Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cDGLPOGcwoL1nTGXDk818tRddCE.roa
File: cDGLPOGcwoL1nTGXDk818tRddCE.roa (raw, json)
Hash identifier: +OT8oADTtxh1gCasAaHj5xAA1pFBlBG7LVOdG5FV4ng=
Subject key identifier: 70:31:8B:3C:E1:9C:C2:82:F5:9D:31:97:0E:4F:35:F2:D4:5D:74:21
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01975835FD0C0EF7F696A47311A39243F6E8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cDGLPOGcwoL1nTGXDk818tRddCE.roa
Signing time: Tue 10 Jun 2025 05:00:22 +0000
ROA not before: Tue 10 Jun 2025 05:00:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213896
IP address blocks: 37.202.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:35:fd:0c:0e:f7:f6:96:a4:73:11:a3:92:43:f6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 10 05:00:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70318b3ce19cc282f59d31970e4f35f2d45d7421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:4b:b8:f8:78:14:30:5d:bd:df:e6:0e:26:
5a:49:fc:0b:16:63:c3:10:24:2c:c6:d3:7b:d0:14:
0f:f5:29:d8:b6:e2:0c:a4:16:01:72:86:f7:e3:f1:
c7:94:c1:cc:dc:8f:f8:5e:44:e3:30:fb:2d:3b:82:
63:a3:3a:e8:d1:ac:38:bb:8b:9d:86:c0:12:4b:de:
68:0f:df:5c:fe:b2:c2:5b:40:bf:04:fc:d7:de:28:
b5:54:a9:80:2c:12:44:a1:86:5c:c1:0e:ea:ae:f6:
84:70:09:07:61:9f:c8:ad:cf:f3:61:a8:39:e0:78:
27:cf:1c:5f:34:8f:3f:c0:d6:68:4b:f3:62:7b:0f:
10:00:68:51:b6:13:74:9c:7a:7a:c5:21:a6:c4:1a:
72:4e:99:59:0c:fa:16:04:a8:a2:57:7b:71:65:9f:
e6:51:81:ec:9f:9b:9f:6f:48:ff:98:51:b3:fa:fe:
14:dc:82:3e:7c:5e:64:fc:67:3c:62:36:65:79:0a:
74:f5:ea:05:12:e1:b9:90:55:25:c0:55:02:81:0f:
75:94:1a:5c:5b:e4:d7:27:84:0b:cb:a6:3b:98:98:
87:22:aa:89:6d:92:6b:87:49:1f:04:03:79:7a:42:
89:8e:d5:a7:5f:23:a6:0b:79:87:18:6b:d4:6b:98:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:31:8B:3C:E1:9C:C2:82:F5:9D:31:97:0E:4F:35:F2:D4:5D:74:21
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cDGLPOGcwoL1nTGXDk818tRddCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a7:6d:f6:3d:d9:44:0d:31:01:6a:6b:19:21:eb:4d:5f:3e:
f3:00:30:f2:11:b3:34:69:70:f0:fe:ec:ec:67:a0:d2:26:b6:
00:1e:7d:7a:51:1a:6f:42:02:1b:e9:f7:7b:ae:b8:35:d1:d5:
97:94:0e:7e:e4:96:5f:00:b4:23:dc:38:a8:40:83:7e:61:49:
94:5b:0b:31:70:98:cc:18:89:48:9b:a4:f0:68:95:b1:19:2e:
15:8d:95:65:17:b5:87:81:f6:80:48:23:cd:4b:22:3d:37:c5:
cf:59:60:87:01:40:ff:1b:88:01:b8:d4:1a:5c:ba:af:d3:bf:
83:71:ec:19:17:00:36:3f:fa:82:c0:5b:c3:0d:d4:12:31:dd:
bb:f6:53:6d:ca:74:e5:d3:d0:e8:ab:4b:16:8f:6c:1c:e7:eb:
29:ae:c5:a8:a1:dc:0e:59:10:a5:04:76:59:4e:12:04:99:79:
83:79:e7:1d:77:2e:1d:9c:d1:3c:9f:72:3f:bf:95:70:4c:c5:
73:dc:5b:95:9f:4b:7b:19:3e:2c:a1:2a:a0:bc:34:e5:64:8c:
c1:a5:1d:c4:39:9e:50:24:17:01:4c:09:61:a6:b5:27:3b:5b:
55:9d:9c:36:a7:6c:16:fd:0f:5c:e7:5d:4e:c8:c1:4e:c6:0f:
bf:c5:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:04:34 2025 by rpki-client