Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/O9iLiDukjzuEHVR92JODiliJ4ts.roa
File: O9iLiDukjzuEHVR92JODiliJ4ts.roa (raw, json)
Hash identifier: Hfo7TZQBS0qIDHTaKxdlPp0dObysmORzpRJwx7Y2W20=
Subject key identifier: 3B:D8:8B:88:3B:A4:8F:3B:84:1D:54:7D:D8:93:83:8A:58:89:E2:DB
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0197071EE65EE1888F1CDDB023E80907FBDB
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/O9iLiDukjzuEHVR92JODiliJ4ts.roa
Signing time: Sun 25 May 2025 11:05:54 +0000
ROA not before: Sun 25 May 2025 11:05:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 89.187.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:07:1e:e6:5e:e1:88:8f:1c:dd:b0:23:e8:09:07:fb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 25 11:05:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bd88b883ba48f3b841d547dd893838a5889e2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:d5:b0:dd:46:7b:7e:dc:44:5c:f2:a6:7e:
08:4f:c5:f3:02:e7:43:ab:4a:2a:f3:8f:01:fe:b4:
4e:1e:b4:c7:92:b0:e0:7c:5b:b2:72:64:84:db:6d:
c4:e2:ad:c4:d0:53:fe:71:28:46:af:11:b1:b7:c9:
8e:8c:79:c1:60:b3:7d:1b:2f:52:35:1a:66:c9:2d:
d1:c7:6b:a1:03:c3:78:51:32:10:62:d7:de:62:5d:
c2:0f:66:67:a0:2e:53:44:d6:cf:6e:8a:77:25:d7:
49:01:cc:c9:d0:90:8d:c6:00:54:4e:16:f0:c6:7a:
25:f8:fa:46:af:ca:eb:b5:52:a8:56:7a:8e:ee:e1:
78:e4:8a:c2:d1:e0:e3:9c:66:44:5e:5c:23:1b:9a:
68:53:71:25:f7:90:2e:ba:29:49:f6:d7:e1:94:64:
41:a5:af:fa:9c:68:25:b0:62:50:7d:5d:28:6d:98:
11:1a:df:64:ec:7b:fa:2c:cc:34:67:da:e8:13:47:
43:22:83:7a:94:45:f6:12:ce:b2:15:98:48:cc:cd:
fb:c4:05:c4:df:91:64:1e:92:75:d5:8d:de:e8:c7:
57:7c:ce:2c:a0:20:05:12:8c:52:7e:b2:2a:d8:32:
c7:ec:9a:48:3d:ff:45:85:d8:de:fc:85:3d:a7:48:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D8:8B:88:3B:A4:8F:3B:84:1D:54:7D:D8:93:83:8A:58:89:E2:DB
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/O9iLiDukjzuEHVR92JODiliJ4ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.21.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:9e:7b:80:f4:2d:fa:5e:d8:d5:5c:3e:72:e3:3a:31:ce:72:
de:61:ec:82:90:82:9f:7b:16:ee:41:3a:f7:1f:11:60:cc:15:
80:37:a0:8e:cb:a7:09:c9:49:af:b7:76:94:69:64:61:23:26:
25:e5:45:7a:7d:1a:14:7a:ea:5b:45:d7:97:51:97:d5:31:9b:
6c:8a:fb:4b:69:ee:3d:d4:5c:8d:4b:97:19:0a:c0:e7:8e:11:
50:59:03:7c:c0:3b:e7:5e:b5:6b:46:dd:6f:f0:86:70:5f:e1:
60:3a:67:9c:fc:f0:13:b3:39:3e:a2:83:57:d2:32:c5:c9:f6:
35:80:7c:13:da:5c:1a:d5:de:7a:59:fa:99:07:d8:ae:89:66:
ee:9e:ae:22:e3:01:b8:ff:34:6e:b5:d5:07:06:db:27:a3:0d:
a4:29:d8:43:e5:e4:ba:79:54:66:2a:6a:a5:92:4d:32:fb:0a:
76:6f:4e:2f:0f:75:d1:32:07:54:53:ba:f2:43:f0:61:81:ab:
c2:a2:d5:93:ff:01:d8:6d:2a:64:17:0f:bc:fc:eb:81:88:b1:
45:3e:9e:26:1c:07:b7:60:e5:93:9b:96:b9:d0:86:e2:c9:c2:
50:46:e6:c2:c3:87:09:19:78:6a:c0:fc:14:8f:34:7e:ad:9e:
32:b4:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:48:49 2025 by rpki-client