Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/FRvZFyOxFoddRwR8NWy2iDyogY8.roa
File: FRvZFyOxFoddRwR8NWy2iDyogY8.roa (raw, json)
Hash identifier: bzSWZTj+o0faBM1dsh+8mBoLaK0jcFLNse7M1DVkpUs=
Subject key identifier: 15:1B:D9:17:23:B1:16:87:5D:47:04:7C:35:6C:B6:88:3C:A8:81:8F
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01970CBE1C0376CFB010DFB158F27A1CFAE1
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/FRvZFyOxFoddRwR8NWy2iDyogY8.roa
Signing time: Mon 26 May 2025 13:17:54 +0000
ROA not before: Mon 26 May 2025 13:17:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39020
IP address blocks: 37.235.53.0/24 maxlen: 24
45.151.75.0/24 maxlen: 24
151.236.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:be:1c:03:76:cf:b0:10:df:b1:58:f2:7a:1c:fa:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: May 26 13:17:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=151bd91723b116875d47047c356cb6883ca8818f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:f7:71:20:b4:d2:b0:e9:8d:9f:7b:cd:06:
54:9f:df:b3:ca:46:2c:48:59:5f:53:8b:6e:b1:d8:
66:34:f5:f4:54:21:7b:16:d8:e9:4c:35:1d:4d:11:
72:e1:27:07:5f:6e:2b:f9:70:83:87:01:2f:f7:ea:
f6:8d:80:fa:9f:14:c0:f8:33:a9:7c:a7:12:4e:b8:
ff:ef:dc:0a:86:1e:fd:91:1a:45:78:82:c1:96:1e:
5e:fe:6e:32:a8:73:27:c7:60:82:ea:7f:13:2d:d0:
47:dc:3a:59:f7:41:d2:01:37:16:92:1d:17:75:a4:
07:73:fd:6f:3e:27:c9:45:1a:a1:56:94:de:2b:c5:
5a:85:39:07:6b:e6:c3:ed:fd:18:bd:52:bf:1c:a6:
84:b8:c1:4c:16:e8:5d:f0:14:3b:24:70:61:c0:76:
be:33:a8:67:74:19:33:07:6d:47:57:26:2e:de:bb:
1f:d9:69:03:af:75:3f:c8:6a:26:60:89:66:45:59:
db:8b:38:0f:5a:54:60:88:b6:a7:fa:2a:fb:cb:9e:
28:53:75:9c:76:08:fa:e2:4c:3c:0c:92:66:ec:93:
b1:e8:39:27:89:49:af:42:39:26:0d:2f:fe:7c:da:
22:7a:1c:12:30:82:99:f3:a0:a9:48:75:1f:59:3b:
bb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1B:D9:17:23:B1:16:87:5D:47:04:7C:35:6C:B6:88:3C:A8:81:8F
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/FRvZFyOxFoddRwR8NWy2iDyogY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.53.0/24
45.151.75.0/24
151.236.23.0/24
Signature Algorithm: sha256WithRSAEncryption
21:91:a7:6f:22:d5:93:20:1c:68:ca:62:1f:55:6f:0a:22:61:
4a:cc:96:41:f8:e7:b5:60:12:95:97:6e:c8:60:c0:c5:a8:09:
be:5b:92:51:ca:a0:0e:37:ef:37:4b:fc:e2:8c:2c:79:0b:60:
c6:57:d8:67:5b:5a:1b:db:8c:0e:8d:88:a3:cf:4a:cd:e1:72:
7a:cc:23:05:bf:9c:3e:29:85:28:60:5b:9f:33:9f:9f:54:f6:
4f:a6:2f:3b:26:81:2b:26:fe:7a:06:40:e9:e8:97:9a:c3:1a:
9a:3e:1e:e0:1b:0e:f0:93:ed:9e:8f:73:0e:65:10:18:55:ce:
76:6a:8a:ec:ef:e5:15:a5:e1:c1:8d:55:0e:04:33:97:5a:3a:
1a:72:89:4e:45:b5:6a:4a:6a:27:f7:04:b4:5d:3b:67:19:67:
6e:b6:5c:7a:8b:84:94:83:a1:2b:a8:f2:a1:38:98:c1:8b:69:
bc:a7:be:5e:89:94:da:1b:ae:ef:5d:74:f8:ec:1a:80:d5:e2:
aa:70:d9:8d:41:f2:db:c6:bc:e2:66:78:68:e2:cd:fb:e0:62:
ef:ad:83:df:70:92:ab:7f:34:f3:0c:03:64:fd:6c:bf:31:f3:
6e:0f:04:29:9f:9f:1e:d7:da:c9:e1:e9:e1:fd:b9:89:a0:a4:
55:dc:1e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:09:07 2025 by rpki-client