Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/B7gCFjZVeNLW5hK77c-0N4WFxbw.roa
File: B7gCFjZVeNLW5hK77c-0N4WFxbw.roa (raw, json)
Hash identifier: tWsocaUyyxYU90b6yCtG5GWx8yEhokPRBicDQHH/U5s=
Subject key identifier: 07:B8:02:16:36:55:78:D2:D6:E6:12:BB:ED:CF:B4:37:85:85:C5:BC
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01972B87E3932EEE4681A6F821FE88AFEFA5
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/B7gCFjZVeNLW5hK77c-0N4WFxbw.roa
Signing time: Sun 01 Jun 2025 12:46:55 +0000
ROA not before: Sun 01 Jun 2025 12:46:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211904
IP address blocks: 85.133.246.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2b:87:e3:93:2e:ee:46:81:a6:f8:21:fe:88:af:ef:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 1 12:46:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07b80216365578d2d6e612bbedcfb4378585c5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:97:d7:fc:6d:bc:d4:2a:0d:37:9c:c9:11:
e0:5a:45:ec:e4:96:cb:7c:10:47:4e:75:e6:e3:c1:
ce:d8:40:5a:31:8c:11:f8:d6:0a:c8:ae:72:1c:9d:
0d:76:34:98:d9:6e:da:86:91:b7:f7:81:81:a5:27:
f9:2f:43:d6:d6:11:44:9b:3c:30:7c:e2:75:4e:ce:
7c:bd:05:f0:e1:5b:c2:bc:a0:49:82:44:73:a7:bc:
55:f0:45:2a:89:24:84:85:be:bd:b3:3e:99:60:0e:
49:e8:b7:20:3b:0c:20:00:0d:dd:8a:6d:f5:ba:7f:
0b:aa:18:36:ec:65:fa:22:af:10:e2:b9:d2:0e:04:
e0:a3:97:0f:fd:26:52:a4:bb:dd:c5:a3:94:da:3c:
52:42:be:d4:a7:e1:b9:99:67:13:9f:03:1e:78:50:
c3:bb:ed:91:c2:56:e5:48:2d:51:86:a9:f9:15:03:
be:8c:f6:c5:52:47:0a:64:c3:d7:bd:00:56:de:80:
5e:63:49:64:25:98:e5:62:2a:ba:8f:b2:26:fd:84:
5e:fc:3d:34:5a:c1:5e:99:bc:8b:59:d8:c9:bb:cb:
26:ad:95:68:79:bb:c6:25:f9:5e:f7:69:9b:45:03:
c4:e1:05:95:9c:12:1b:58:27:a4:1f:a5:ad:ae:42:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B8:02:16:36:55:78:D2:D6:E6:12:BB:ED:CF:B4:37:85:85:C5:BC
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/B7gCFjZVeNLW5hK77c-0N4WFxbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.246.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:7f:26:d6:35:9d:1f:19:c8:33:22:78:0c:58:71:f7:62:92:
dd:8e:7e:db:f0:c0:af:43:76:03:e7:00:83:5f:b5:43:49:dc:
03:7d:b4:90:de:b3:07:3f:52:19:4f:2c:6f:31:cd:8d:bc:10:
57:99:cf:26:29:3a:49:f7:93:16:34:08:4b:64:32:4e:d8:a2:
04:df:dd:42:ca:7b:42:86:62:70:4e:59:c4:b5:cf:a8:3d:bd:
d1:69:cd:f9:79:37:71:6c:34:fa:3f:a8:1c:c2:e0:c8:0f:ff:
e4:11:c5:38:41:1b:07:46:99:51:60:41:07:7f:bf:6c:5a:bc:
de:f7:4b:28:cd:ce:84:07:52:8f:43:63:09:e7:c5:1c:88:71:
88:ff:41:11:fd:50:46:bb:19:72:ca:09:be:c5:71:3b:95:70:
97:14:8b:91:f9:fb:58:22:b9:2f:18:56:6c:37:15:b4:bd:37:
80:69:af:c8:ca:11:9f:3e:26:a0:d9:38:b2:ce:c7:dd:3d:96:
04:3d:6b:e5:c2:82:7e:03:ad:46:27:90:eb:4b:1a:2f:bf:aa:
2e:fb:b7:24:7c:21:8f:1b:a1:37:13:e7:89:b3:e1:93:38:2c:
8b:7c:20:25:c1:1c:10:36:94:47:79:ec:2d:ef:aa:3a:70:27:
6b:36:74:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:28:18 2025 by rpki-client