Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tYgcLhSr79wsQw3_xhvpx0e2WFs.roa
File: tYgcLhSr79wsQw3_xhvpx0e2WFs.roa (raw, json)
Hash identifier: YTBegggTlB7Wi6S0pMJDI2jabe+gUVHWRXKRKtvx+fw=
Subject key identifier: B5:88:1C:2E:14:AB:EF:DC:2C:43:0D:FF:C6:1B:E9:C7:47:B6:58:5B
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0196C689A0AF8D93C947D63164E6CE3D5F54
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tYgcLhSr79wsQw3_xhvpx0e2WFs.roa
Signing time: Mon 12 May 2025 22:07:10 +0000
ROA not before: Mon 12 May 2025 22:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.148.0/22 maxlen: 24
77.47.212.0/24 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:89:a0:af:8d:93:c9:47:d6:31:64:e6:ce:3d:5f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 12 22:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5881c2e14abefdc2c430dffc61be9c747b6585b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:6c:4c:83:03:58:5f:e9:6d:f3:98:d1:c7:
06:d9:05:31:1e:a7:3b:f7:f9:9a:97:a5:1c:27:1c:
81:03:01:03:d7:e7:96:8c:13:c9:77:a9:3c:2f:2a:
d6:a1:25:8c:d9:73:6b:c8:10:95:8b:47:11:3b:59:
e1:cf:23:dc:49:58:d9:64:06:d6:9d:56:bc:fa:ef:
b3:af:45:6b:2d:6f:d9:8c:2e:ea:23:0c:e7:18:24:
f2:78:bb:2f:d9:e0:69:af:ae:da:6f:78:cd:b9:d3:
06:d1:f7:dc:4c:2f:78:7b:5c:46:e2:a0:77:35:ea:
57:be:1b:f0:72:cc:95:16:5c:3d:99:3d:28:20:09:
92:47:d1:4c:85:1d:bb:5d:52:0f:d6:24:ff:18:53:
24:4f:7f:4b:b5:a9:45:94:ae:db:f1:75:e3:de:5a:
47:52:2a:3e:1b:83:f8:7f:0f:35:51:ec:af:dd:d1:
27:65:1b:5f:bd:32:a9:b3:ca:41:c6:07:bb:3f:bb:
06:e5:24:00:0c:94:d4:3c:a7:ff:86:30:59:e9:56:
07:58:6e:16:74:b0:c8:3e:a4:8f:93:a3:0e:2c:0c:
0a:db:91:fd:20:22:2e:e7:a0:46:73:e7:05:75:d1:
44:88:37:77:b5:d6:25:f1:bd:80:0c:42:78:dc:ad:
36:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:1C:2E:14:AB:EF:DC:2C:43:0D:FF:C6:1B:E9:C7:47:B6:58:5B
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tYgcLhSr79wsQw3_xhvpx0e2WFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.148.0/22
77.47.212.0/24
77.47.240.0/23
77.47.244.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:df:4e:6b:f3:c2:2a:92:b0:dd:82:47:3e:e3:e9:41:cc:40:
ff:9f:71:13:cb:60:85:7b:d3:dc:98:1b:ab:d9:4a:84:21:0b:
9e:ae:9e:bd:1a:a6:42:cf:24:c4:ba:df:97:ff:30:a6:ff:9f:
e9:b1:8c:c1:12:3f:63:d0:14:ce:6a:91:9b:f2:4b:b0:9e:1a:
19:fb:3e:a8:9c:b6:89:1a:15:af:c5:8b:88:66:64:20:cb:c2:
82:e8:c5:4a:c4:cc:35:a0:17:4e:50:43:a6:e2:60:61:c9:68:
91:e4:7d:1e:fa:09:d3:c5:1d:db:7c:43:05:f6:c6:7c:e0:52:
ec:b6:0b:69:4e:35:fa:fc:16:cd:b9:be:67:00:74:dc:6d:f3:
ab:61:3c:4c:ae:30:a4:3c:2f:48:22:d3:d5:82:dc:73:66:44:
56:7b:42:2a:2b:85:54:20:aa:97:9c:cc:7c:cf:77:30:3f:2c:
3a:11:31:bc:ef:9d:68:8d:67:e6:89:d4:53:d8:d6:e9:09:d4:
46:62:de:dd:59:6c:76:8d:59:a0:48:12:8a:3d:24:1c:86:aa:
63:8b:19:19:f3:79:e6:30:ba:23:a5:fc:54:9a:3b:b7:93:28:
c7:90:2d:6c:06:e5:15:e7:7e:cf:27:0e:29:de:ad:c3:11:47:
81:74:bb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:44:28 2025 by rpki-client