Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/9iiCvQxUod6DvEnzFdFsdupl_0o.roa
File: 9iiCvQxUod6DvEnzFdFsdupl_0o.roa (raw, json)
Hash identifier: vWfISYW79jvaDXYphE6gmSfEJChmyi+tOmRMgdqGhOE=
Subject key identifier: F6:28:82:BD:0C:54:A1:DE:83:BC:49:F3:15:D1:6C:76:EA:65:FF:4A
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0196CDC2FFB8CB3F63473794BBED7F176066
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/9iiCvQxUod6DvEnzFdFsdupl_0o.roa
Signing time: Wed 14 May 2025 07:47:10 +0000
ROA not before: Wed 14 May 2025 07:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 217.177.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:c2:ff:b8:cb:3f:63:47:37:94:bb:ed:7f:17:60:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: May 14 07:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f62882bd0c54a1de83bc49f315d16c76ea65ff4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:68:ae:21:a0:62:ac:a1:da:e6:46:90:2f:
f0:ed:57:a5:b1:0d:2f:67:c0:14:47:12:22:32:c8:
41:db:a8:9e:d8:92:17:1f:f6:48:c4:ed:e3:e6:98:
41:3e:60:d5:4f:80:1a:22:23:37:37:f5:8d:cd:3a:
1b:73:c8:5b:d1:96:42:04:d4:91:10:22:fd:8a:b5:
7f:be:5a:0c:32:a3:3d:15:f6:34:0f:48:11:28:ef:
9f:50:22:79:50:7e:07:62:74:54:c7:67:a9:41:d7:
3b:6c:1b:e9:89:c1:44:72:dd:0f:69:8b:e9:7b:c3:
2a:2b:c0:c7:0a:c6:5c:8a:25:bd:ab:72:43:c1:3c:
fb:1d:93:aa:4d:82:7b:73:14:0f:d9:14:a4:f3:ab:
d7:dd:1b:ac:0b:72:03:bd:4c:95:9c:51:50:89:66:
90:2a:11:50:67:d6:b7:30:c5:b8:03:26:73:f3:3f:
55:14:b7:e2:93:a5:08:b9:c8:99:10:b9:9d:42:66:
dd:77:53:18:b7:c3:93:79:fa:f9:92:94:55:78:ac:
bc:fe:5d:f1:53:f0:39:41:0a:fc:0c:46:c4:de:47:
55:2c:b8:eb:04:4b:9d:2f:91:2f:0b:b3:45:14:5e:
47:2e:83:31:29:19:04:69:72:d8:43:76:6d:c5:34:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:28:82:BD:0C:54:A1:DE:83:BC:49:F3:15:D1:6C:76:EA:65:FF:4A
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/9iiCvQxUod6DvEnzFdFsdupl_0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.177.35.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:54:fc:c0:57:46:1a:65:14:a4:bf:b8:12:93:54:ad:07:cd:
35:07:41:99:02:f1:b2:05:00:df:ef:74:7d:2a:e7:a6:41:ae:
76:73:8d:8f:53:73:1a:54:2a:2a:52:d2:4b:50:25:56:cd:4b:
4b:b5:bb:f6:99:bb:da:98:7f:d0:bd:e3:31:b8:2e:25:0b:86:
c0:0a:58:24:c8:61:86:27:9e:ed:0f:20:2d:3f:ad:d5:62:18:
bd:21:0b:db:e6:94:f3:a6:2b:68:eb:ad:61:82:32:a4:0b:63:
e3:c8:2c:6c:16:27:a6:47:d4:b1:63:d2:70:a6:90:16:6b:3b:
35:c1:c8:1e:7b:b7:38:c1:b4:9d:69:5f:46:ad:43:05:d7:24:
d5:58:f2:a5:96:b7:72:d2:8b:75:76:46:ee:89:ff:8e:6d:f2:
b5:63:4e:0b:55:81:e2:d8:2f:b1:e1:a7:5e:f1:33:06:40:e1:
85:4b:76:04:a6:0b:72:09:46:43:3c:97:fe:53:7d:62:30:a2:
de:25:a3:c1:18:de:52:c2:0a:6e:f9:cb:65:31:44:32:96:9f:
da:ac:77:49:b5:54:f5:a8:d5:38:0a:b4:11:1d:d3:02:fe:6d:
31:77:9c:7d:22:04:79:e1:45:db:5b:2d:71:b7:ef:c5:07:3e:
34:4f:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:09:56 2025 by rpki-client