Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SyFtff-EAvzS5n0UIMQn6msKD4I.roa
File: SyFtff-EAvzS5n0UIMQn6msKD4I.roa (raw, json)
Hash identifier: +RKIhgdxWCqZE0l2aoXGPnpE440wCIFIPwpq2yuDag8=
Subject key identifier: 4B:21:6D:7D:FF:84:02:FC:D2:E6:7D:14:20:C4:27:EA:6B:0A:0F:82
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197D48A9C240C9BA976816B2CEBBADD568B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SyFtff-EAvzS5n0UIMQn6msKD4I.roa
Signing time: Fri 04 Jul 2025 08:25:42 +0000
ROA not before: Fri 04 Jul 2025 08:25:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 82.153.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:8a:9c:24:0c:9b:a9:76:81:6b:2c:eb:ba:dd:56:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 4 08:25:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b216d7dff8402fcd2e67d1420c427ea6b0a0f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:06:1e:d7:e9:21:1c:fe:13:c4:ca:db:5b:
b3:43:a9:59:91:d7:3e:bd:5c:46:91:c8:ae:d8:33:
62:b3:5f:c9:97:b7:fe:a5:d9:f2:b2:8f:ad:42:1f:
a7:35:0f:af:c4:0e:07:ae:40:c7:3e:a6:16:6d:d8:
de:32:2b:1c:75:af:92:b9:d3:8c:b3:84:54:e9:40:
b6:61:6b:ae:1e:a1:9d:74:a6:a1:b3:22:e4:11:2f:
52:24:46:6c:de:e5:01:07:85:32:8e:d0:75:16:4f:
a5:32:94:c0:ac:75:8f:5b:c3:5a:cf:94:b1:30:1e:
4a:87:30:56:11:a4:63:75:fb:ee:6a:4b:53:54:a1:
4f:46:de:60:a2:7f:8f:bf:b5:b0:36:24:aa:d4:b6:
99:b3:3f:b5:63:11:0e:dd:fc:33:bf:7f:c5:d2:8b:
30:e8:1e:95:45:d5:94:9d:67:85:34:25:52:58:2e:
c1:8e:d0:63:72:51:c2:0e:13:aa:c3:a1:57:ec:cb:
13:7a:29:e4:9a:89:ed:a0:d8:df:0c:ba:43:33:2b:
40:53:10:a1:94:39:ef:c8:1c:71:cc:2e:ce:99:56:
f5:24:63:ba:9c:b5:97:ce:0b:db:25:c1:d2:6f:09:
1b:b6:bc:57:0f:d8:01:25:cc:48:c0:fa:49:31:f1:
d4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:21:6D:7D:FF:84:02:FC:D2:E6:7D:14:20:C4:27:EA:6B:0A:0F:82
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/SyFtff-EAvzS5n0UIMQn6msKD4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.243.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1f:89:b0:a7:9e:85:1c:d9:d9:fa:58:4d:24:fd:f8:39:5e:
56:46:e8:4e:7b:74:23:cc:3f:39:97:9b:34:e1:dc:c8:9e:69:
d4:bf:d2:0c:b6:02:90:ec:1b:86:39:8e:e6:7e:7c:fd:71:c6:
43:83:91:a5:88:fb:e9:2b:93:0e:71:da:d6:60:6c:b5:be:ab:
1e:ac:21:29:fc:ea:33:b6:d0:8f:b9:60:ee:37:5f:bc:21:ae:
2a:ed:7e:c1:b8:ef:49:6c:f6:c8:96:f5:62:5c:34:37:2f:7e:
db:e8:26:88:e0:a4:99:4b:0f:80:e7:e3:e1:53:cb:21:45:3c:
0e:f8:26:a4:be:76:5f:d4:42:78:8a:42:3e:af:d1:39:e7:5b:
ba:c1:07:f8:7d:86:0a:4e:26:2e:0a:1f:87:43:e4:69:30:76:
71:3c:3e:22:99:55:ff:61:3d:4b:9c:7f:e7:cb:ea:25:aa:ce:
04:76:43:a5:8a:93:18:b0:f9:1f:d3:bd:70:6d:d0:6c:42:88:
4a:3d:82:73:96:de:bb:f4:86:8f:28:0b:62:8a:75:30:e6:1c:
ac:16:5e:4b:5b:62:04:54:c9:25:4a:e9:06:dc:55:6d:a5:68:
d3:9b:64:d5:82:96:06:d1:88:c4:d9:f2:cb:0f:07:07:a8:2f:
8c:c5:f1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:10:01 2025 by rpki-client