Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/Ajg1evwXtbOwH8JbxtFbskFgAik.roa
File: Ajg1evwXtbOwH8JbxtFbskFgAik.roa (raw, json)
Hash identifier: iHM/YIdefBXDCl4eoKU+a8Pl/9qUhEUpDTRYLpSYF+k=
Subject key identifier: 02:38:35:7A:FC:17:B5:B3:B0:1F:C2:5B:C6:D1:5B:B2:41:60:02:29
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 0197564B3275BFB258C9E84C66FDDC116567
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/Ajg1evwXtbOwH8JbxtFbskFgAik.roa
Signing time: Mon 09 Jun 2025 20:04:17 +0000
ROA not before: Mon 09 Jun 2025 20:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 109.205.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:4b:32:75:bf:b2:58:c9:e8:4c:66:fd:dc:11:65:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Jun 9 20:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0238357afc17b5b3b01fc25bc6d15bb241600229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:3b:cc:62:66:55:4b:d3:84:32:7b:fe:1f:
81:da:29:78:48:e4:62:bc:32:c9:d7:07:11:0e:2a:
f0:e9:ea:87:ed:48:b0:0d:a9:3e:f0:4a:9f:ed:57:
d0:76:24:d3:b3:87:ef:37:d2:8b:0a:b0:84:dd:f2:
ef:be:3f:de:59:6e:f8:ae:43:31:52:2e:a4:b1:7a:
75:e8:2c:29:a9:38:79:e2:55:e2:a6:3f:49:7a:86:
77:47:8b:89:d0:97:dd:2b:5e:ec:0b:1f:d7:ec:7f:
58:07:ab:be:36:58:a5:33:fa:00:db:41:f2:e9:f3:
e5:52:fe:03:31:c3:b4:1a:f1:c2:c5:9a:9a:23:10:
a9:12:a2:5f:39:6e:87:a8:7e:89:8e:e1:83:37:61:
4b:77:b3:9d:84:0c:f6:d9:41:84:a1:ea:81:4f:7e:
3d:b5:0a:23:56:99:54:f0:1a:14:cd:8c:ce:09:17:
74:14:8b:a1:2a:40:c3:3f:32:c1:f5:cf:96:a1:97:
3b:1e:ac:e4:4c:da:0d:e4:e7:61:b7:29:ec:25:71:
21:54:e6:2f:98:d0:f3:89:8e:69:8b:1d:0e:cf:0e:
d7:d5:b0:99:02:a6:fa:cd:98:4b:e4:22:c4:79:c4:
20:da:a1:55:54:bd:9d:90:c0:e9:2c:0e:95:a5:a2:
ad:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:38:35:7A:FC:17:B5:B3:B0:1F:C2:5B:C6:D1:5B:B2:41:60:02:29
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/Ajg1evwXtbOwH8JbxtFbskFgAik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:50:5b:7f:37:86:94:3d:83:d5:6f:bf:10:ae:f0:14:6c:5b:
95:6c:08:be:0e:a4:b3:1f:2b:35:0c:41:15:22:78:e9:09:09:
78:c5:05:e3:fe:95:23:e0:fe:f7:f0:30:5d:8a:7a:9c:64:52:
af:9e:cd:a2:9d:2e:57:86:00:cf:dc:38:08:c9:06:4f:fe:58:
fd:26:d9:e3:f0:2b:05:0e:43:a6:eb:00:4a:7b:aa:e6:19:33:
7a:c8:dd:22:c0:e0:b3:31:70:55:90:95:64:20:a4:1b:f2:4e:
15:10:7e:d6:39:43:72:df:1a:46:b0:a2:89:c1:50:4a:5e:50:
0b:98:3b:2a:a6:4a:50:7b:73:46:51:cf:3a:50:5f:e7:e6:05:
31:74:ce:e7:05:94:7a:9f:30:68:0b:8c:c7:34:00:be:72:18:
45:18:a8:a5:bb:c4:cc:ce:0b:cf:c4:21:cf:9c:0e:27:c2:01:
4e:b6:66:a3:4d:0d:13:ad:4f:31:95:6b:bc:61:53:df:eb:2b:
46:a8:97:3e:fe:ae:2c:86:a5:94:2b:ce:b5:4c:c2:97:64:81:
8f:84:af:fd:39:2c:23:21:ac:cb:4e:52:fc:df:69:31:83:58:
e5:9e:c3:1a:06:e6:ad:a7:5d:45:14:1b:4a:8b:9b:65:1e:4b:
64:49:50:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:07:54 2025 by rpki-client