:60:dc:ae:32:51:75:
a6:4e:24:23:24:67:f8:35:01:e3:50:a7:62:dc:74:11:a0:29:
c2:72:d6:ec:76:6c:59:67:1c:71:e1:ca:fc:34:e4:21:1a:b4:
1e:4c:78:d1:a3:17:6b:fd:90:d9:a9:af:1e:ed:1b:19:8d:2b:
92:8b:e6:50:16:23:2e:ed:4b:24:48:69:19:1e:a2:1f:b0:be:
88:87:27:ec:ae:aa:0e:a7:2c:5e:69:4b:89:30:9a:0e:2c:3a:
c3:cf:f7:16:37:89:8a:dc:ff:bb:43:96:dc:12:12:54:37:ad:
37:b7:4f:38:e2:f6:cc:0d:14:57:1a:83:11:7b:53:4d:bf:5c:
cb:05:2f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:10:29 2025 by rpki-client