Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B_7Zlkd4Da3E9wFCt54W5RXpv-Y.roa
File: B_7Zlkd4Da3E9wFCt54W5RXpv-Y.roa (raw, json)
Hash identifier: t+XndUbN6Hm/lPYW31tO+vpnF3Hi5LgCuvErDr9oYwI=
Subject key identifier: 07:FE:D9:96:47:78:0D:AD:C4:F7:01:42:B7:9E:16:E5:15:E9:BF:E6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 019737A4352F47E3A3D583696FEFA1A0E29E
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B_7Zlkd4Da3E9wFCt54W5RXpv-Y.roa
Signing time: Tue 03 Jun 2025 21:13:17 +0000
ROA not before: Tue 03 Jun 2025 21:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59817
IP address blocks: 185.70.56.0/22 maxlen: 24
2a03:34a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:a4:35:2f:47:e3:a3:d5:83:69:6f:ef:a1:a0:e2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: Jun 3 21:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07fed99647780dadc4f70142b79e16e515e9bfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:52:6c:f9:42:a3:5f:10:16:49:74:c5:58:
19:42:e2:a9:3b:54:59:f7:c1:40:e6:c2:ad:98:20:
bb:57:13:b0:71:3c:51:ca:40:e1:2f:b6:e8:98:8a:
92:9c:02:00:32:c0:f1:1c:c4:04:81:1a:5d:7a:37:
74:f1:40:6e:0b:3d:3c:6d:8d:c5:c4:bc:92:40:51:
4d:57:e5:39:9f:10:40:7b:c3:4a:fe:9c:ed:54:7c:
57:93:32:7a:67:48:e6:73:9a:93:79:1c:bb:67:34:
f0:5d:46:9a:04:e6:f5:0c:67:2d:29:34:35:1f:08:
26:4d:ab:97:e8:34:d2:56:ff:74:f5:18:49:da:0e:
de:ed:56:dd:75:22:25:6f:a8:93:92:3e:10:6f:32:
80:37:76:10:57:90:e2:1d:29:7e:a2:5f:2e:8f:7f:
12:7f:25:1c:7f:94:cb:4f:03:c0:13:8a:49:92:3b:
62:c8:4f:a3:46:21:a2:93:ff:bd:a1:4b:6c:ec:21:
78:cd:d4:72:f7:1c:bd:8b:0a:e8:3f:c8:8e:b9:2c:
3e:cf:de:75:5c:21:96:e6:9f:da:a2:9f:0c:73:fd:
f7:89:98:31:8a:46:9b:8d:21:8f:cc:7a:96:ce:ba:
5b:14:c6:79:aa:e1:e7:67:82:21:49:c3:4d:ec:28:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FE:D9:96:47:78:0D:AD:C4:F7:01:42:B7:9E:16:E5:15:E9:BF:E6
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B_7Zlkd4Da3E9wFCt54W5RXpv-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.56.0/22
IPv6:
2a03:34a0::/32
Signature Algorithm: sha256WithRSAEncryption
24:33:63:13:61:fb:4a:58:1f:ff:6c:46:fa:6b:e1:b6:c7:f5:
41:1c:62:30:f0:73:98:1b:b8:1f:55:3d:8f:f6:2a:90:8c:84:
26:f8:15:fe:f7:54:b5:98:92:eb:9c:a9:0e:8e:31:5d:f2:c7:
16:45:78:3b:ef:8a:06:7a:38:a9:77:47:4c:2e:d8:f8:15:89:
2d:2c:36:92:6e:a7:14:e7:8f:79:3a:c4:a7:02:52:86:11:8c:
56:d6:bb:96:c3:e9:e8:17:40:e5:50:1c:0e:f4:9f:6d:88:2d:
f3:e9:72:36:25:ea:2c:11:ea:c6:8e:29:09:4d:d0:38:49:72:
1f:22:da:bb:2a:47:57:43:b5:e8:99:a5:d8:5c:87:40:ec:b5:
73:86:e6:4d:f1:7f:97:7f:cf:84:ef:85:3a:47:6e:30:e5:de:
05:8e:6a:5e:cd:73:4a:8e:1e:4f:1c:75:74:55:aa:8a:c7:ee:
31:37:ec:f2:cd:c5:e4:85:c1:3d:94:52:85:33:f7:81:4f:95:
f5:de:c5:ec:2c:b9:41:44:71:8f:21:35:53:b8:96:40:fb:21:
74:96:0c:71:34:c1:7f:c0:dd:c4:c0:bd:a7:39:6c:3f:a1:41:
83:ea:7a:0f:24:bc:25:81:f8:ee:5e:5d:d7:8e:b4:ca:3c:34:
20:ec:2d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:14:30 2025 by rpki-client