Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/w4mNtsi09t_OQE22wRN8F6R7oAk.roa
File: w4mNtsi09t_OQE22wRN8F6R7oAk.roa (raw, json)
Hash identifier: WoBy2Px314gv+DCToVequg4kHnv2yF42XoPTDzvs7jY=
Subject key identifier: C3:89:8D:B6:C8:B4:F6:DF:CE:40:4D:B6:C1:13:7C:17:A4:7B:A0:09
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196F2F9B9A6EA7CA41817C3E55C3182D45A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/w4mNtsi09t_OQE22wRN8F6R7oAk.roa
Signing time: Wed 21 May 2025 13:12:54 +0000
ROA not before: Wed 21 May 2025 13:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211301
IP address blocks: 5.175.249.0/24 maxlen: 24
77.90.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:f9:b9:a6:ea:7c:a4:18:17:c3:e5:5c:31:82:d4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 21 13:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3898db6c8b4f6dfce404db6c1137c17a47ba009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:68:2d:22:07:1d:16:6e:28:e4:e3:87:03:
dd:5a:32:bc:a3:c6:b4:67:f1:81:08:51:45:89:cd:
3c:9f:93:06:2e:8f:f8:87:13:88:ac:82:2e:e7:14:
22:18:34:62:c8:fe:cc:bd:11:28:92:a9:6e:54:53:
a8:1f:b0:ab:ab:9e:c7:d1:33:5f:0c:11:b1:80:29:
a1:79:31:b3:b7:87:37:0f:1d:a9:4c:53:26:05:36:
98:9e:75:2b:55:b5:f0:20:bb:24:41:82:86:31:ea:
3c:22:7c:5a:7c:93:ec:af:7c:ac:43:c7:67:f2:e4:
c8:fc:97:58:28:17:d9:75:2e:4c:aa:46:ce:5d:8e:
32:59:21:ac:0c:68:2f:eb:db:05:9e:0a:28:e7:ac:
55:57:3e:24:07:28:80:0c:a2:2d:d8:cd:47:95:a4:
62:0b:94:37:3b:31:32:1f:72:ae:52:35:26:c5:c9:
c3:ec:ea:d0:55:2f:86:da:72:16:4f:7d:a4:fc:db:
43:4c:db:25:19:ba:35:8f:24:77:1a:a3:10:3a:64:
8b:61:bf:e3:49:18:75:e7:d7:dd:e0:3e:da:ed:bb:
6b:ae:8a:83:bf:8f:f5:80:be:c0:af:1c:d1:db:63:
df:a2:f2:6f:23:bf:aa:28:a0:e4:e5:d7:2f:56:5e:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:89:8D:B6:C8:B4:F6:DF:CE:40:4D:B6:C1:13:7C:17:A4:7B:A0:09
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/w4mNtsi09t_OQE22wRN8F6R7oAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.249.0/24
77.90.57.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:e5:b9:6e:00:65:0a:5d:46:ff:d2:19:7a:5a:71:14:d5:66:
17:72:87:5a:2b:94:5d:51:40:2e:ab:71:b2:b0:b2:81:e3:a6:
29:8a:f1:15:ce:58:d6:69:1e:0e:4e:f7:05:e2:ed:8a:e8:62:
bc:e3:40:fa:88:db:75:6d:c4:5b:10:0e:08:46:d7:e3:14:c8:
13:4c:35:74:93:0c:11:00:8c:7f:bd:8d:6c:9d:21:ef:26:ce:
46:d0:44:8e:ef:f7:86:08:d9:ef:25:cb:3b:dd:bc:34:f1:ea:
ed:10:be:d7:f7:ef:b4:fa:77:92:11:a9:88:09:8f:88:82:c0:
42:b6:cf:62:c0:21:72:da:8e:af:d3:ad:c8:85:a0:4b:51:96:
c0:92:3c:0e:7c:ed:e6:22:97:66:77:8c:2f:58:4a:40:29:bf:
f1:22:80:30:6a:be:14:d9:6b:4c:3f:d8:fd:b7:f2:31:a5:26:
31:27:e8:e0:ad:85:70:b0:2b:d5:2f:53:8a:72:53:f4:df:2c:
df:30:98:c0:dc:8a:fc:22:6f:9f:3b:36:2f:b1:51:9b:c7:c2:
65:de:2a:df:24:a0:2d:f8:23:58:ca:c3:2f:da:5b:54:21:2f:
22:b6:12:3f:86:6d:a7:9e:dd:09:43:eb:82:33:32:ad:c1:e7:
35:69:f9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:56:35 2025 by rpki-client