Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/tRNUe3Kk3eWia8VX_dKXZILdgjE.roa
File: tRNUe3Kk3eWia8VX_dKXZILdgjE.roa (raw, json)
Hash identifier: JStwVDR6ukqM/F9+GpHeAO0i8HlEBKkQBbaoGUyV6eY=
Subject key identifier: B5:13:54:7B:72:A4:DD:E5:A2:6B:C5:57:FD:D2:97:64:82:DD:82:31
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 0197693E93DB602939FA8A146E764DA6BD4D
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/tRNUe3Kk3eWia8VX_dKXZILdgjE.roa
Signing time: Fri 13 Jun 2025 12:23:18 +0000
ROA not before: Fri 13 Jun 2025 12:23:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61272
IP address blocks: 185.23.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:3e:93:db:60:29:39:fa:8a:14:6e:76:4d:a6:bd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Jun 13 12:23:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b513547b72a4dde5a26bc557fdd2976482dd8231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:6c:43:b2:f0:e5:6e:2f:cf:40:97:3f:11:
41:dc:ce:51:d0:cb:a2:b9:1b:67:eb:42:1e:c4:e8:
91:31:81:5c:59:1c:47:f6:9e:1c:c4:11:aa:60:5f:
b5:58:47:20:ee:c8:6f:ab:79:2c:d2:aa:e6:21:2f:
d4:0d:b0:39:a5:be:51:e5:86:69:f9:1f:bb:98:7e:
3b:32:d4:67:3a:cd:9e:7a:0d:3e:b8:8a:74:fc:92:
40:61:53:01:b8:ee:ec:96:8f:3e:ec:3e:62:8d:b2:
51:b6:19:83:0b:4a:4d:60:de:37:49:2c:a9:65:33:
5b:e8:b4:e0:23:40:27:f9:1f:1a:02:06:03:6e:41:
b9:82:7b:14:58:57:74:d9:f3:57:61:08:92:77:34:
0b:c6:7f:ab:c9:52:e1:7b:0e:02:44:3e:e7:f0:51:
62:03:17:80:61:c4:9a:fc:db:f4:58:24:e0:9c:d3:
98:28:7c:e7:e2:4d:81:4c:b1:2d:7e:3a:c5:c6:ea:
71:72:f1:14:b1:b2:93:47:a9:6b:97:80:8c:91:b2:
d8:b9:a5:46:a2:5c:be:89:7a:98:7e:08:72:62:55:
af:d3:c6:a7:79:19:0f:1e:cd:6d:71:f9:2b:3d:61:
46:44:3b:36:b1:aa:bf:6a:13:2d:b7:40:a4:5c:b8:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:13:54:7B:72:A4:DD:E5:A2:6B:C5:57:FD:D2:97:64:82:DD:82:31
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/tRNUe3Kk3eWia8VX_dKXZILdgjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.16.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4e:c6:f0:15:4d:49:db:0d:2e:c3:48:f9:9d:31:d4:12:f6:
f5:15:10:5d:76:71:6f:e8:7f:84:45:e2:6d:2c:e9:e6:0e:33:
97:aa:b4:83:cf:a0:7c:3d:3e:26:fc:2c:cb:74:d4:ee:7e:4b:
7f:02:8c:b1:ec:74:a8:43:f2:7a:13:f2:f3:c8:65:3a:be:70:
68:4f:de:ae:36:2d:67:73:eb:a8:f5:0b:2c:f9:28:1e:f9:cc:
f8:8b:a2:65:bf:5e:d4:db:76:aa:21:7f:0e:34:28:2f:3f:37:
51:c9:4c:8b:d9:3b:5b:1f:a8:43:8a:6e:16:ba:81:6e:c7:43:
78:43:50:c8:7a:7e:a3:a1:e8:29:49:7a:87:d8:ac:bf:68:cb:
ae:70:94:f4:fa:7b:c5:22:43:2e:aa:50:93:e7:95:69:a1:22:
84:99:5e:47:ab:f2:b4:6d:0d:a9:97:83:fb:1a:23:eb:e7:99:
dd:f3:92:44:d7:a7:ec:da:28:c5:7a:44:54:53:b5:1e:fc:31:
dd:f3:c7:c9:90:f0:02:41:7c:83:86:ea:da:de:88:54:ff:f1:
00:51:2c:66:2b:73:2f:e0:3e:e1:5a:5e:41:f8:19:b7:b4:8e:
6f:84:49:5b:8c:0f:aa:43:c9:76:7b:55:18:18:1a:d0:77:ad:
b8:54:8d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:59:55 2025 by rpki-client