Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/F9oMnlBaYcvudHdAu16anIbAsho.roa
File: F9oMnlBaYcvudHdAu16anIbAsho.roa (raw, json)
Hash identifier: Y2+lSCzHCoY6IW2lijDN5QVdOABERpdjfmMwMnErXhg=
Subject key identifier: 17:DA:0C:9E:50:5A:61:CB:EE:74:77:40:BB:5E:9A:9C:86:C0:B2:1A
Certificate issuer: /CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Certificate serial: 01975DA2C52A6FBEA7F23A5855043C60ADB0
Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/F9oMnlBaYcvudHdAu16anIbAsho.roa
Signing time: Wed 11 Jun 2025 06:17:17 +0000
ROA not before: Wed 11 Jun 2025 06:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 95.128.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:a2:c5:2a:6f:be:a7:f2:3a:58:55:04:3c:60:ad:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Validity
Not Before: Jun 11 06:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17da0c9e505a61cbee747740bb5e9a9c86c0b21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:85:7e:10:04:98:57:a9:1c:60:bf:a1:10:05:
d0:42:09:c5:fc:42:52:cd:00:5c:9d:b6:66:0a:c2:
8f:44:bd:8e:8c:76:ff:d2:22:71:3b:be:72:9e:19:
2a:04:7a:e3:13:5c:d0:96:b6:1b:c9:ad:92:d5:1a:
3b:87:27:2d:97:2e:91:fc:89:b0:5a:23:e0:52:51:
02:74:f4:e0:f2:33:73:05:ea:5c:7b:f2:e3:43:58:
66:29:c1:db:b6:9d:87:f3:b9:fc:d8:f1:31:b4:46:
e4:bc:c7:12:a3:e4:c2:8f:fb:02:14:d9:3e:46:6d:
ca:4b:67:4a:3a:ca:b7:34:6a:10:88:42:aa:e7:fe:
b2:7e:44:37:7b:2d:b1:3c:60:f8:a3:2a:ce:ea:b6:
a4:51:5d:b9:06:f8:e4:4e:8a:88:ce:75:43:a1:82:
a8:82:cb:2b:f2:e5:56:52:59:3f:f2:1c:91:ea:66:
2a:1f:f1:48:37:05:3c:7e:d7:8f:a8:b9:76:5b:e2:
5c:4d:03:8e:d9:21:19:d5:d0:17:ad:24:97:ce:f6:
91:50:0c:ee:78:b6:a1:2a:10:ac:d9:17:8c:3c:30:
c3:fb:65:52:75:ca:cc:8d:0b:3b:71:ef:01:0e:76:
d5:71:dd:1f:a4:9e:a8:97:59:df:2f:ff:56:0a:0a:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DA:0C:9E:50:5A:61:CB:EE:74:77:40:BB:5E:9A:9C:86:C0:B2:1A
X509v3 Authority Key Identifier:
keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/F9oMnlBaYcvudHdAu16anIbAsho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.197.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:69:20:86:7f:ba:23:d0:db:8c:e1:fb:de:b2:78:e7:c9:7b:
42:98:95:46:29:3c:fc:13:a2:1b:3c:76:ee:ec:d9:6f:39:1a:
e5:15:f6:b6:b5:28:81:fc:43:c8:73:00:2d:cd:2e:24:9e:04:
6d:64:3d:39:89:4e:40:42:7f:06:e0:71:8b:fe:d4:2d:a7:ef:
29:dc:41:63:64:bf:c5:bc:d5:da:cc:a5:96:50:90:3a:94:a1:
ff:02:b3:97:76:3b:d7:d9:bd:5f:7a:3e:a0:98:e4:03:d8:7b:
aa:a6:85:c8:48:89:e0:41:59:f5:82:30:d6:bc:e7:19:71:08:
d4:49:09:97:dc:93:aa:46:d2:87:be:ac:84:25:bc:73:a7:01:
45:26:04:42:ab:b7:fa:8a:b0:ba:88:4c:56:a3:78:05:26:b2:
3c:1f:f3:0d:97:fb:7b:4c:c8:00:5c:43:cc:62:ae:f6:2e:89:
f1:fa:02:20:05:7b:de:8a:05:a9:89:25:5e:dd:c6:b5:31:29:
1e:85:a3:bf:89:cd:50:1d:68:11:87:5c:b3:8f:db:c9:13:0a:
4d:76:a5:19:f0:95:18:8c:ed:53:eb:74:43:37:34:04:3f:e3:
9e:1d:44:21:a6:67:01:9c:7f:16:af:55:ec:76:4a:e1:f1:76:
e7:fc:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:45:02 2025 by rpki-client