Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/zEBQe0diBcaOVV5htU-MT0YXuxI.roa
File: zEBQe0diBcaOVV5htU-MT0YXuxI.roa (raw, json)
Hash identifier: vc03WVR1fNObTg7X+wnsDqJFAk1MeivSKBBQ+zB+8LI=
Subject key identifier: CC:40:50:7B:47:62:05:C6:8E:55:5E:61:B5:4F:8C:4F:46:17:BB:12
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 0197536EC5950200506C1167CE03D44CD20C
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/zEBQe0diBcaOVV5htU-MT0YXuxI.roa
Signing time: Mon 09 Jun 2025 06:44:17 +0000
ROA not before: Mon 09 Jun 2025 06:44:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 91.211.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:6e:c5:95:02:00:50:6c:11:67:ce:03:d4:4c:d2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Jun 9 06:44:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc40507b476205c68e555e61b54f8c4f4617bb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:cf:fb:7a:ba:f1:e0:bc:d3:e2:d1:7e:bf:
5e:32:bd:58:a8:a0:0f:c4:3a:5c:b1:ee:31:d3:f5:
b8:f7:cc:a2:da:c8:61:d3:06:a8:61:bc:8c:ed:a6:
66:f2:b9:69:92:da:54:ae:06:fb:e5:c3:22:a8:da:
5c:4f:83:41:7c:24:fa:ae:e1:80:83:71:c1:a5:a8:
eb:b7:ff:3b:20:38:b8:c6:cb:ec:87:0d:24:1d:a5:
6c:59:9a:a5:f3:5d:57:19:c7:5b:41:a0:49:ec:46:
48:a1:56:47:1e:9b:e3:d1:8c:b4:6e:ab:96:44:fd:
8b:d8:90:39:4d:6a:eb:00:1b:5c:ef:b0:5d:cb:74:
7d:fd:0f:6a:6a:bd:3e:79:f2:7d:cd:76:ab:b5:a1:
97:7e:35:7e:fe:b5:e6:ca:dd:ac:3c:70:4e:f5:96:
ec:3c:43:3e:92:25:9d:1c:9a:4c:fe:b0:c5:c8:33:
af:89:79:74:9c:b3:d0:d7:51:9f:c2:30:0a:39:a4:
40:1f:3d:c6:56:72:47:21:90:80:f7:2b:1a:a0:1a:
69:5c:14:e9:52:9c:2c:20:c7:b3:0e:5e:c5:b6:5d:
ad:52:49:d8:9e:02:98:9d:b9:e3:25:09:a5:1a:88:
38:a5:11:86:f9:c9:33:f5:8d:73:4a:27:4f:12:f2:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:40:50:7B:47:62:05:C6:8E:55:5E:61:B5:4F:8C:4F:46:17:BB:12
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/zEBQe0diBcaOVV5htU-MT0YXuxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.12.0/22
Signature Algorithm: sha256WithRSAEncryption
01:6e:1c:af:f7:84:1f:c1:6f:52:75:2e:48:8d:1d:b8:c9:9b:
c8:a8:c4:dc:90:c2:d2:2d:bc:13:d0:6b:b9:a9:4c:17:be:8e:
65:1d:65:9f:90:21:eb:bd:e2:f2:d6:53:2e:c0:e6:23:18:e7:
93:e8:ef:47:a2:fe:2a:06:b0:bd:ce:7e:6c:a5:41:f8:dd:83:
ba:1f:f4:1f:96:06:bd:00:40:a7:4f:9e:1f:a3:dc:8c:98:28:
1c:a3:03:be:ba:53:0f:44:b5:d6:02:4d:a5:bb:f2:e9:52:84:
ee:ce:8b:d4:4f:08:5d:e1:8d:c0:24:86:fa:99:2d:fe:4f:3e:
be:0a:fd:38:66:c7:89:d2:9d:12:63:14:97:90:bf:ad:4a:db:
70:15:f0:50:eb:09:96:fc:4e:28:df:8a:3e:c9:d2:cd:b4:27:
93:c7:6e:f1:64:14:2f:73:2a:73:c1:a9:7a:52:d9:ce:83:e7:
ef:d1:ee:a5:28:b2:1d:e6:29:dc:68:87:e5:40:43:c0:b2:db:
d1:17:53:63:0d:5e:6f:aa:81:ee:7d:1a:6f:d9:2b:24:6b:62:
fd:02:c2:3c:34:3b:3b:99:e8:19:a5:47:a0:ea:11:fe:ec:42:
44:da:77:85:35:d6:a4:5b:e1:c7:01:46:89:e9:68:b0:e2:17:
09:8c:81:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:56:21 2025 by rpki-client