Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i3PO9RchGWcIayCb4DCfaqWJi30.roa
File: i3PO9RchGWcIayCb4DCfaqWJi30.roa (raw, json)
Hash identifier: sGi86FnZKgVafkEv28DIFy+p6lhGVCvgkMPd34Pl8So=
Subject key identifier: 8B:73:CE:F5:17:21:19:67:08:6B:20:9B:E0:30:9F:6A:A5:89:8B:7D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019739A6BC7D3553FC46454C54B449EE4483
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i3PO9RchGWcIayCb4DCfaqWJi30.roa
Signing time: Wed 04 Jun 2025 06:35:17 +0000
ROA not before: Wed 04 Jun 2025 06:35:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 146943
IP address blocks: 5.175.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:a6:bc:7d:35:53:fc:46:45:4c:54:b4:49:ee:44:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 4 06:35:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b73cef517211967086b209be0309f6aa5898b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:ec:16:9a:51:8f:f3:28:da:ce:db:ab:18:
e5:62:b1:e7:c6:5c:1b:7b:58:68:74:c7:90:21:dd:
07:43:09:3e:cc:0a:23:54:d3:e6:51:6c:06:2b:38:
d8:86:c9:56:0d:eb:65:a5:fc:49:37:d5:c0:79:9e:
dd:48:c2:84:e3:c3:1c:c8:8b:63:0f:2e:bd:b6:d6:
b7:6f:9f:c4:41:6c:40:19:93:70:44:87:f0:ae:46:
29:fc:50:b7:1d:8d:39:ee:70:e5:fe:08:8f:5f:14:
44:6b:3a:f9:64:e8:f5:11:43:8a:8f:5d:f7:76:12:
44:3f:d8:01:9b:73:03:5b:ac:3f:26:09:e0:19:3b:
4f:25:ac:f7:1f:21:59:1d:cb:63:32:4e:5a:50:17:
86:90:b6:39:60:a8:cc:b8:9f:55:7b:6c:75:35:b5:
2d:ba:0c:eb:c0:69:c8:38:b2:5e:b5:7c:42:1f:c8:
c3:6d:7f:cd:fb:26:7e:17:39:20:a1:31:01:d0:36:
1f:bb:a7:b7:fe:1a:f0:a2:11:03:c3:9c:21:89:50:
41:a3:66:f3:f4:33:36:15:60:69:75:04:7c:ad:1e:
48:42:ab:62:53:b4:33:a6:93:a3:6c:2d:94:e7:95:
8b:3a:b3:cd:81:8b:1f:5e:aa:c1:3c:71:c7:1d:a4:
06:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:73:CE:F5:17:21:19:67:08:6B:20:9B:E0:30:9F:6A:A5:89:8B:7D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i3PO9RchGWcIayCb4DCfaqWJi30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.139.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:90:4c:a2:42:9d:a8:03:1c:95:03:2b:7e:91:8e:c3:fe:54:
da:7a:dd:aa:17:74:83:f2:07:f7:f6:40:b2:7d:ed:bb:9e:07:
9b:d0:b7:83:00:f8:b3:d7:ba:eb:fa:1b:7a:83:77:c9:cb:7a:
15:92:86:ae:eb:fd:f5:0c:5d:c2:43:ff:58:1f:7a:ae:e5:71:
58:24:21:d7:e0:5f:16:ac:1f:08:15:ef:73:b3:cc:17:38:54:
86:61:d7:c3:ef:3b:f8:2d:bb:1b:77:a1:ab:ee:78:fd:af:df:
9b:8f:89:05:4e:e6:8b:a3:80:97:3a:7b:d8:1d:25:2e:88:a6:
f3:86:05:49:e3:8d:1b:df:9c:34:dd:98:c7:a2:02:0f:77:09:
e4:ff:ab:e1:6c:d1:67:13:fa:28:bb:93:ff:f9:2b:23:c4:13:
f1:f0:47:94:6f:ed:a8:83:3e:c5:a8:ea:e2:5d:5f:0c:24:6a:
b1:f7:62:2b:a8:75:56:4c:5c:41:9b:03:ec:f0:2f:0c:12:c9:
df:d0:8f:7b:7f:2f:ac:fc:4b:2b:bf:bc:34:d3:92:c3:02:2e:
00:25:2c:ba:a0:03:17:42:2a:ce:8e:7a:a9:f7:73:cf:de:32:
46:e6:60:6b:44:ff:4f:6c:42:f1:c7:db:7b:18:c9:9c:fb:f4:
15:71:4f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:22:02 2025 by rpki-client