Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/7Ms2re6yrcU_4KWkqgeF0A-37o0.roa
File: 7Ms2re6yrcU_4KWkqgeF0A-37o0.roa (raw, json)
Hash identifier: 2PS3jmQMAVO4d5GHcps6+eKUgMjnqVMn7yyAAVL6E+c=
Subject key identifier: EC:CB:36:AD:EE:B2:AD:C5:3F:E0:A5:A4:AA:07:85:D0:0F:B7:EE:8D
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01973E8DEBA9FFA4E5FDB1093052A734C00B
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/7Ms2re6yrcU_4KWkqgeF0A-37o0.roa
Signing time: Thu 05 Jun 2025 05:26:17 +0000
ROA not before: Thu 05 Jun 2025 05:26:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 84.55.17.0/24 maxlen: 24
84.55.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3e:8d:eb:a9:ff:a4:e5:fd:b1:09:30:52:a7:34:c0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jun 5 05:26:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eccb36adeeb2adc53fe0a5a4aa0785d00fb7ee8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:33:56:fe:d8:a5:c5:2f:30:49:fe:b0:c6:
08:be:10:47:b1:73:cb:77:32:15:7a:1e:00:96:4e:
f4:55:09:df:d7:82:31:c9:11:0c:82:42:b2:ca:cc:
01:b2:53:3f:85:57:e9:5c:29:1b:fb:d0:ce:4c:ec:
2d:ca:c3:52:48:d5:a7:59:1d:7e:1b:5c:c2:c6:1f:
d3:73:6f:30:f9:83:94:35:ca:e7:0d:5b:b8:6f:f9:
9f:0b:f1:f6:32:47:84:84:25:e7:5e:1f:9a:db:4a:
34:07:bc:12:2d:b7:36:eb:a4:28:57:cf:d3:25:b6:
8f:69:c0:99:bc:65:59:46:54:58:04:f7:09:db:87:
ba:e7:64:16:49:d2:e7:64:e6:35:01:af:5c:8a:76:
ea:02:55:2f:53:93:51:54:54:28:c7:88:9a:57:2f:
17:35:ff:30:50:c9:67:c9:a1:ac:c3:a9:b2:d7:64:
60:ba:c8:35:72:63:77:9e:86:f1:6b:d4:0c:90:44:
fb:55:ed:56:a7:a7:02:f5:ee:5e:c1:27:0b:49:c9:
e2:93:4f:d1:19:e6:97:bb:b4:65:b3:9c:53:d4:a6:
69:92:65:ae:39:17:ee:4d:4e:60:da:38:6e:b4:ab:
86:f4:b5:82:cb:71:d0:90:c8:a7:cd:67:bc:a2:3c:
69:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CB:36:AD:EE:B2:AD:C5:3F:E0:A5:A4:AA:07:85:D0:0F:B7:EE:8D
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/7Ms2re6yrcU_4KWkqgeF0A-37o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.17.0/24
84.55.22.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f9:03:68:81:e7:58:d6:e8:9d:4a:47:38:fe:83:40:e3:0f:
48:9b:ce:7b:77:a9:39:be:10:40:e4:5e:a5:89:d5:91:ee:37:
7c:53:77:dc:fb:40:38:ae:6e:67:36:17:9d:e7:82:ba:1d:82:
50:e7:4a:3c:57:b2:77:a8:3a:c9:03:20:6d:2f:39:e5:16:7e:
b8:e4:b0:7c:2d:dd:65:17:73:1f:d6:88:67:ec:b7:23:52:0c:
8a:0c:d7:9b:19:bd:8b:8c:91:e1:b6:77:c2:78:d4:1a:9d:5c:
58:5b:0d:ba:a2:74:90:4f:a4:9b:5c:11:f8:cc:43:f7:c8:64:
3a:76:33:8e:67:bc:ec:d2:67:6a:7c:f7:94:8c:2e:07:25:e2:
58:a7:18:30:01:31:b0:ee:9d:ee:14:78:9a:f8:9e:51:c7:bc:
50:ff:ac:92:b4:83:23:80:b2:22:95:08:1c:2e:26:0e:ce:64:
86:59:ec:2b:21:c7:19:41:60:6a:c5:60:35:5b:60:0c:a7:1a:
0d:1d:1f:3e:ac:64:43:20:74:22:c1:ae:e3:1c:8c:9c:35:93:
e7:be:77:9d:ad:45:1d:ef:04:69:91:a5:50:0e:f4:df:d1:42:
cb:85:24:6d:ce:a0:85:2a:8a:67:a2:9d:c2:4e:b6:4a:95:7e:
40:a9:56:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:26:06 2025 by rpki-client