Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PhTX2X9eEwg0A69AWthvQuMjYxw.roa
File: PhTX2X9eEwg0A69AWthvQuMjYxw.roa (raw, json)
Hash identifier: uiv4Ds5hBiV7xk9EIh2UrZD0c6WVW7z94DTR3cIKcgM=
Subject key identifier: 3E:14:D7:D9:7F:5E:13:08:34:03:AF:40:5A:D8:6F:42:E3:23:63:1C
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01975AE0E66B3973855B5104FCBF7FB90479
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PhTX2X9eEwg0A69AWthvQuMjYxw.roa
Signing time: Tue 10 Jun 2025 17:26:17 +0000
ROA not before: Tue 10 Jun 2025 17:26:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215096
IP address blocks: 193.233.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:e0:e6:6b:39:73:85:5b:51:04:fc:bf:7f:b9:04:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 10 17:26:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e14d7d97f5e13083403af405ad86f42e323631c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:8f:1b:64:8d:b1:32:84:81:ed:73:39:08:
0d:e6:9b:1c:5c:cc:53:db:c6:b2:b3:e4:bf:62:bc:
81:ee:d3:1e:e1:3f:77:7b:63:1d:e8:2e:e2:87:05:
fa:77:9e:f8:3c:a1:c9:77:cb:68:a8:52:c2:93:6e:
e9:e1:f5:27:eb:f9:12:e0:f6:c9:53:c6:bf:cd:7a:
a0:cf:07:24:24:07:b4:eb:e8:02:77:31:b5:d0:99:
f4:83:4a:1f:33:56:dc:7a:95:95:6a:bc:2d:45:b6:
2d:ef:9a:2d:c6:8c:21:cc:5e:a1:e9:5c:f0:08:c2:
1c:4c:74:a5:2a:0c:49:9e:26:6a:69:3b:1b:f6:59:
c2:db:0b:fd:23:e5:b6:bd:2e:ce:39:49:1a:dc:15:
98:ea:fc:a9:43:0f:1a:f0:31:e8:be:7a:cd:70:3e:
28:df:11:1d:30:b7:dd:22:49:5a:24:36:95:54:31:
70:46:aa:1e:3a:47:16:a8:12:24:c8:52:d9:c9:fb:
3c:33:55:a5:9c:96:a2:53:d6:40:7d:4c:3f:72:41:
19:0c:70:1d:1f:20:a3:3d:ad:47:66:74:ef:5c:d0:
db:6b:6c:60:4b:1f:1e:3f:f1:41:60:2a:0b:aa:95:
ce:16:89:9c:26:b3:83:a7:11:19:20:75:03:dd:50:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:14:D7:D9:7F:5E:13:08:34:03:AF:40:5A:D8:6F:42:E3:23:63:1C
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PhTX2X9eEwg0A69AWthvQuMjYxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.237.0/24
Signature Algorithm: sha256WithRSAEncryption
13:5d:1b:ff:19:c6:e2:97:59:c5:dc:5f:f7:0d:27:f4:16:5e:
34:af:70:7b:76:d3:df:d5:1b:ed:a4:bd:6e:74:cf:13:c2:ca:
af:55:cf:8a:71:3d:8c:d2:8b:ad:6e:e7:46:33:89:92:8d:bb:
7f:f8:3f:75:3b:7d:b4:a9:7f:8c:67:59:7e:f7:a3:7c:98:2f:
47:8d:eb:37:bb:01:5d:95:17:1b:3a:b8:1a:8c:5f:00:23:55:
63:98:c4:54:68:f1:8a:f3:c6:a8:ca:28:b8:fc:85:ae:c5:c3:
46:90:c2:56:9f:f9:77:95:6b:4b:b1:c3:e8:66:fa:69:23:bc:
15:7f:77:38:d3:5c:f8:c4:04:83:37:95:b2:75:3a:b3:d4:90:
d8:1e:6d:21:93:49:6a:cd:db:9d:a1:ac:a6:14:43:20:10:ae:
4d:95:3d:1d:2a:73:ce:4b:df:e3:a0:52:e6:cb:18:db:eb:17:
36:39:c6:87:0f:fb:98:8e:74:b8:22:2a:bc:fd:e9:76:95:0a:
13:f8:7b:38:e2:da:7a:6a:6f:27:93:07:a5:46:72:d9:26:2c:
94:de:11:3f:0b:6b:f0:62:6b:d8:bb:04:a2:48:60:c1:16:5c:
04:fb:a5:4b:87:d9:c3:42:0f:1f:33:1a:67:84:02:41:e1:51:
d9:3c:5b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:36:51 2025 by rpki-client