Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/SLNfseIE8KrK16-g51WWVsIWzog.roa
File: SLNfseIE8KrK16-g51WWVsIWzog.roa (raw, json)
Hash identifier: PhvvB8pkV5yupURojyUaN4uVfLhKeqMoLY3RiCBeGmQ=
Subject key identifier: 48:B3:5F:B1:E2:04:F0:AA:CA:D7:AF:A0:E7:55:96:56:C2:16:CE:88
Certificate issuer: /CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Certificate serial: 01975F58A012DA2FF8A0C66FD0407FAFAA41
Authority key identifier: 6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/SLNfseIE8KrK16-g51WWVsIWzog.roa
Signing time: Wed 11 Jun 2025 14:15:32 +0000
ROA not before: Wed 11 Jun 2025 14:15:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5488
IP address blocks: 185.236.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:58:a0:12:da:2f:f8:a0:c6:6f:d0:40:7f:af:aa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Validity
Not Before: Jun 11 14:15:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48b35fb1e204f0aacad7afa0e7559656c216ce88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:de:c1:fc:a7:d3:e1:23:11:2b:4c:b9:7d:
68:a7:a4:da:34:26:39:7e:53:ea:90:5b:4c:99:53:
53:bf:42:b3:55:df:1e:1f:14:ed:f3:73:23:e9:93:
dc:d3:4e:13:88:65:7a:1e:b4:8e:bb:19:94:6c:12:
29:0c:6a:99:cb:16:09:c4:e4:10:54:b8:ba:1f:fb:
2e:c2:e7:5a:12:0c:0d:09:c0:fe:0f:6b:73:c0:00:
7c:44:13:d2:d4:77:f5:8b:2d:a6:89:c1:0b:16:57:
d8:d7:7a:3b:58:8a:8a:8a:7e:83:86:3a:c8:ee:34:
2e:5c:31:5e:d9:80:e9:48:b1:b5:c1:72:ef:98:59:
ed:fa:c0:28:63:a5:eb:81:24:76:9a:bd:ee:aa:46:
a0:13:66:d0:b1:e7:0f:30:dc:ce:d4:01:60:9f:79:
97:e2:82:ee:4d:58:e5:45:06:2a:da:96:f9:75:0c:
55:a9:b4:10:61:c8:49:6b:2f:6c:13:67:b3:d9:69:
c2:1c:d8:40:33:ba:85:8c:67:a4:a5:f1:2c:4d:00:
4c:b1:b7:be:11:da:92:3d:a5:07:12:dd:21:29:c6:
69:89:83:a6:74:5a:10:e8:79:30:7d:fb:f8:77:6b:
17:3f:27:eb:1f:ef:9a:aa:f0:3c:bc:f2:24:ff:59:
71:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B3:5F:B1:E2:04:F0:AA:CA:D7:AF:A0:E7:55:96:56:C2:16:CE:88
X509v3 Authority Key Identifier:
keyid:6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/SLNfseIE8KrK16-g51WWVsIWzog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.55.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4c:4e:3b:9c:01:59:a0:c0:a8:af:c7:65:0c:e4:dc:ac:57:
dd:7a:bf:38:3c:59:0b:ec:46:ab:af:20:7c:fa:a4:c6:f8:82:
8a:a8:48:93:80:f4:ad:8c:3c:7c:0a:de:65:0c:dd:7d:f8:75:
54:1f:10:59:cc:c1:49:26:54:d9:b3:a5:b9:57:2e:47:09:c6:
69:16:3b:71:06:0f:a4:93:7c:c9:c5:1f:a3:9b:4a:ec:af:76:
05:84:1d:32:e2:09:83:9d:79:3f:8b:71:42:e3:70:68:33:69:
85:35:cc:e6:f5:95:44:88:c2:cb:cd:f0:48:ad:33:91:4a:39:
6c:87:bd:f0:88:38:f9:ff:28:16:dd:e8:dc:0e:ce:d1:90:47:
f4:51:67:56:29:7a:9a:7e:92:40:72:b6:57:3c:0e:bd:ab:da:
b2:79:5b:bf:30:8a:d9:d3:5c:e7:0f:8a:4e:d2:d7:37:fa:ea:
2c:15:60:b0:03:58:79:ce:5b:d6:ec:9c:70:d1:8f:42:07:f6:
bb:71:8e:23:69:00:d8:a1:6e:3d:b0:f3:44:b5:17:12:d0:42:
0f:17:3c:db:da:f6:df:df:14:3a:c1:a7:b6:61:ab:21:07:b2:
a4:5c:8d:e6:57:70:81:ef:24:d4:24:c5:9a:ea:ee:20:58:2b:
52:68:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:26:43 2025 by rpki-client