Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fbc8V8CS3P0xLTCKL11MC_v1LN8.roa
File: fbc8V8CS3P0xLTCKL11MC_v1LN8.roa (raw, json)
Hash identifier: 0YoNup1ZFGASrirei/Qhz5xPu7DH5MQ0+qEvPxlrmf8=
Subject key identifier: 7D:B7:3C:57:C0:92:DC:FD:31:2D:30:8A:2F:5D:4C:0B:FB:F5:2C:DF
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01973999EB2987B42310EC702A6BC3F23BEF
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fbc8V8CS3P0xLTCKL11MC_v1LN8.roa
Signing time: Wed 04 Jun 2025 06:21:17 +0000
ROA not before: Wed 04 Jun 2025 06:21:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 77.242.146.0/23 maxlen: 24
83.137.154.0/24 maxlen: 24
88.209.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:99:eb:29:87:b4:23:10:ec:70:2a:6b:c3:f2:3b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 4 06:21:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7db73c57c092dcfd312d308a2f5d4c0bfbf52cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:19:09:7a:24:70:3c:cc:5d:63:73:7c:e3:
db:3e:4b:ea:7e:74:9f:ef:82:b9:d9:d8:08:3e:26:
44:9b:b3:f7:f4:47:64:8f:3a:e4:b9:85:5e:a2:59:
bd:b2:67:99:b8:c0:7c:1f:c6:4d:1c:9d:40:59:b1:
5a:bb:98:1d:4a:55:49:75:df:94:2f:de:37:f8:f5:
37:b7:5b:0f:c4:c9:d6:20:d2:a9:50:35:1f:60:42:
f8:0e:12:f6:53:38:54:b0:f4:ed:bb:e4:cb:dd:54:
10:34:78:b2:d8:f2:c0:1c:c9:b3:50:7e:69:c2:c1:
b3:9f:a5:b2:33:06:b4:61:b9:c9:90:95:ba:06:45:
20:ee:8a:6f:81:fb:a5:7c:3c:04:03:a0:f5:76:c9:
64:81:98:bb:c5:8f:e1:25:7e:86:2c:b1:e7:45:e1:
e5:bd:0b:d7:aa:bf:2b:90:bd:d2:e2:dd:e9:39:e0:
9d:39:1b:99:fb:fc:88:58:5d:37:f5:90:2e:f8:74:
13:c3:0b:80:7b:fa:64:f9:83:7b:51:29:a2:f6:66:
f5:21:c4:56:13:49:a9:55:7e:fa:53:6c:72:39:e9:
df:f0:1d:2d:0a:e8:32:25:78:4e:54:28:ca:c0:f0:
be:40:39:8a:75:08:ae:b4:b8:b0:fd:37:e1:98:65:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B7:3C:57:C0:92:DC:FD:31:2D:30:8A:2F:5D:4C:0B:FB:F5:2C:DF
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fbc8V8CS3P0xLTCKL11MC_v1LN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.146.0/23
83.137.154.0/24
88.209.230.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:86:65:af:96:e6:2b:f0:08:2a:db:a2:03:16:e3:cd:cf:c1:
eb:b1:a9:6c:83:e1:0b:9e:91:6b:ff:28:d9:c3:80:e1:81:49:
d1:58:28:ac:4d:85:00:88:d6:f9:b2:6f:fd:54:f2:ca:24:98:
4d:20:f2:b9:66:65:51:37:b4:cf:3b:14:91:c0:3e:7c:46:1c:
2f:5b:6e:02:fb:b7:1c:bb:ed:89:a9:0e:f9:7c:79:1c:a7:e0:
cb:c5:ca:86:25:f6:d4:0a:dd:5d:e8:86:3c:26:8d:4a:42:78:
53:18:b3:74:d7:8d:48:03:4f:5e:ac:7d:37:eb:a1:3f:f5:ec:
70:d2:95:70:6e:38:4a:8c:ac:97:85:e2:47:dc:e2:cc:96:3a:
1d:76:aa:7f:56:ff:37:eb:70:2b:fc:98:3f:0e:48:7f:62:40:
ed:c5:d5:64:3f:12:11:e9:9d:36:80:45:18:13:32:9a:60:c5:
91:a9:3f:a1:84:35:3c:d1:6d:2e:aa:14:c8:41:f7:ca:73:43:
35:9d:51:8c:b8:6b:8f:e1:af:c1:c2:1c:2c:71:9c:e9:82:b8:
7e:bf:38:98:d2:22:65:a7:4c:4f:d2:66:f8:e6:3a:ac:9d:d1:
d5:10:72:b5:b7:83:f1:4f:e4:43:89:63:25:21:b2:bc:12:d5:
bf:12:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:53:45 2025 by rpki-client