Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/o979ZrblSrorE9B9zxDq41HUGYA.roa
File: o979ZrblSrorE9B9zxDq41HUGYA.roa (raw, json)
Hash identifier: kigJPd/hpDjSHjs7rzVTH64QUtXJbGCT3yl7CjOiV2A=
Subject key identifier: A3:DE:FD:66:B6:E5:4A:BA:2B:13:D0:7D:CF:10:EA:E3:51:D4:19:80
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019735244200F468F2B361243400B0FD0A14
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/o979ZrblSrorE9B9zxDq41HUGYA.roa
Signing time: Tue 03 Jun 2025 09:34:18 +0000
ROA not before: Tue 03 Jun 2025 09:34:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205220
IP address blocks: 46.34.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:24:42:00:f4:68:f2:b3:61:24:34:00:b0:fd:0a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 3 09:34:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3defd66b6e54aba2b13d07dcf10eae351d41980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:be:ac:fd:5b:e9:2f:b9:18:c9:9f:d3:00:
fb:96:36:fa:32:b6:45:79:5a:04:7e:66:cf:7f:2b:
9f:02:aa:60:27:e7:8c:90:ff:40:38:31:3b:f7:38:
7f:17:2d:6a:39:32:6f:00:e5:66:bb:8f:ad:cd:66:
42:ef:73:d9:b7:18:59:27:eb:86:cf:f7:2b:36:5b:
b0:61:a8:33:02:63:45:2f:2c:46:9a:54:75:aa:5e:
9e:10:e1:44:f1:ee:96:ec:a7:cf:7d:cc:3c:e1:e8:
28:36:5d:ad:69:19:86:f8:2c:8b:1c:4e:75:38:69:
ee:8e:47:bb:67:a2:94:cb:fe:7e:c6:2a:63:83:f2:
3d:a6:92:a0:1d:8e:e1:78:81:fe:fc:32:2f:e7:8f:
69:96:26:07:ee:3f:04:2e:b1:ac:c4:11:bd:0a:b3:
78:2a:00:da:8d:45:32:9a:6c:56:12:68:11:d3:b7:
f1:bd:4b:e3:ab:5e:c3:f8:28:f5:f8:97:d7:7b:02:
e5:05:de:87:9c:52:6d:42:07:eb:71:63:b8:0f:50:
85:5d:c7:eb:f6:3b:b5:88:34:53:3a:32:f3:27:60:
10:0e:ed:c0:13:07:27:eb:4d:07:96:f1:15:2f:9d:
7e:a8:de:94:58:b5:4c:63:3f:12:de:9c:bd:4e:13:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DE:FD:66:B6:E5:4A:BA:2B:13:D0:7D:CF:10:EA:E3:51:D4:19:80
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/o979ZrblSrorE9B9zxDq41HUGYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.50.0/24
Signature Algorithm: sha256WithRSAEncryption
32:0a:df:d5:b0:ca:c7:7f:b6:37:9c:99:2a:42:75:1c:e5:2c:
17:13:03:9a:b5:24:a8:58:f1:56:49:43:66:0b:14:fb:b3:97:
3c:a0:3a:b5:04:9e:12:a8:c0:57:ef:63:18:90:5c:00:ca:36:
a0:59:3a:79:2e:21:bb:7a:2b:45:a4:1a:b2:86:a2:9f:e8:43:
70:44:7b:cb:f2:1f:0c:62:a9:40:a9:4e:50:68:39:bb:28:c9:
0c:39:53:61:7a:db:aa:24:60:0d:94:d7:8c:35:88:4a:89:20:
58:8b:2d:69:8b:a9:c6:d0:a7:ae:52:fe:01:43:6d:96:6a:0a:
09:a6:a2:64:f0:e5:ea:c8:7c:0a:31:6f:4b:60:f6:37:a3:f9:
41:f1:8b:ba:40:b8:f5:5e:d7:21:1a:b4:e8:6f:b6:df:4d:83:
0d:da:52:b5:02:5c:d2:93:c7:51:00:73:df:89:e1:59:80:6c:
74:e5:a6:eb:fb:85:80:b8:f7:87:db:a8:4a:a1:99:ea:e8:e0:
b3:f8:71:e7:d9:ec:9a:9e:8b:32:db:a5:2d:28:98:1a:96:d0:
7f:6c:98:f4:26:d8:07:4c:50:c7:0f:3a:22:6c:c1:df:68:d4:
e8:9c:7c:6c:67:a9:1b:40:77:33:bb:9c:b3:5f:38:45:78:81:
a4:1a:b5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:19:19 2025 by rpki-client