Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/oF0UnfdG9SgR1YrjEvyyzHdI2NQ.roa
File: oF0UnfdG9SgR1YrjEvyyzHdI2NQ.roa (raw, json)
Hash identifier: C+won2ayhOZhVuYFZ85jDDGUEWPlmXvRmRnHCUNjIgI=
Subject key identifier: A0:5D:14:9D:F7:46:F5:28:11:D5:8A:E3:12:FC:B2:CC:77:48:D8:D4
Certificate issuer: /CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Certificate serial: 01975A3EDA173BEB5CB3192A39E51FBC3A1C
Authority key identifier: 5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/oF0UnfdG9SgR1YrjEvyyzHdI2NQ.roa
Signing time: Tue 10 Jun 2025 14:29:17 +0000
ROA not before: Tue 10 Jun 2025 14:29:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 131.173.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:3e:da:17:3b:eb:5c:b3:19:2a:39:e5:1f:bc:3a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Validity
Not Before: Jun 10 14:29:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a05d149df746f52811d58ae312fcb2cc7748d8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4d:44:6d:51:aa:91:f0:26:88:ce:2e:2d:5a:
0a:57:c2:97:c9:a4:ab:e9:3f:e3:3d:06:e8:cf:dd:
57:68:5a:b6:f6:61:a6:2e:f4:55:f3:3d:9f:78:d2:
4e:00:f1:a1:b8:3f:40:a5:db:66:da:1a:6a:c6:44:
da:86:c8:86:7e:09:f6:ad:c7:15:9b:78:18:d0:b1:
bf:49:31:16:39:c2:ec:05:8e:7b:b1:90:55:f7:5a:
83:e2:b7:d3:46:10:55:9f:83:5a:e5:bb:1f:6f:b0:
ac:f3:2b:88:1d:ed:e0:93:7e:5d:b8:16:a5:17:a2:
ab:ed:65:c0:68:7d:ee:b2:eb:5b:d8:04:67:b2:de:
d5:6f:21:29:9f:9f:40:a9:e5:e0:2d:83:2f:13:43:
3e:85:25:14:03:04:6b:6b:ec:9e:c9:c9:37:e3:02:
fc:b1:21:d4:11:be:68:9d:3a:73:be:dc:e2:70:05:
b3:49:38:16:1b:fb:d9:c4:2c:ae:80:7a:cb:41:b0:
9c:c0:22:a7:cc:99:85:17:31:8e:c9:d0:f4:04:59:
50:8c:cb:13:4c:95:fc:ba:57:08:b3:19:84:f7:9b:
51:00:52:48:1f:4b:ec:31:ae:61:e8:6e:14:61:72:
40:51:f7:fa:5f:1d:b3:93:a4:52:37:15:27:c4:99:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5D:14:9D:F7:46:F5:28:11:D5:8A:E3:12:FC:B2:CC:77:48:D8:D4
X509v3 Authority Key Identifier:
keyid:5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/oF0UnfdG9SgR1YrjEvyyzHdI2NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.173.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:0b:9b:03:62:1e:27:f4:f1:51:cc:1f:0e:57:ca:a2:eb:49:
d4:b3:b5:7a:84:cd:ff:2a:f5:61:41:eb:05:7f:04:c1:59:47:
51:60:7c:33:c5:3f:df:be:4e:10:7f:5a:d1:42:f9:71:4f:14:
d0:bf:b0:c6:93:14:e5:06:4c:41:7e:72:7a:84:ed:68:ad:68:
21:c9:29:aa:af:5d:83:c5:34:aa:2a:1d:a6:b4:e5:52:8d:06:
24:54:81:5a:cf:5d:17:0b:04:79:e8:77:c9:0c:86:77:6b:23:
c1:b3:8e:45:13:38:37:51:91:e0:26:56:42:bd:fc:a1:db:67:
f7:49:a3:30:e6:a8:a2:fc:91:b4:5d:7f:23:c7:7e:bc:e8:48:
1e:60:79:6a:3f:86:f0:4d:c5:23:77:05:2b:e5:47:52:85:e8:
64:46:22:b7:41:7c:2d:2e:e9:8d:40:d2:9f:85:72:fc:13:8e:
05:0a:40:16:aa:df:bf:3f:c8:66:8c:b5:34:42:0b:54:10:fe:
71:af:1a:c8:9b:bb:2e:d2:30:50:bd:45:76:52:0f:f5:6c:4a:
fd:6d:9b:b2:e2:eb:46:77:3c:d8:53:fb:06:b9:86:e2:68:7e:
ef:9a:1d:fc:29:e0:3a:2e:d3:8c:5e:ba:a2:42:da:39:1e:2a:
72:f2:8f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:30:26 2025 by rpki-client