Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DxssUItpKTf_pDF1wFehNUw1pXY.roa
File: DxssUItpKTf_pDF1wFehNUw1pXY.roa (raw, json)
Hash identifier: ddBdJMTzIE0OdtKeWZbUKFRq9qz5F6Xn33y0vgbGpjA=
Subject key identifier: 0F:1B:2C:50:8B:69:29:37:FF:A4:31:75:C0:57:A1:35:4C:35:A5:76
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197E955E0A17D165880EC8E4E894DA3221B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DxssUItpKTf_pDF1wFehNUw1pXY.roa
Signing time: Tue 08 Jul 2025 09:20:08 +0000
ROA not before: Tue 08 Jul 2025 09:20:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43043
IP address blocks: 77.90.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 17:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:55:e0:a1:7d:16:58:80:ec:8e:4e:89:4d:a3:22:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 8 09:20:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f1b2c508b692937ffa43175c057a1354c35a576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:56:69:3e:23:fc:18:e7:26:2b:7f:70:2c:
c0:91:05:d4:49:3b:ff:f5:63:d3:8f:ac:73:6f:36:
05:50:10:98:db:59:f0:4e:9c:14:27:03:e7:fb:e0:
40:f1:88:b3:78:27:d1:19:3c:e5:2f:c0:7a:02:17:
92:bc:1a:0c:07:fc:82:3b:39:37:14:93:1e:49:93:
8b:c6:de:15:63:74:57:a9:84:e1:05:68:21:f0:b1:
fc:39:27:94:c7:8f:ff:0e:56:f6:2a:c6:d8:06:c1:
c5:bb:86:cc:c7:6f:bd:d2:8e:1e:e7:7b:1f:d0:7d:
58:6e:f4:07:3f:df:67:61:13:70:b7:a6:21:62:ec:
20:1c:44:c1:25:d7:a2:29:0a:d7:7d:91:00:1b:bd:
dc:2e:8d:4a:ff:f3:b3:7d:f9:49:bf:ef:81:40:90:
7a:43:21:b4:4f:85:15:7d:95:0e:0b:28:e6:43:8e:
58:c7:21:89:15:7b:aa:88:38:30:1b:50:58:98:f2:
88:fb:15:d5:6d:b9:a0:b7:3b:52:f8:bf:29:cc:4e:
1a:54:c8:19:60:df:48:45:2c:34:b2:b9:35:30:aa:
e2:af:84:c5:b1:95:ca:63:60:4b:6a:9d:1b:df:7b:
ac:d0:fd:8d:a9:f0:df:81:a8:88:63:05:bf:bc:fe:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1B:2C:50:8B:69:29:37:FF:A4:31:75:C0:57:A1:35:4C:35:A5:76
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DxssUItpKTf_pDF1wFehNUw1pXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.33.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:38:7c:5d:8b:57:6a:c5:3e:2f:e3:e7:94:42:e1:bd:05:7d:
22:20:3e:21:4e:81:8d:09:7a:29:05:c6:e7:24:17:5d:d6:3b:
e5:2c:ae:48:9e:1d:cc:03:ce:1d:28:c8:bf:4c:b8:49:b8:d6:
05:50:52:d9:b0:82:e2:4a:b8:49:17:f8:d0:e5:e6:21:cf:21:
f7:10:81:3f:0d:f1:48:95:f3:c2:dd:ac:1f:a7:f2:78:4f:c4:
82:7c:e9:c1:05:20:b2:ec:b5:60:d7:4e:04:e4:b4:d8:ac:f4:
14:27:84:2a:1a:c6:d1:bd:64:fe:8c:96:1f:c9:80:0b:62:73:
c4:99:3e:39:6b:b0:50:76:75:ec:38:3e:bf:58:c5:b6:ea:bc:
ea:7c:dd:e3:a1:0e:3f:57:1f:80:0c:9d:5d:37:39:7e:9f:63:
3a:6f:d9:48:47:a8:ae:47:69:7a:47:12:f0:e8:b4:63:c0:a3:
b3:99:7b:23:48:b6:ea:0c:07:91:55:3c:2a:8d:4b:fa:1a:9b:
6b:f7:37:9d:a4:98:f7:6a:8e:57:d5:da:20:26:4c:41:d2:56:
1d:90:ac:46:2c:1f:e1:7d:26:77:45:a5:75:ac:00:4b:3a:0b:
02:57:49:45:a0:83:c0:dd:de:bd:f4:79:47:ad:bb:a5:03:45:
e1:de:28:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:54 2025 by rpki-client