Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RgvB7d4TCN0rr03afyGgKdK7IDA.roa
File: RgvB7d4TCN0rr03afyGgKdK7IDA.roa (raw, json)
Hash identifier: gKiwdB9Qn/2LCCxe9gImwIyIPoyT/r41AjDUb5R+grk=
Subject key identifier: 46:0B:C1:ED:DE:13:08:DD:2B:AF:4D:DA:7F:21:A0:29:D2:BB:20:30
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0196C689A1AC1C01E8A625D51E2941FE2393
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RgvB7d4TCN0rr03afyGgKdK7IDA.roa
Signing time: Mon 12 May 2025 22:07:10 +0000
ROA not before: Mon 12 May 2025 22:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.156.0/22 maxlen: 24
77.47.212.0/24 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.243.0/24 maxlen: 24
195.178.140.0/23 maxlen: 24
195.178.146.0/24 maxlen: 24
212.111.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:89:a1:ac:1c:01:e8:a6:25:d5:1e:29:41:fe:23:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 12 22:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=460bc1edde1308dd2baf4dda7f21a029d2bb2030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:fc:50:71:07:4a:df:9e:43:8a:a3:39:1c:
39:3d:39:97:69:ca:94:c3:a4:f9:07:26:89:84:92:
03:9d:63:6d:72:84:ef:b1:3e:bb:fa:47:13:ce:77:
e3:75:08:38:dc:ed:9a:89:81:d7:1a:94:6d:f2:88:
ca:ed:12:16:3d:1c:69:84:2a:5d:2d:1c:d3:0f:ed:
e7:37:66:72:29:98:59:41:30:49:91:19:44:71:c3:
19:34:94:b6:e2:39:0a:23:2f:fc:e3:57:f1:37:8f:
0e:9b:b3:d6:8d:e0:f0:ef:d9:02:0d:b6:80:ca:22:
c0:5a:e4:87:44:42:07:9b:88:6a:64:4c:6f:ec:e4:
df:b4:f2:4c:2f:db:29:72:0c:16:61:07:c9:80:7f:
31:f7:c7:76:11:6e:41:61:33:87:d9:2d:28:20:59:
4c:5c:7c:01:6c:8a:50:e8:31:3e:6a:6a:46:4a:ba:
1f:7f:83:ec:27:f6:5a:67:f1:f0:96:58:eb:d2:82:
1f:1b:43:51:fd:5e:ca:e4:f2:7e:09:ed:c8:c9:39:
3d:86:8c:da:6b:6c:77:48:6c:01:2c:50:6c:40:ef:
1d:15:18:9a:37:b5:09:65:36:72:1a:90:20:31:6b:
40:89:79:5d:10:6b:fd:2a:7b:c2:a1:e0:00:42:3e:
4f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0B:C1:ED:DE:13:08:DD:2B:AF:4D:DA:7F:21:A0:29:D2:BB:20:30
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RgvB7d4TCN0rr03afyGgKdK7IDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.156.0/22
77.47.212.0/24
77.47.240.0/23
77.47.243.0/24
195.178.140.0/23
195.178.146.0/24
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:60:bb:56:5f:4a:3f:f3:38:f3:8f:85:80:2a:1e:d2:ce:68:
06:3e:b9:1c:cd:90:00:62:79:e4:ae:b9:07:61:9b:6c:f2:ad:
6b:34:c0:dd:d2:e0:23:2c:92:49:85:93:e0:73:29:ba:f7:3e:
0b:fa:77:26:f8:7b:53:f0:03:24:85:46:13:07:e4:5c:b3:7d:
90:ba:e3:ee:cc:2f:50:7a:a5:b6:03:e1:33:60:ef:88:35:b7:
d9:97:9c:84:2f:fc:d2:fb:d1:e5:b1:88:3c:fb:2c:f3:5a:35:
96:69:7a:03:1f:c2:4b:be:ae:08:ac:2d:72:05:38:c4:23:39:
70:2f:fe:d0:79:c8:c3:e5:6c:b0:6b:8a:a0:cd:85:cf:7c:28:
58:a4:c8:b7:59:4d:51:2b:6e:ea:10:48:35:63:8d:c1:76:96:
44:48:ef:a1:6a:5e:f1:de:8a:f2:e8:a3:d8:3a:d1:48:82:13:
09:88:17:de:10:a8:28:91:91:3b:d7:00:0b:41:ec:e4:07:a0:
21:95:4f:2c:c1:8c:0a:ad:16:a6:ea:ea:81:2e:ed:a7:55:9d:
7a:de:51:4d:d8:c3:31:1b:90:92:39:c9:8e:c5:fa:08:d8:63:
0b:0e:e7:16:fa:ae:54:db:61:f8:03:e0:e2:2b:db:2d:ec:dc:
89:08:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:28:34 2025 by rpki-client