Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/hYdYMlBGfO_qwPLh-7WfCa3QAsw.roa
File: hYdYMlBGfO_qwPLh-7WfCa3QAsw.roa (raw, json)
Hash identifier: 6WPu0MCD5O3ni3pLGkao9UXvDWiEioK+PLj+KoARg1o=
Subject key identifier: 85:87:58:32:50:46:7C:EF:EA:C0:F2:E1:FB:B5:9F:09:AD:D0:02:CC
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019756612AB6CFB9D918A94239EC736149DE
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/hYdYMlBGfO_qwPLh-7WfCa3QAsw.roa
Signing time: Mon 09 Jun 2025 20:28:17 +0000
ROA not before: Mon 09 Jun 2025 20:28:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24940
IP address blocks: 31.22.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:61:2a:b6:cf:b9:d9:18:a9:42:39:ec:73:61:49:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jun 9 20:28:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8587583250467cefeac0f2e1fbb59f09add002cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:00:6d:72:52:7e:eb:04:d0:6e:ac:ad:9e:
85:c1:e6:8a:0a:7b:f0:6a:ff:74:24:fe:19:f0:4f:
78:65:ab:14:45:ed:02:83:41:ab:4a:f3:ed:6f:e7:
82:55:91:f7:a3:d2:90:bc:66:8c:26:ab:9f:0f:c7:
8f:2c:7a:dd:e9:d1:46:f9:f7:42:d7:d9:2b:2b:26:
ba:2e:f5:6b:e2:69:5d:b8:e1:8f:2c:12:7a:c7:39:
23:31:47:00:f1:48:98:a5:44:8f:25:82:db:0f:ec:
83:0e:f0:2a:67:b7:67:6f:32:47:f2:b2:10:81:89:
90:6c:5b:48:ab:80:01:e9:0f:c7:e9:e1:e7:3b:b5:
34:a5:5c:ef:cd:a4:af:16:af:18:f7:1b:cb:0e:4f:
76:10:a5:e6:9e:cf:d4:4f:63:94:f0:f5:6e:65:65:
9c:90:80:3d:83:9a:48:2b:37:c4:62:7f:ce:dc:3d:
ee:9e:e5:96:9a:d2:59:c8:60:3a:19:61:4e:8c:8e:
35:d2:57:76:33:ed:e2:b4:d1:93:47:76:f0:d3:34:
cd:9f:87:9e:6d:1e:50:ed:7a:e5:03:f0:2b:34:e3:
56:7d:1e:7d:f0:38:ba:ef:17:55:9a:52:e2:2b:25:
0d:0f:17:54:10:0d:21:af:4a:3f:b3:45:fc:2d:ef:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:87:58:32:50:46:7C:EF:EA:C0:F2:E1:FB:B5:9F:09:AD:D0:02:CC
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/hYdYMlBGfO_qwPLh-7WfCa3QAsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.72.0/24
Signature Algorithm: sha256WithRSAEncryption
07:2a:c0:76:a5:2c:7c:06:dd:00:8e:4a:6c:75:f0:ab:fe:fd:
8c:52:4b:32:d8:5f:c0:45:2d:b2:06:63:b5:52:0e:89:d6:8a:
fc:4b:72:78:09:81:a2:7f:bc:7b:a6:95:0d:fa:4f:2d:6f:1e:
16:44:bc:e8:cb:09:4f:ac:de:df:36:2f:0f:9d:ec:6b:6d:7e:
71:91:7f:30:4e:8e:51:53:5d:99:33:2b:34:91:43:66:59:fa:
40:cf:f6:08:8c:65:64:42:f0:9e:65:65:32:26:57:d7:f1:6c:
84:96:79:e7:e8:bc:14:80:9e:a9:14:b9:46:96:69:56:05:c2:
88:74:ce:f5:c6:46:76:e3:c2:52:8e:eb:e9:dc:1e:1a:34:57:
c0:e1:fd:a8:6a:1c:82:75:d6:f7:81:e4:38:f5:99:4a:d2:c3:
1f:88:75:6f:86:68:85:56:c6:ca:98:d3:77:ef:4f:44:27:d3:
86:2f:42:e1:81:59:8c:d9:4b:3d:00:26:57:2f:d5:d0:d6:c2:
dd:5f:21:7a:da:66:41:f0:59:f8:9f:92:9c:ac:cf:b1:ab:a6:
e8:b4:68:94:19:17:47:d3:d8:0d:e5:e2:8a:d7:6a:56:7b:47:
0b:50:1d:a8:22:56:05:dc:1a:ed:46:8d:93:b0:3d:c2:38:e6:
04:0a:61:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:11:47 2025 by rpki-client