Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/413TV1AdZT-kI9M2OP25iHiJY68.roa
File: 413TV1AdZT-kI9M2OP25iHiJY68.roa (raw, json)
Hash identifier: LDQ1Fn8K0fnRnfM1ZyE6DskGDqI4UQtW0gSVk69iEPs=
Subject key identifier: E3:5D:D3:57:50:1D:65:3F:A4:23:D3:36:38:FD:B9:88:78:89:63:AF
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 01973A07C943427663C7C3B11D394153B366
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/413TV1AdZT-kI9M2OP25iHiJY68.roa
Signing time: Wed 04 Jun 2025 08:21:18 +0000
ROA not before: Wed 04 Jun 2025 08:21:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207840
IP address blocks: 5.10.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:07:c9:43:42:76:63:c7:c3:b1:1d:39:41:53:b3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jun 4 08:21:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e35dd357501d653fa423d33638fdb988788963af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:b9:4e:3d:b2:f0:cc:ae:aa:cd:ef:4d:91:
4b:dd:5e:c9:52:cf:c2:6e:d8:99:33:af:c9:fe:ca:
85:e9:17:f8:ec:d1:a4:7a:66:c9:cf:47:09:96:30:
23:95:7c:92:02:02:17:9a:2e:f0:34:e2:7b:25:fb:
0e:1a:b1:80:71:ab:ed:79:02:5a:4b:13:db:77:02:
32:12:c2:79:99:a4:4c:3d:aa:af:32:ee:50:10:d7:
d0:95:7a:c5:0c:18:0d:4f:ac:72:c7:70:b6:bd:d5:
d2:11:f2:89:82:18:87:9d:ac:92:dd:9d:0a:67:b5:
19:8b:86:a5:61:a2:af:a4:1e:ac:65:50:1a:13:1e:
47:5b:d0:a4:c7:06:d0:94:5c:86:c6:b0:ad:ef:e0:
73:98:a2:de:c1:7e:19:1f:af:97:a7:0f:6d:f2:f6:
2f:b4:74:c4:8e:76:0d:a7:f7:db:83:8a:13:63:dc:
29:85:c4:6c:e4:5e:88:20:1b:e7:a3:fd:b0:ca:cd:
58:49:d5:54:57:d4:55:18:12:ab:44:f3:d8:26:3f:
fc:27:16:b8:2b:26:ef:85:29:17:de:0e:76:44:aa:
9a:84:da:6d:25:95:ba:af:db:72:d8:e6:01:a3:f1:
a0:ca:f4:55:db:3e:bf:f3:88:d6:52:74:21:66:9c:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5D:D3:57:50:1D:65:3F:A4:23:D3:36:38:FD:B9:88:78:89:63:AF
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/413TV1AdZT-kI9M2OP25iHiJY68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.216.0/24
Signature Algorithm: sha256WithRSAEncryption
21:05:32:e6:7a:f0:35:8f:d8:74:0e:b0:91:16:15:ac:69:42:
61:13:4b:f6:c8:b0:b9:bf:02:c2:fb:3c:ed:cc:93:2d:ae:52:
18:9b:d0:f0:d9:4f:69:1f:eb:53:29:18:86:8f:50:c7:55:d1:
0b:56:f2:59:89:c6:58:77:fb:e3:b6:96:0a:eb:f1:e1:01:4d:
52:1b:a1:d1:de:7c:21:dd:98:27:7c:f0:26:1d:9d:d3:24:21:
74:47:95:ff:11:3c:95:7f:ef:e2:64:71:1d:af:d7:09:56:0a:
1c:6c:df:0e:6c:ff:e7:e2:e7:f9:fc:68:00:cc:1b:25:c0:ed:
cd:8e:58:25:d4:69:65:27:e9:84:91:6f:c0:a6:a4:e9:cb:e1:
a6:0e:ad:91:fc:8d:bf:da:9b:78:6e:18:c7:02:1c:57:07:1f:
f4:ae:b5:f7:96:2a:c1:78:01:cd:dd:82:cb:f5:7d:af:0a:56:
ac:02:f6:d3:11:55:48:63:5c:31:74:80:ac:a5:0d:ca:0a:1b:
17:77:53:5e:4a:15:91:39:7e:78:fa:49:66:08:81:fb:7b:e4:
de:d1:62:f9:92:9f:5e:98:1b:0e:45:a5:a8:ce:30:72:d1:67:
93:6f:2c:51:ec:f0:14:7c:20:0e:f2:73:96:a9:56:e5:5a:2e:
0e:16:0b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:45:29 2025 by rpki-client