Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/edYMR1B5K6zwE4tb71Ta8ixfSJU.roa
File: edYMR1B5K6zwE4tb71Ta8ixfSJU.roa (raw, json)
Hash identifier: AIXem612QEQIbdqiQhfnAVvOsDUssvfYZqiqRVWxlNw=
Subject key identifier: 79:D6:0C:47:50:79:2B:AC:F0:13:8B:5B:EF:54:DA:F2:2C:5F:48:95
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0196D3CB7F79C0AF0B98F847C5997149AE30
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/edYMR1B5K6zwE4tb71Ta8ixfSJU.roa
Signing time: Thu 15 May 2025 11:54:11 +0000
ROA not before: Thu 15 May 2025 11:54:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149977
IP address blocks: 193.58.239.0/24 maxlen: 24
2a0e:97c0:aa0::/44 maxlen: 48
2a0f:e404:105::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:cb:7f:79:c0:af:0b:98:f8:47:c5:99:71:49:ae:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 15 11:54:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79d60c4750792bacf0138b5bef54daf22c5f4895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:91:0d:72:3a:28:a0:7c:19:72:cf:45:bb:
1f:8a:d7:70:de:9f:be:7f:f2:9b:3b:41:1e:37:fe:
e4:4e:56:dd:a2:32:6c:f8:59:25:6b:5a:96:db:87:
28:95:de:18:90:1a:ce:81:3a:94:b6:14:97:fc:a5:
ce:fc:04:87:54:ca:71:98:4d:d6:c4:d9:d1:2e:cc:
63:e7:94:1d:31:15:0b:78:6c:e4:1d:9a:ca:db:9c:
cf:2c:e6:f7:84:6d:22:4b:e1:aa:8f:e4:36:7a:01:
4c:bc:c1:3d:31:bb:9a:21:d3:64:fc:55:2b:09:a7:
1f:6d:52:9a:d4:08:fe:07:a8:06:b5:1d:25:7e:54:
82:29:c8:f3:65:9e:a0:20:5b:fe:06:6f:0f:c6:bc:
1e:fe:79:7f:5f:fd:40:c8:ba:7e:ae:0c:35:e2:03:
a1:0e:95:fd:d1:46:a5:31:19:93:c3:7b:96:6a:fb:
4b:15:c7:41:f0:70:58:5d:e8:3e:6a:fe:01:3f:a5:
76:67:9a:24:a3:cd:8d:a7:03:3e:5a:50:88:99:32:
f8:25:f4:69:d6:7a:43:f0:1f:ee:96:61:57:94:d6:
c0:80:af:bd:14:bc:4c:3a:15:7f:56:75:4f:ca:c6:
13:8a:1c:c6:08:8a:54:97:9b:a3:cb:e6:3c:fa:5d:
69:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D6:0C:47:50:79:2B:AC:F0:13:8B:5B:EF:54:DA:F2:2C:5F:48:95
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/edYMR1B5K6zwE4tb71Ta8ixfSJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.239.0/24
IPv6:
2a0e:97c0:aa0::/44
2a0f:e404:105::/48
Signature Algorithm: sha256WithRSAEncryption
78:d7:ef:bf:7f:a1:1f:05:43:ca:77:8d:25:78:fb:45:df:b5:
51:91:48:97:df:a4:cd:fa:fe:88:2d:50:fb:10:94:fa:07:83:
02:39:c7:da:5f:4c:c2:e4:eb:e9:55:d2:0a:26:8d:d9:28:47:
a2:0d:b0:a6:8e:e5:ef:38:37:ec:eb:ad:0e:1f:d1:3d:f7:37:
e7:f3:60:e9:6e:9b:87:54:9c:4b:15:80:4b:ed:0f:3f:55:c7:
48:2a:0d:a0:3e:87:dd:72:70:fa:01:56:18:18:0b:e2:27:78:
56:a0:de:d2:6d:18:b7:41:b7:90:6e:ca:47:e8:d7:d6:02:ab:
75:18:0e:f2:48:86:b4:1a:d6:37:a0:80:8a:f0:0f:df:99:a5:
ae:cb:35:00:e5:87:28:b2:e5:5f:00:5e:e9:fa:d6:c3:ac:4b:
cc:3c:5a:99:90:3e:1a:b5:fb:ce:c2:81:08:5e:df:67:69:50:
03:87:af:a9:85:75:75:0e:0f:2b:65:a9:aa:3f:81:41:4f:88:
05:81:8b:d8:1b:4b:1e:93:ba:2e:bc:fe:7b:4f:bd:bb:fe:8b:
ae:5d:ff:b1:49:ae:fb:a1:d9:61:27:e5:3f:ff:88:bd:25:16:
51:21:37:dd:35:ff:91:9a:4d:47:97:3c:cb:39:43:9b:c5:6e:
4e:ef:68:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:17:56 2025 by rpki-client