Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/ijWWWaOxCmM3cwDgmzsAAXOTkSQ.roa
File: ijWWWaOxCmM3cwDgmzsAAXOTkSQ.roa (raw, json)
Hash identifier: EIxf2RrXqw+wZ7wbaiGZ0nlMKgHj8UESgG0wJxy1ReQ=
Subject key identifier: 8A:35:96:59:A3:B1:0A:63:37:73:00:E0:9B:3B:00:01:73:93:91:24
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0197651A63C3A8EDE39A85EAE92AEF81AE88
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/ijWWWaOxCmM3cwDgmzsAAXOTkSQ.roa
Signing time: Thu 12 Jun 2025 17:05:17 +0000
ROA not before: Thu 12 Jun 2025 17:05:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 109.122.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:1a:63:c3:a8:ed:e3:9a:85:ea:e9:2a:ef:81:ae:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jun 12 17:05:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a359659a3b10a63377300e09b3b000173939124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:f3:7b:b9:1f:e5:14:fe:3a:50:d5:c6:86:
b1:f4:20:18:5e:df:04:70:47:d5:0a:5c:63:50:5f:
a5:37:51:2f:51:28:4e:b2:3a:54:ae:dc:07:49:ed:
8a:6a:45:c1:38:c9:03:02:42:b1:01:06:33:d1:a5:
bd:25:93:e1:3a:16:69:8f:bb:f0:ed:a6:92:45:1c:
4f:19:65:eb:6a:1a:b5:28:ff:3e:f2:45:c8:46:b5:
e3:d2:5f:62:12:68:71:57:c1:fc:a8:81:c3:e8:56:
47:21:15:2f:9b:06:da:18:a8:b3:6e:d4:74:33:56:
b2:6f:2e:ec:e3:1e:85:e3:75:ed:e6:62:5b:ac:52:
9f:c4:c1:3d:60:b6:45:2a:cc:6d:25:8e:93:b7:67:
99:67:11:4e:4b:57:f2:ea:a5:03:ab:30:e3:0f:09:
22:99:d8:71:04:d9:13:81:a0:fc:ee:86:60:44:c6:
36:b9:ed:d0:ba:e7:0e:2f:ab:5c:a0:9f:82:36:bb:
9b:fb:f9:bc:d3:1f:2b:69:01:1b:12:52:8d:ba:5c:
ff:43:64:cd:91:25:1f:d0:f9:04:f4:fc:45:e7:48:
b8:36:39:be:3b:b8:0c:b3:d0:e0:20:42:a9:1c:46:
62:9b:9a:db:2f:f4:19:f5:fc:0a:86:ee:e7:bb:34:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:35:96:59:A3:B1:0A:63:37:73:00:E0:9B:3B:00:01:73:93:91:24
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/ijWWWaOxCmM3cwDgmzsAAXOTkSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.61.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:3d:29:eb:3a:78:e3:41:23:f2:e1:36:62:ba:b5:be:e1:c6:
e8:82:f7:b2:8e:17:cd:bd:0b:5a:8b:a2:22:af:f5:c4:6b:ad:
a6:d8:05:ca:95:ba:2b:e3:63:81:bc:65:7e:b9:c2:45:28:41:
0e:b4:9b:80:72:28:51:ed:3c:cf:e9:b8:c9:0e:25:98:34:0d:
0e:3d:e1:01:12:3e:df:b4:32:41:f4:bc:03:20:d5:79:d6:07:
cf:a1:db:6b:ff:6e:70:0d:b0:c7:52:95:b8:a6:ac:0c:c5:48:
08:e0:36:ce:0e:0c:09:0b:84:3f:5f:18:c9:56:05:4b:ea:43:
ea:3c:b7:08:ea:be:d2:ab:db:4a:41:1c:39:3b:da:fa:56:08:
42:0d:c1:3c:36:d1:f5:07:d0:f2:1f:50:08:fd:2f:99:43:07:
f5:fd:4f:3f:6f:6f:f4:33:5a:7c:23:8c:ab:f2:62:cb:3c:b7:
34:d9:35:46:79:a9:4d:df:e4:81:28:b9:d0:64:72:64:ff:2f:
9a:44:85:2f:07:4e:42:0b:7b:79:52:fc:c9:9b:4b:be:4c:e8:
63:74:2c:c6:6c:93:fe:8e:78:fc:9e:39:70:78:cf:23:1f:20:
29:2a:19:33:ce:ce:44:c9:8d:59:d5:e9:93:02:d4:62:c5:62:
7e:f4:b5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:42:11 2025 by rpki-client