Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IwzLypF2MU-pTFDnsCiuY3WaJYk.roa
File: IwzLypF2MU-pTFDnsCiuY3WaJYk.roa (raw, json)
Hash identifier: XQXtHXTcXj/WMau/XLWKQ77MOGuZUX1AIkpvqGSrkO8=
Subject key identifier: 23:0C:CB:CA:91:76:31:4F:A9:4C:50:E7:B0:28:AE:63:75:9A:25:89
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01975B44B168112D428AE5D80D55686C726E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IwzLypF2MU-pTFDnsCiuY3WaJYk.roa
Signing time: Tue 10 Jun 2025 19:15:17 +0000
ROA not before: Tue 10 Jun 2025 19:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207196
IP address blocks: 217.69.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:44:b1:68:11:2d:42:8a:e5:d8:0d:55:68:6c:72:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 10 19:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=230ccbca9176314fa94c50e7b028ae63759a2589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:09:bb:eb:43:3b:66:0b:99:92:c3:9e:5e:
89:15:b0:3d:9e:a0:1b:bc:f6:64:d5:45:81:1f:b3:
53:cd:e9:04:17:e2:59:83:7c:4f:ff:b8:5a:24:59:
b9:70:c2:47:9d:6d:91:b5:90:a4:c1:f1:23:c5:38:
7a:c2:74:b4:82:2d:59:f7:37:b5:f2:05:02:2c:34:
2a:53:4a:dc:20:f7:3d:22:25:ff:26:c4:41:cb:cd:
a8:bc:47:1e:8e:58:24:2c:23:44:89:0f:93:70:48:
87:bb:74:d9:bf:74:14:d1:86:38:c2:f5:f3:cc:05:
0a:56:15:a0:a4:1c:e5:7e:e2:18:09:bc:0b:35:e5:
63:39:88:ab:6a:af:5d:74:e9:2c:22:da:ba:c4:96:
ab:0a:85:88:d6:88:6f:ad:a7:4a:5d:bf:d3:01:79:
d3:e5:c9:bc:e5:8a:d3:36:d5:b4:84:4f:a3:dd:07:
72:7e:a5:db:b2:00:48:a8:5d:c6:ad:29:00:1e:84:
5d:d7:ce:4c:27:09:22:f9:84:b5:e3:1e:de:3c:9e:
25:a4:87:b5:a1:0a:84:94:9a:ec:6b:5d:0a:3c:c0:
c9:4d:c2:ae:a5:ab:2d:95:e8:8b:f5:4a:a1:fd:34:
96:03:4e:d5:20:d9:9b:bc:bc:a8:c7:14:0a:60:67:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0C:CB:CA:91:76:31:4F:A9:4C:50:E7:B0:28:AE:63:75:9A:25:89
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IwzLypF2MU-pTFDnsCiuY3WaJYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.69.167.0/24
Signature Algorithm: sha256WithRSAEncryption
82:de:8a:fe:5c:7c:2b:7c:79:ad:44:f3:db:4c:0b:65:d8:2a:
89:04:35:cb:6e:c3:d9:05:33:00:87:32:67:24:e5:3a:0d:2a:
af:37:4b:d6:d7:ec:36:cd:d0:73:29:89:3c:cf:ee:f9:7f:43:
99:d0:6f:90:70:c8:d4:17:b8:5f:16:72:33:ec:a0:c6:2b:c7:
fb:b1:03:09:bc:4e:14:11:e8:2f:16:86:86:bd:dd:54:06:2b:
15:bd:3e:b9:18:bf:e6:6b:ac:d2:27:19:39:e5:6d:a2:fc:49:
83:c0:15:57:f6:fa:34:8b:50:16:46:5c:a8:c0:48:be:1a:22:
9b:b0:8a:d4:c3:de:db:ec:07:18:e2:ec:73:5c:4b:6d:54:ce:
41:42:8d:93:22:74:d7:1d:b3:72:78:9f:e7:26:a5:5f:5d:83:
ac:59:5a:a7:52:60:5a:e3:78:37:ca:71:ab:88:d6:f9:c5:47:
1f:71:bc:27:b6:7e:54:cd:64:23:20:da:12:b7:01:62:0c:8b:
dc:8c:ba:e6:bc:5a:ec:cf:5c:f8:19:41:48:5f:a8:9e:6c:7a:
97:a0:d5:c2:0a:5f:6a:83:85:1c:dd:fa:29:b7:1d:c8:16:c4:
4f:a0:ca:86:ce:7b:10:c3:95:83:b1:ca:b1:23:4b:5e:81:ce:
1e:2c:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:50:13 2025 by rpki-client