Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/tVLlOiV7SvnosXMuOA6u9tK4RqI.roa
File: tVLlOiV7SvnosXMuOA6u9tK4RqI.roa (raw, json)
Hash identifier: /FYDglX8ng94EWH9NM8VS2sIZeZUQbmdZE0FSeyFXmg=
Subject key identifier: B5:52:E5:3A:25:7B:4A:F9:E8:B1:73:2E:38:0E:AE:F6:D2:B8:46:A2
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 019754F20B728D0CE01AB25B3B422B75EA11
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/tVLlOiV7SvnosXMuOA6u9tK4RqI.roa
Signing time: Mon 09 Jun 2025 13:47:18 +0000
ROA not before: Mon 09 Jun 2025 13:47:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 62.244.57.0/24 maxlen: 24
62.244.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:f2:0b:72:8d:0c:e0:1a:b2:5b:3b:42:2b:75:ea:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Jun 9 13:47:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b552e53a257b4af9e8b1732e380eaef6d2b846a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:b7:b6:66:de:8f:ce:f5:6c:da:eb:4a:ab:
e3:e8:c4:cc:12:60:b6:0d:b6:e2:46:73:d0:4d:b1:
7b:49:52:4e:65:83:f5:41:2c:ca:20:b7:66:13:e5:
d1:67:82:72:8a:76:16:49:f3:3a:4b:58:07:ac:d2:
84:59:23:29:c1:45:59:4c:11:bf:32:01:8b:d4:d5:
da:83:bf:ac:e9:c0:f5:84:de:c3:a7:ee:26:cb:91:
19:04:c4:3b:f9:ad:5c:63:41:36:7f:71:8b:36:b9:
49:d0:f1:06:54:51:04:d6:02:67:cd:96:85:2e:0c:
5a:d9:6e:21:7a:a0:bd:af:ad:10:76:ae:cf:12:6b:
01:11:4b:24:7c:5c:85:5b:53:9d:a0:99:1f:0e:19:
b3:b1:be:32:19:97:63:a1:8c:d2:3e:a6:ae:dd:3c:
72:06:54:10:09:4e:d0:0b:38:7a:b6:d2:35:a4:56:
ac:f8:ea:ed:e5:cf:3f:6c:54:4f:2f:37:04:66:83:
b5:7d:13:86:38:4f:92:32:74:20:32:c6:cd:c4:29:
76:df:c4:bd:cd:f4:10:2d:f9:27:7c:c4:ac:a5:b5:
c8:71:1e:02:d6:95:48:7c:7b:7a:49:16:33:99:c2:
2a:e3:a8:b0:2c:b9:a2:d7:0e:94:55:6c:49:f1:95:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:52:E5:3A:25:7B:4A:F9:E8:B1:73:2E:38:0E:AE:F6:D2:B8:46:A2
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/tVLlOiV7SvnosXMuOA6u9tK4RqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.244.57.0-62.244.58.255
Signature Algorithm: sha256WithRSAEncryption
6c:79:c0:55:02:e7:fc:1a:da:1f:01:39:3d:24:48:34:8f:0b:
c9:13:d3:4a:d7:63:b9:40:88:74:07:79:a7:0b:f0:b9:ca:52:
bc:62:0f:2d:f7:97:bf:3c:ff:27:10:c0:35:4e:c7:f0:d9:67:
f8:1e:14:4f:6a:de:24:c7:be:be:0d:b6:5b:8f:59:2a:38:97:
24:a5:a9:9e:3f:6a:e2:3b:65:2c:18:37:be:a8:78:08:02:cb:
86:89:82:75:35:44:af:e5:41:f8:ba:c2:9f:3e:46:8f:b4:b1:
1a:c1:fd:7f:35:d1:1c:dc:0e:19:47:67:cb:6b:af:2e:bf:40:
eb:fc:01:83:c8:57:da:aa:d5:8a:bb:a8:9b:0c:9c:e5:9e:f3:
c3:79:f3:fb:02:bf:67:e6:2b:c5:cc:e2:a6:06:c1:02:0d:9f:
15:c8:66:76:26:6a:31:48:65:ab:38:1b:ae:2c:81:ef:de:9c:
88:7a:58:23:bd:39:41:3e:15:81:1b:60:2f:0a:d6:22:d7:ae:
a0:16:bc:88:5d:f2:c8:fb:de:32:68:4b:4b:b2:88:44:a4:6a:
a8:f9:8f:79:61:fe:16:19:1d:e1:dc:6d:9d:b2:e9:d4:9f:80:
a4:ed:b8:14:77:94:f2:dd:67:18:c8:f3:51:f1:b9:67:b2:76:
bc:7c:47:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:58:32 2025 by rpki-client