Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/oTUrp5WsMFRPkEd_xq05-w4XaTQ.roa
File: oTUrp5WsMFRPkEd_xq05-w4XaTQ.roa (raw, json)
Hash identifier: 4rjV8kuQssnd98EF3/cWgnYFU7XTNq4fYQ0xpxtEtb8=
Subject key identifier: A1:35:2B:A7:95:AC:30:54:4F:90:47:7F:C6:AD:39:FB:0E:17:69:34
Certificate issuer: /CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Certificate serial: 019768BC9183DCD008BD79704C07550783C1
Authority key identifier: DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/oTUrp5WsMFRPkEd_xq05-w4XaTQ.roa
Signing time: Fri 13 Jun 2025 10:01:17 +0000
ROA not before: Fri 13 Jun 2025 10:01:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42151
IP address blocks: 195.242.142.0/23 maxlen: 23
195.242.142.0/24 maxlen: 24
195.242.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:91:83:dc:d0:08:bd:79:70:4c:07:55:07:83:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee6df9728cd8af0f34a03ed6ea3151c3bc22c8
Validity
Not Before: Jun 13 10:01:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1352ba795ac30544f90477fc6ad39fb0e176934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c7:69:f8:27:40:14:ee:ec:44:19:18:86:91:
69:53:e1:bf:32:4f:3d:bc:9b:18:9c:05:17:82:44:
d3:67:c1:ec:6b:1a:35:d8:47:ae:ff:a1:03:ab:c4:
02:0c:09:c7:8b:cd:21:34:bb:06:95:f5:01:b5:51:
2c:cc:f0:4c:9c:8e:2d:1f:d1:a7:1c:ee:73:83:61:
a1:19:f2:7c:ff:fc:ae:36:18:fb:12:b9:49:11:96:
88:94:36:5c:37:87:b9:a7:25:bd:13:5a:d2:ca:c6:
a6:2f:77:7c:77:5d:73:21:3d:7b:95:d9:b8:5d:e2:
a3:4b:9b:72:ec:53:2e:dc:f3:d6:47:9a:10:d2:77:
07:0a:af:10:c7:06:54:84:45:0a:95:58:8e:6e:05:
be:68:65:70:90:19:e6:6d:93:1a:a4:24:a5:c4:94:
8c:e2:fb:a4:36:a7:30:e6:77:d6:23:0a:bb:cc:9f:
68:ea:90:09:df:ec:88:e4:14:92:7a:3e:15:36:7d:
e8:5c:c2:7f:91:d2:65:86:7f:68:7e:9c:77:d2:f4:
a2:5e:72:dd:ec:65:64:eb:fd:5c:44:a0:02:74:9d:
cb:15:3a:96:d3:fb:0d:12:4d:9b:20:67:68:75:44:
46:cd:b1:d6:b9:f7:85:c8:f7:2d:7c:74:bf:1b:e3:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:35:2B:A7:95:AC:30:54:4F:90:47:7F:C6:AD:39:FB:0E:17:69:34
X509v3 Authority Key Identifier:
keyid:DA:EE:6D:F9:72:8C:D8:AF:0F:34:A0:3E:D6:EA:31:51:C3:BC:22:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u5t-XKM2K8PNKA-1uoxUcO8Isg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/oTUrp5WsMFRPkEd_xq05-w4XaTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/69d8ea-b08b-4e7e-afce-4d20e34d0992/1/2u5t-XKM2K8PNKA-1uoxUcO8Isg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.142.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:0d:57:d4:18:32:7e:50:41:ad:f8:1c:92:75:9b:bf:5f:9d:
a6:d2:4f:bb:90:0c:11:7f:1b:89:f7:5e:6e:4f:50:8e:74:76:
b9:26:2c:de:3c:65:ec:91:ca:7d:3e:df:75:3c:85:19:91:23:
d2:86:8e:44:41:fd:7b:da:d0:9b:a7:5f:25:d7:52:f7:ac:00:
ec:dd:77:91:97:bc:94:7e:76:a5:72:73:ea:59:4a:11:7b:48:
1b:9d:ab:54:c2:75:ae:e7:5b:82:7d:23:ee:12:f0:71:75:71:
1a:b5:f7:23:40:80:46:b1:be:f2:fd:1a:a3:42:f5:7d:df:3f:
26:f2:9d:b7:39:46:d6:30:65:25:88:11:b6:a4:93:91:ee:be:
77:59:bc:9c:60:11:8d:33:94:5f:56:f0:95:91:e2:11:2e:e3:
ea:2d:07:9b:fc:ac:9e:77:eb:c3:31:04:30:0f:4c:97:78:23:
97:f0:d5:89:35:40:5d:57:3f:a5:e7:6a:32:26:78:9d:11:6f:
c1:51:4e:f4:be:5d:1a:6c:fd:3b:28:7b:54:92:b2:34:b2:ff:
7c:c4:94:0b:0e:bf:33:03:09:b6:7f:da:99:11:eb:39:8c:ef:
01:22:d4:ee:47:ec:a1:45:24:72:f6:c2:ca:19:93:b8:22:4b:
21:36:e3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:09:54 2025 by rpki-client