Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/e7Oz-8PTgcjuBZ-DuEHVUtllm-g.roa
File: e7Oz-8PTgcjuBZ-DuEHVUtllm-g.roa (raw, json)
Hash identifier: +mkoAws4wiEdtLdn7rVwsXQk/Mjc4lKPo7PZbvJxm3o=
Subject key identifier: 7B:B3:B3:FB:C3:D3:81:C8:EE:05:9F:83:B8:41:D5:52:D9:65:9B:E8
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01971B0E0CAF0A8CE6BCC7858F0762419974
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/e7Oz-8PTgcjuBZ-DuEHVUtllm-g.roa
Signing time: Thu 29 May 2025 07:59:54 +0000
ROA not before: Thu 29 May 2025 07:59:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212165
IP address blocks: 147.45.44.0/24 maxlen: 24
193.233.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:0e:0c:af:0a:8c:e6:bc:c7:85:8f:07:62:41:99:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: May 29 07:59:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bb3b3fbc3d381c8ee059f83b841d552d9659be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:8f:11:42:00:80:83:d1:96:13:e9:9a:9f:
12:45:aa:14:3c:5c:80:ba:b1:a4:18:76:ea:b5:9d:
64:28:75:d2:c6:6e:98:56:74:6f:ec:60:18:58:6d:
1a:dc:9c:2c:f9:82:f3:df:99:5d:e7:69:0b:0b:9b:
aa:ed:5c:e6:2a:ac:30:0e:d8:91:81:04:87:2a:95:
c6:7a:0b:aa:ae:a2:f5:ca:27:93:7c:f1:b4:74:67:
d6:f0:5f:fd:2b:b8:92:00:d6:8d:47:d9:69:be:09:
27:bf:67:76:79:07:34:64:64:33:fd:7e:99:9b:e1:
75:e8:73:66:4a:eb:8c:d6:2e:ae:8d:0d:74:67:2d:
e2:0e:4a:b8:e4:ca:90:3f:54:da:b0:de:f6:2c:cd:
0f:64:47:66:06:81:24:b5:2c:84:26:6e:18:be:13:
52:5b:bd:91:04:ed:20:dc:ea:5c:42:91:60:02:80:
55:9c:56:17:06:a0:81:ed:f8:fc:4e:56:58:4e:0a:
a4:7a:0a:23:92:4a:90:38:6c:6c:7b:61:8b:ba:17:
ab:96:6e:d4:d2:24:a3:62:47:46:27:b4:d2:ca:ed:
c0:74:a3:1e:9a:f1:be:cc:c6:0b:23:03:b8:0f:5c:
7d:d9:97:3c:3e:a6:fe:78:10:4b:39:89:6d:80:a5:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B3:B3:FB:C3:D3:81:C8:EE:05:9F:83:B8:41:D5:52:D9:65:9B:E8
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/e7Oz-8PTgcjuBZ-DuEHVUtllm-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.44.0/24
193.233.20.0/24
Signature Algorithm: sha256WithRSAEncryption
16:4f:05:c9:76:e9:bb:ff:f4:c4:1b:b5:1f:ee:6a:fa:fa:6b:
46:77:c7:57:1d:f4:e0:d7:36:68:44:f9:42:b4:b0:df:e2:1a:
e3:67:62:46:03:e7:ee:03:71:b4:d2:c0:f1:9f:af:95:97:80:
91:f5:e2:bb:7e:f1:c2:e9:46:5f:50:2a:de:25:fd:18:23:d7:
4f:75:c2:0b:4e:6d:ae:3a:a1:90:c6:1b:93:46:48:4b:73:4e:
7b:81:66:c9:ac:0d:bc:d5:83:34:31:6a:1c:0f:0e:89:c4:c5:
47:11:7b:7a:fe:83:e5:1f:13:f6:2e:d1:ec:70:c3:0f:ae:ed:
6f:87:51:60:44:a5:01:b6:4c:08:05:24:ee:4e:c8:3f:a6:d1:
b4:c2:cf:52:5c:bd:b6:67:d7:a1:95:e2:2b:62:91:2f:52:d6:
f5:69:d8:3b:ff:6a:b0:42:b6:f7:91:ef:b8:41:da:fb:f9:44:
c0:c5:e3:83:88:09:3f:08:53:c5:6c:13:69:ba:36:c6:75:82:
b5:ae:36:88:c7:54:57:0a:f6:3d:de:2f:ca:7d:66:b6:9d:3f:
48:ed:0b:4e:97:28:78:ce:94:65:82:f5:82:91:5d:06:e8:f1:
53:08:02:2f:f7:00:fe:c1:6c:5b:8b:55:8d:df:86:87:0e:ab:
7e:2e:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:06:30 2025 by rpki-client