Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/bReAPrtVMcAEhriuG0ae1idZpA8.roa
File: bReAPrtVMcAEhriuG0ae1idZpA8.roa (raw, json)
Hash identifier: +5/eycLGuxYpcqgi8DwCHJgtB3o69zqZ/uUvDsZXonw=
Subject key identifier: 6D:17:80:3E:BB:55:31:C0:04:86:B8:AE:1B:46:9E:D6:27:59:A4:0F
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 0197695661020E9D7BDBC4654A9643A7A1F3
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/bReAPrtVMcAEhriuG0ae1idZpA8.roa
Signing time: Fri 13 Jun 2025 12:49:18 +0000
ROA not before: Fri 13 Jun 2025 12:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213945
IP address blocks: 185.7.242.0/24 maxlen: 24
185.7.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:56:61:02:0e:9d:7b:db:c4:65:4a:96:43:a7:a1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Jun 13 12:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d17803ebb5531c00486b8ae1b469ed62759a40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:9a:b7:c5:f8:27:2b:d7:b5:8d:61:31:04:
10:00:74:9b:27:89:43:0b:9f:24:73:ff:7f:35:05:
f2:24:5b:8d:99:8e:bb:ed:50:ba:07:4e:b0:c5:55:
4d:97:59:df:79:69:b1:8f:41:b7:1d:5d:8d:ba:0c:
fc:a0:27:ad:2b:0e:3e:d1:b7:c4:03:36:ba:88:54:
cc:f4:09:1b:72:1b:f6:b9:84:ba:19:ba:c9:d1:51:
b9:62:c8:00:4a:7e:50:cb:89:41:ce:fd:73:99:bf:
df:15:43:56:df:0c:77:3d:4b:6e:90:85:0e:94:63:
57:9a:e1:7e:04:63:12:5c:55:b3:83:b2:90:50:b0:
2c:a3:40:a6:d5:d3:af:ca:54:14:95:30:bc:20:65:
0e:47:c9:17:73:fe:5f:56:1e:69:69:fc:87:b1:24:
61:bb:5d:5c:3c:f0:9f:10:8f:9f:90:4c:e6:3a:42:
7a:0a:aa:3b:7a:56:27:b8:34:fb:b4:18:e4:1e:e7:
6e:39:a6:44:41:90:6c:4d:2b:21:f4:6c:72:7f:27:
e5:a7:9c:d9:6d:2e:e6:24:16:4e:0c:b4:da:5e:46:
a9:b9:9e:c6:fa:83:90:93:0b:c0:39:3c:b2:1d:c2:
b8:fd:53:42:8d:48:ec:04:30:68:24:ce:e1:e0:24:
16:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:17:80:3E:BB:55:31:C0:04:86:B8:AE:1B:46:9E:D6:27:59:A4:0F
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/bReAPrtVMcAEhriuG0ae1idZpA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.242.0/23
Signature Algorithm: sha256WithRSAEncryption
16:c7:a5:47:71:96:20:a8:13:f4:cf:6d:46:b0:30:69:55:e8:
2f:f4:cf:59:6b:99:14:43:16:ab:2a:4e:35:b4:76:05:f3:34:
38:89:a4:2f:15:46:98:9e:3b:22:94:6f:a9:47:30:80:97:53:
6e:3c:7e:ae:4f:cd:80:4f:96:58:92:4b:32:3a:d8:6e:62:b9:
b4:c0:b9:53:e3:55:a5:55:5d:6f:b6:2d:e9:0f:b6:04:f9:9c:
c7:19:6a:f8:d0:09:f7:6b:5d:7b:14:84:83:fb:13:59:3b:3c:
34:b1:87:31:ff:8d:a9:5f:2f:7c:e9:a4:18:6d:dc:27:8e:69:
23:e9:2c:5d:fb:0f:05:6c:3d:f3:d6:1c:06:2d:cd:9e:a8:64:
93:7e:92:22:72:1e:d5:50:b0:a3:98:ea:f7:34:11:9d:d5:97:
d3:22:dd:b2:ec:72:4c:73:0f:c2:5d:4f:00:80:ac:92:85:f8:
5f:b0:03:1e:52:cd:5e:c6:79:af:05:71:5b:15:39:81:f3:ff:
56:79:ba:20:e4:57:ac:87:1c:28:c3:83:c5:2b:04:4a:fe:3f:
c6:3b:5f:f1:c8:4b:b5:4b:95:bd:94:8c:03:14:23:bc:48:f5:
d7:d2:67:29:85:2f:be:ff:85:c5:e1:aa:d6:eb:b7:6e:7d:6f:
41:d9:5f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:24:39 2025 by rpki-client