Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/9VNSF5UtFgYDcn-DHdVIflEkK2g.roa
File: 9VNSF5UtFgYDcn-DHdVIflEkK2g.roa (raw, json)
Hash identifier: Bd8gptXnsyCaZSIm/0DdWBDRk8HDyH1Zijph4Kg4wIw=
Subject key identifier: F5:53:52:17:95:2D:16:06:03:72:7F:83:1D:D5:48:7E:51:24:2B:68
Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial: 0195A3250F258C21A1C756526D167A06DC36
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/9VNSF5UtFgYDcn-DHdVIflEkK2g.roa
Signing time: Mon 17 Mar 2025 08:07:49 +0000
ROA not before: Mon 17 Mar 2025 08:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 79.170.100.0/24 maxlen: 24
79.170.101.0/24 maxlen: 24
79.170.102.0/24 maxlen: 24
79.170.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:25:0f:25:8c:21:a1:c7:56:52:6d:16:7a:06:dc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Validity
Not Before: Mar 17 08:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5535217952d160603727f831dd5487e51242b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:81:8d:8d:9b:03:fe:91:e4:73:ef:0d:63:
5e:04:ba:a7:d8:dd:72:55:03:73:70:88:26:41:43:
28:7e:4f:23:b5:e6:50:da:22:04:ae:32:a3:c8:d5:
95:3e:ba:c3:7e:61:4e:20:67:9d:00:4b:72:05:79:
ec:77:c8:95:8a:f2:07:3b:da:b2:30:36:a1:18:5f:
33:b6:f5:0e:da:fb:8e:23:1f:8c:94:1a:e2:5c:3a:
66:fd:57:87:a5:db:f7:6a:0b:e0:bf:d2:bd:00:c2:
b2:0a:10:10:f1:d4:c2:fd:6f:f5:e6:07:d4:a5:dd:
17:de:59:42:1f:a7:3c:d2:8c:ee:d2:8f:e6:e7:51:
2c:2b:f7:c6:64:26:d6:09:4f:4f:49:1b:08:bb:00:
ee:12:67:01:d8:fc:70:9f:db:14:03:aa:fc:8d:4e:
9b:62:20:f5:5d:b8:74:b6:c9:0e:12:b7:c8:c3:eb:
7f:a4:ad:47:10:61:1e:93:6d:c8:f6:70:74:ca:b7:
b3:62:0b:04:3d:7e:af:09:20:51:fc:3b:05:6f:00:
2a:99:87:8c:e8:65:da:2e:7a:72:a5:70:a2:21:a9:
97:ab:0a:b5:a8:d9:10:1d:37:f5:49:85:0e:f8:8f:
c4:48:4b:a5:7e:29:63:50:ec:94:d9:a1:b4:07:5a:
d3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:53:52:17:95:2D:16:06:03:72:7F:83:1D:D5:48:7E:51:24:2B:68
X509v3 Authority Key Identifier:
keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/9VNSF5UtFgYDcn-DHdVIflEkK2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.100.0/22
Signature Algorithm: sha256WithRSAEncryption
50:d8:f5:91:03:cc:a5:ed:48:8d:c7:33:8c:1c:28:4a:5a:24:
78:60:2d:7d:bb:29:54:03:81:f0:51:1d:9d:6f:9a:88:83:2c:
69:25:6e:d8:13:70:7a:c6:08:5f:5f:b8:d8:cb:7f:5d:5f:f8:
fa:ad:e2:24:10:a7:a9:ed:60:b7:4c:02:50:d3:fc:76:0d:cc:
a2:08:0a:ef:60:11:8e:1f:39:a5:06:f8:3e:57:80:81:1c:86:
04:f9:f6:38:ed:85:8e:d6:53:e9:1f:3f:55:f3:34:b9:04:a0:
c3:4b:e5:83:72:45:3c:45:e7:93:67:3b:e7:af:2a:21:86:c9:
89:3e:68:ea:b3:1e:e1:f7:74:ed:54:90:66:1d:55:a7:bf:41:
f9:32:8e:13:dd:1e:f4:29:17:b9:82:3e:2c:7f:ea:63:b6:f9:
3a:ee:05:be:c6:f6:ef:6e:76:1c:09:79:e9:b4:1a:97:35:f2:
58:b4:8d:4f:f3:b9:8c:ec:33:fd:94:9d:c1:36:fc:12:d8:c7:
c4:0c:4b:7d:57:42:a3:e2:29:89:28:0f:0d:b3:ca:0d:a1:87:
0d:79:21:a1:4b:c8:4d:3d:9f:f1:fd:32:56:3f:0b:b0:2d:32:
0a:c8:f8:96:fe:8b:8f:7e:67:6a:a2:16:4f:cb:fc:6f:56:6b:
00:8f:cd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:26 2025 by rpki-client