Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/TV0f2OH41zJYkzFk6rVj87cLrSo.roa
File: TV0f2OH41zJYkzFk6rVj87cLrSo.roa (raw, json)
Hash identifier: 7CWsDbYfTBfSXPUrNYC5TDyYH9r/SV2bmLkWysyhqdE=
Subject key identifier: 4D:5D:1F:D8:E1:F8:D7:32:58:93:31:64:EA:B5:63:F3:B7:0B:AD:2A
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01975352643A5571D11253C0B8F3E8C770FE
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/TV0f2OH41zJYkzFk6rVj87cLrSo.roa
Signing time: Mon 09 Jun 2025 06:13:17 +0000
ROA not before: Mon 09 Jun 2025 06:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43444
IP address blocks: 146.185.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:52:64:3a:55:71:d1:12:53:c0:b8:f3:e8:c7:70:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jun 9 06:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d5d1fd8e1f8d73258933164eab563f3b70bad2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:8f:ae:21:82:ad:30:fc:07:d6:e3:62:09:
61:79:be:da:99:53:24:69:92:a0:e2:42:69:08:69:
be:eb:06:20:41:a6:46:d0:ce:35:19:96:20:21:0b:
ee:1f:d6:2f:d2:8d:23:89:78:c2:f9:55:a8:0b:04:
32:13:61:95:26:5b:1d:19:d4:ac:f2:53:53:d6:fd:
90:c8:a8:ca:f5:f2:52:f1:7c:3a:74:9d:6c:76:da:
a1:92:7f:19:5a:4e:6b:35:9b:c1:65:ad:c9:25:51:
c4:e7:9f:ff:af:3c:62:82:b9:75:4a:3a:8d:5f:69:
a0:ed:f3:6b:ec:c7:d4:97:28:df:c5:8b:42:7c:32:
81:47:d8:1a:6a:06:89:a3:c7:16:f0:40:b0:ef:d0:
39:ec:bf:81:fd:45:6e:d7:d7:52:b5:77:2e:2c:3a:
62:2d:2d:0f:f7:ce:2c:d1:d7:e9:54:d2:31:4f:99:
ee:ac:f5:e7:7e:03:f4:bf:1f:2c:8b:85:2e:fc:0d:
91:8a:c5:ce:3e:3d:bd:71:a2:40:c6:a1:f4:2d:51:
36:19:a7:a1:ba:70:a6:4c:bf:c6:26:be:0b:7c:89:
10:8f:ad:8c:59:48:75:22:e4:fc:b0:c1:d1:7a:08:
af:f9:bb:c2:92:63:01:56:6c:64:2c:e9:c1:9a:48:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5D:1F:D8:E1:F8:D7:32:58:93:31:64:EA:B5:63:F3:B7:0B:AD:2A
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/TV0f2OH41zJYkzFk6rVj87cLrSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.185.207.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ee:9c:63:f9:5f:e0:79:c6:da:1b:65:d0:34:6f:e4:a0:4c:
db:69:30:23:1e:47:f1:45:c6:79:2a:d8:41:71:b8:d4:2e:e8:
e8:01:b9:44:bc:99:4e:54:fb:7e:36:e9:7d:e5:e5:cd:f5:5b:
e3:f9:81:1a:ca:6d:d6:84:4b:bd:90:77:92:df:58:4f:73:54:
bb:f7:f8:b1:5c:db:dc:9d:de:d9:e0:1a:15:fd:a0:99:69:c8:
45:b9:b1:54:18:4c:cc:e6:55:17:99:73:20:a9:e9:a7:8f:03:
74:0d:49:a8:9d:6d:63:cb:be:01:8e:9d:4a:e0:ec:18:d6:a8:
03:e1:2c:88:ae:f1:01:b1:c1:78:30:e4:c6:20:33:40:65:9e:
eb:91:8e:41:35:dc:e4:54:d7:da:e7:51:cf:9d:14:f6:0f:a4:
15:83:28:75:ad:35:e6:ab:14:b9:c8:4e:c7:28:58:92:4b:0f:
80:66:65:1c:95:fb:e4:0f:b1:bd:2c:33:17:12:1c:b9:ee:1d:
2e:58:0f:83:7d:96:3c:95:93:8c:c5:17:95:9b:7c:8e:78:32:
28:a2:34:e1:a0:85:2e:a0:9a:e7:e4:23:a1:a6:fe:5e:7f:37:
c6:26:04:89:1f:af:bd:f7:1d:f1:30:d6:be:6c:37:0d:a4:2a:
83:26:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:41:58 2025 by rpki-client