Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/EOa7r-jJgtdz4RGUmunD8B8QB9E.roa
File: EOa7r-jJgtdz4RGUmunD8B8QB9E.roa (raw, json)
Hash identifier: 4iOebAizMatknAk9CDhaCyLQWxnN0bfea5KmgMRwulk=
Subject key identifier: 10:E6:BB:AF:E8:C9:82:D7:73:E1:11:94:9A:E9:C3:F0:1F:10:07:D1
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 019840FF612A0FC6075213E9DC8ACEE51F08
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/EOa7r-jJgtdz4RGUmunD8B8QB9E.roa
Signing time: Fri 25 Jul 2025 09:52:15 +0000
ROA not before: Fri 25 Jul 2025 09:52:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214670
IP address blocks: 195.5.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:ff:61:2a:0f:c6:07:52:13:e9:dc:8a:ce:e5:1f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jul 25 09:52:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10e6bbafe8c982d773e111949ae9c3f01f1007d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:e4:fa:e2:88:d2:86:32:08:3a:d1:e1:61:
58:0d:8e:58:4c:35:f4:d2:75:0d:a5:f1:10:61:74:
ba:86:b6:00:5e:9a:39:77:53:b5:1e:12:1f:2f:56:
07:6a:b1:66:57:42:1f:e0:94:c1:4f:e5:33:41:c2:
53:c5:7e:f2:24:b6:19:ec:18:f3:f5:4f:96:4d:11:
ee:26:18:af:a1:ea:37:0d:58:23:e5:d9:a7:71:44:
c1:cb:ad:22:46:fd:c5:75:e5:ff:27:a8:c2:75:41:
29:6a:2c:48:22:13:13:0b:20:b2:2c:fd:63:24:77:
95:6f:25:9e:d7:c9:df:73:9e:e9:84:01:fc:db:a9:
47:98:bd:0c:d7:34:2a:3c:cd:ab:d9:59:65:9a:f4:
e7:2c:07:10:93:c1:c0:fe:07:6e:d3:61:eb:5a:ec:
c9:50:63:53:51:62:20:11:1c:02:76:5f:6a:e7:84:
dc:37:4b:a2:fd:cd:fe:dd:b5:fe:07:49:a6:88:1d:
66:90:84:ec:22:08:14:00:56:69:61:6c:e4:0d:fe:
b8:53:c8:39:7d:42:04:14:cb:6b:ec:ab:f9:06:4f:
ae:e4:e0:71:e7:fc:fe:3e:93:17:3c:c7:22:e0:38:
a1:2a:51:bb:24:9a:59:24:4d:42:55:55:8d:96:d0:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E6:BB:AF:E8:C9:82:D7:73:E1:11:94:9A:E9:C3:F0:1F:10:07:D1
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/EOa7r-jJgtdz4RGUmunD8B8QB9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.161.0/24
Signature Algorithm: sha256WithRSAEncryption
16:74:5d:ff:ff:4f:eb:6e:17:bb:2a:82:02:7d:45:6f:25:f1:
1b:07:8c:96:1d:f9:c8:f2:44:6f:da:b4:69:f3:e8:1f:f6:86:
92:7a:90:e7:27:1d:95:2a:06:5d:18:65:27:6a:0d:89:03:c6:
bc:a9:49:4a:38:77:a9:9a:6e:c7:06:bc:03:5a:d0:34:41:ca:
ba:4b:17:63:bb:32:db:89:6f:ba:58:01:ce:51:87:02:92:94:
6d:84:bb:be:a8:7e:7f:a6:25:d4:df:e1:a8:c2:2c:7b:6c:3c:
47:62:8d:85:92:f1:bc:da:76:a3:38:b7:f0:b7:70:1e:4f:84:
ee:f7:96:40:2e:f0:bb:2a:54:f2:c6:84:63:35:04:15:2f:5a:
b2:e5:f3:8f:a0:55:bf:a9:78:55:99:d4:8a:aa:95:59:22:4d:
17:2f:c7:1e:4f:d2:30:5a:7b:4a:c9:08:3e:40:c9:7e:a7:38:
31:4c:c2:79:a7:2c:99:a6:9b:e0:41:87:65:b4:b1:dc:55:8e:
f8:7e:28:a5:36:9b:dd:54:fe:51:df:95:7f:60:58:10:9e:8b:
f2:13:36:c0:36:9b:40:e3:b5:04:9c:20:57:72:61:d6:f0:08:
9d:a5:db:73:a0:e1:c2:7c:3a:5d:d5:5b:73:7a:66:d2:f3:a5:
17:a0:77:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:22 2025 by rpki-client