Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SL1HgSVM6gvqrPPyQ7dNfxt8pAY.roa
File: SL1HgSVM6gvqrPPyQ7dNfxt8pAY.roa (raw, json)
Hash identifier: 40jpdTZBSoJiVLPxWlYGevrqu9JU6Wc3zQMVjtve+Io=
Subject key identifier: 48:BD:47:81:25:4C:EA:0B:EA:AC:F3:F2:43:B7:4D:7F:1B:7C:A4:06
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019755DA21827450FCA5B1929626BAA57A59
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SL1HgSVM6gvqrPPyQ7dNfxt8pAY.roa
Signing time: Mon 09 Jun 2025 18:00:47 +0000
ROA not before: Mon 09 Jun 2025 18:00:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210734
IP address blocks: 109.61.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:da:21:82:74:50:fc:a5:b1:92:96:26:ba:a5:7a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 9 18:00:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48bd4781254cea0beaacf3f243b74d7f1b7ca406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:83:eb:0b:f7:1e:ea:f3:7f:9d:fb:8c:44:
7e:75:84:36:db:8b:0e:15:1e:31:33:8a:d2:2d:bf:
6a:9b:68:65:44:93:a1:0e:a9:78:64:48:70:8b:eb:
aa:3a:32:af:e0:fb:20:7d:3e:74:48:76:d5:5c:a8:
13:5c:c6:7a:bf:9b:c9:61:e4:75:f8:04:0c:20:9d:
6d:05:ae:77:94:c4:e0:84:4a:f6:90:38:76:5b:0b:
34:ba:51:1c:29:7e:60:0b:db:bc:99:c9:7b:ec:52:
d7:5a:3d:d5:67:3a:0c:94:96:1e:e6:d9:cc:3c:64:
61:12:88:56:fa:11:c6:f3:84:59:d2:42:ed:f5:a5:
7c:ee:65:33:94:cb:1b:32:4e:87:7d:86:9e:98:80:
b7:5b:f5:73:49:c9:1c:a8:e4:3f:b3:fd:57:72:24:
3e:85:75:2f:19:07:2e:7c:5f:9a:56:f6:54:ba:1d:
5f:67:fe:d3:c5:9a:3b:f6:c8:f7:30:b7:49:d2:2b:
3c:48:d8:d2:e9:5e:ab:f6:93:35:1c:f6:00:57:8b:
2e:fa:d6:07:e6:59:16:e2:15:eb:21:ef:1c:89:4a:
1d:3d:c0:f3:11:94:44:0d:d6:9f:63:0c:5c:cc:fb:
a8:98:17:c8:a1:ef:9b:a8:0b:48:11:0f:53:bb:ba:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BD:47:81:25:4C:EA:0B:EA:AC:F3:F2:43:B7:4D:7F:1B:7C:A4:06
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SL1HgSVM6gvqrPPyQ7dNfxt8pAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.61.111.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:1c:0c:0b:8a:25:04:aa:be:1e:45:59:5f:28:0a:43:3e:99:
7b:71:f8:43:95:56:5d:b5:8d:70:c4:95:1d:86:df:9a:ed:f7:
4d:52:ce:50:5a:f3:aa:c1:cd:0d:7c:3d:05:cc:05:c7:78:cc:
75:a0:71:d2:54:77:7c:9b:1e:a7:96:e7:ee:25:5c:5f:a3:12:
79:49:b8:c8:cb:74:29:f5:50:1e:87:94:28:d5:e1:86:46:fa:
5b:d3:4a:b5:d8:59:dc:0d:08:40:46:c7:90:c8:6c:74:1a:97:
ff:d9:25:5a:40:5a:44:46:34:99:d8:f5:75:fd:f5:58:07:24:
d6:9a:fc:4a:59:52:f2:09:7a:f6:2f:ee:3d:50:7b:b4:1c:dd:
10:a6:7f:1d:10:b1:dc:a6:de:b6:28:54:95:11:92:94:02:9d:
cd:61:94:2c:57:9d:e8:ec:ec:f5:7d:c7:19:84:8a:cb:54:dc:
b7:71:b2:36:81:b7:25:d4:9e:ed:22:e9:4a:7b:e6:ea:20:f2:
b1:86:b9:e9:39:e3:7f:90:36:68:f5:57:ce:9b:74:5c:68:79:
59:10:12:99:90:6e:86:20:82:c1:be:8c:b5:f8:a9:44:77:04:
66:5b:d8:2e:8d:81:b5:f8:b2:eb:d8:94:b7:d0:cb:e1:85:5f:
5b:d7:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:42:34 2025 by rpki-client