Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/APGFyXnVFBZRxFcClB_6pxxFux8.roa
File: APGFyXnVFBZRxFcClB_6pxxFux8.roa (raw, json)
Hash identifier: 7R+SncMi0WFIOQ3ljgdQbHvLMq/Qb+Le04F+MOmfPOI=
Subject key identifier: 00:F1:85:C9:79:D5:14:16:51:C4:57:02:94:1F:FA:A7:1C:45:BB:1F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0195FFFEE6B92CC62E968EBDCF4A162566FE
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/APGFyXnVFBZRxFcClB_6pxxFux8.roa
Signing time: Fri 04 Apr 2025 08:50:50 +0000
ROA not before: Fri 04 Apr 2025 08:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 87.229.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:fe:e6:b9:2c:c6:2e:96:8e:bd:cf:4a:16:25:66:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 4 08:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00f185c979d5141651c45702941ffaa71c45bb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:7e:73:a1:a8:18:e1:21:65:99:82:65:8a:
74:95:65:8f:ad:7a:be:d8:60:82:ee:4c:b9:54:06:
6b:5d:2d:e9:91:e9:65:8c:e2:08:a3:46:32:05:f6:
53:34:c8:c0:02:83:8e:ab:c7:6b:01:83:0d:c9:99:
a1:de:81:36:a5:3f:2c:87:f0:03:bf:ef:e3:a0:00:
eb:37:78:3d:f8:d8:f5:b6:32:ce:4e:85:b9:fd:c0:
db:50:58:4f:ba:65:60:a3:7c:4e:f8:92:c6:88:8a:
a5:6a:34:3d:ae:0e:30:5c:9c:e8:5d:fc:a4:4a:2d:
32:5a:07:e3:96:63:b9:e3:ec:de:fb:12:0f:a3:be:
cd:a1:6d:b8:e9:29:9a:a8:ce:ce:bb:75:3e:a4:30:
41:ab:b4:4a:e3:16:9e:b2:c6:24:f5:a0:2e:03:ee:
86:97:22:b3:da:5e:91:2d:3e:a2:12:0a:91:64:72:
62:ff:5b:d5:d3:de:d7:36:b9:da:5c:21:2f:b8:8e:
f2:89:a0:ed:b4:7c:bd:d8:c4:1a:b8:68:e2:2a:1f:
32:75:36:4b:58:9c:4f:8b:bc:99:0a:1f:9d:56:38:
be:2a:4a:50:2c:c7:15:a0:2e:27:e9:30:23:b7:14:
d5:97:7d:e2:c1:f0:67:0b:40:c9:67:f5:8f:8d:0d:
7a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F1:85:C9:79:D5:14:16:51:C4:57:02:94:1F:FA:A7:1C:45:BB:1F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/APGFyXnVFBZRxFcClB_6pxxFux8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.97.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d7:b0:d0:6c:0d:e4:dd:76:e9:28:46:10:b2:5a:7b:d9:d7:
c1:51:59:2b:bc:54:b3:8f:01:98:05:0a:5f:c8:05:13:79:d0:
4d:a7:01:64:2e:1e:ce:9a:00:28:a1:59:84:ea:f5:02:e9:af:
23:d2:a2:3e:c5:28:d7:1c:1d:41:dd:fa:d4:d0:0f:06:0f:94:
2e:26:40:c9:ed:2c:aa:9a:a1:40:e0:15:f6:f9:b4:4a:8e:c1:
f9:b7:d3:ea:14:2c:6f:ab:85:1b:9f:d4:a6:4a:63:88:26:48:
31:41:ff:f2:1f:1a:95:9a:bb:03:99:44:41:d7:9f:a3:8e:23:
d8:a6:79:21:9f:c3:7c:20:61:e0:bc:04:c2:8c:49:fb:07:41:
9d:0a:1b:f4:44:ab:b2:07:4d:a1:72:4b:52:62:37:28:cc:a2:
4f:31:48:e2:23:10:e4:2a:7f:b6:fd:ae:68:dd:da:83:ec:6e:
10:a8:ed:ae:93:bc:fe:36:53:49:75:75:df:f3:c8:c0:49:8d:
6d:b3:17:a8:f9:55:16:08:94:6e:5e:c3:f2:92:50:96:4a:bf:
38:8d:c4:26:76:8d:05:93:0e:19:3f:ce:a3:76:b1:be:d2:95:
48:ef:9f:7c:a4:bd:51:b5:37:80:5d:e7:0a:ab:cf:7b:35:71:
f9:19:68:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:58 2025 by rpki-client