Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/DLDwVEnYFXLsBDbRJrOxJKffHzc.roa
File: DLDwVEnYFXLsBDbRJrOxJKffHzc.roa (raw, json)
Hash identifier: LaUJgYxwFmgOb0fRpiN/euPbOpm/FWpSG6tFUuOD+kE=
Subject key identifier: 0C:B0:F0:54:49:D8:15:72:EC:04:36:D1:26:B3:B1:24:A7:DF:1F:37
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01966D9C2017B4408DA0AA33602E9C42E628
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/DLDwVEnYFXLsBDbRJrOxJKffHzc.roa
Signing time: Fri 25 Apr 2025 15:41:10 +0000
ROA not before: Fri 25 Apr 2025 15:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.229.8.0/22 maxlen: 22
87.229.64.0/24 maxlen: 24
87.229.108.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
87.229.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6d:9c:20:17:b4:40:8d:a0:aa:33:60:2e:9c:42:e6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 25 15:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cb0f05449d81572ec0436d126b3b124a7df1f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:a8:12:6f:9b:0c:14:b3:ee:4f:ea:e2:85:
25:9d:43:bd:f1:09:cd:25:6b:eb:26:34:c1:a6:e1:
bd:67:63:ed:52:7a:e0:7c:7c:0c:3d:d9:8c:4b:fc:
9c:48:4f:ff:50:dd:bb:1c:0c:6a:04:a4:d7:01:e7:
7c:c0:fc:a6:66:6a:0a:5f:21:ba:e2:f4:2b:08:9d:
e0:b5:9f:aa:7a:4b:01:9c:cf:84:3a:6e:1b:03:e8:
e9:19:75:5c:68:0a:4f:e8:a1:7f:8a:d5:0f:51:5a:
22:3f:d2:9b:a0:1c:b4:47:83:d4:c6:3c:c3:25:b7:
d1:51:65:e8:ca:f5:d5:fd:97:54:bf:4f:c5:07:68:
54:b1:2d:23:77:cb:2e:a2:57:97:af:b4:cd:e1:9d:
eb:0f:31:48:38:39:76:a6:3a:76:05:2c:34:ec:53:
58:a5:bf:7a:15:0e:2b:d8:71:de:34:67:22:32:ff:
83:ee:f1:50:b0:e8:bd:c0:b0:18:cc:f0:1e:e7:82:
c8:21:da:71:b7:30:16:96:f7:bc:67:f3:96:41:0e:
09:2a:04:fe:45:09:aa:06:49:f9:92:f9:a9:c4:75:
5e:ea:9a:03:d2:f7:76:98:5f:2f:13:24:37:66:af:
87:42:98:2d:9f:66:71:df:d2:58:62:e2:a8:e7:0d:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:F0:54:49:D8:15:72:EC:04:36:D1:26:B3:B1:24:A7:DF:1F:37
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/DLDwVEnYFXLsBDbRJrOxJKffHzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.8.0/22
87.229.64.0/24
87.229.108.0/24
87.229.112.0/24
87.229.125.0/24
Signature Algorithm: sha256WithRSAEncryption
42:00:c5:08:a5:72:df:4a:a4:f6:ad:6d:7d:4e:68:51:a6:91:
fc:32:93:f2:45:bd:8d:2d:fa:25:98:d3:5f:27:7b:de:5e:7b:
5a:e4:9b:a6:c3:02:f1:81:24:5e:47:e5:87:7c:2a:c9:9d:58:
bb:4b:16:a3:98:d3:b7:ff:c4:50:92:a6:a6:16:86:86:44:a8:
52:64:8c:3d:06:59:98:f6:a8:70:c8:b4:94:a6:94:d8:ac:1e:
3b:a9:c9:dd:50:ed:51:bb:73:71:3e:5e:33:d1:ce:66:a1:b8:
e1:ab:43:fe:71:e7:c0:20:72:f7:a2:f6:a2:81:12:33:fd:a9:
75:50:c7:cd:22:5f:b0:18:0f:74:f5:0d:c9:d7:b6:04:b5:75:
b3:be:30:df:f8:aa:46:7a:ee:16:fb:56:54:86:da:11:5d:8d:
c1:98:f1:fd:f7:eb:d0:83:90:df:f6:98:f0:ac:fd:ca:3a:76:
fa:5b:e3:a3:cb:e0:c3:1b:45:c9:f0:09:9f:d4:3e:a6:6b:b1:
84:fe:70:a7:4e:03:34:a9:bc:e5:29:99:43:61:df:3b:85:10:
36:5d:0f:38:a6:49:2f:80:03:cb:00:24:43:7c:d9:85:bf:25:
10:47:90:f8:fc:b7:02:28:dd:dd:9e:cd:92:7e:6e:3b:2a:02:
83:c7:05:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:53:04 2025 by rpki-client