Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/dT_BFnqui1qPfatUh1gogWMYRho.roa
File: dT_BFnqui1qPfatUh1gogWMYRho.roa (raw, json)
Hash identifier: Znmqpd0eQxFE3KRHa1gq7DMVat4pWLiZVr8QQEm1djI=
Subject key identifier: 75:3F:C1:16:7A:AE:8B:5A:8F:7D:AB:54:87:58:28:81:63:18:46:1A
Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial: 01974474C6224049AD3DE75A41E30030C669
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/dT_BFnqui1qPfatUh1gogWMYRho.roa
Signing time: Fri 06 Jun 2025 08:56:32 +0000
ROA not before: Fri 06 Jun 2025 08:56:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5413
IP address blocks: 195.49.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:74:c6:22:40:49:ad:3d:e7:5a:41:e3:00:30:c6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
Validity
Not Before: Jun 6 08:56:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=753fc1167aae8b5a8f7dab54875828816318461a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:67:45:1c:8b:84:55:0c:5f:90:b6:8a:eb:
67:7b:27:83:fb:ee:90:9a:b3:0f:16:75:ed:f8:ad:
cc:df:ad:a8:b0:e7:02:75:07:27:bb:60:6f:31:20:
99:d0:2c:a4:c0:78:77:83:cc:6f:0d:c1:3e:23:df:
9d:10:35:ee:eb:00:bd:a2:03:52:c2:fd:bd:3e:9e:
a2:0d:e7:98:6d:69:77:b5:8b:95:46:00:17:08:c6:
2c:39:ce:99:bb:ac:e9:a0:d7:0f:58:4d:f7:48:70:
86:65:21:36:31:6c:c4:11:c7:bd:93:a8:90:46:73:
26:ce:96:1f:17:4d:af:21:a4:e2:fd:ec:d4:47:4e:
9a:b1:c8:59:29:fe:ae:ca:9d:f0:4f:6a:dc:ea:29:
86:41:a2:05:e1:67:d3:7d:df:d6:33:a0:10:2b:03:
09:05:82:17:48:1f:30:a0:76:86:84:27:80:2c:25:
f4:78:d4:2e:40:bc:56:93:98:d0:47:23:b1:5d:e4:
27:6a:78:fc:da:4e:ec:3e:9f:12:11:09:d3:29:cf:
bc:6e:54:e8:25:f5:04:7a:41:5b:6f:41:45:16:c8:
f8:4b:7f:7c:50:4e:c6:92:b8:e0:aa:b9:0d:37:28:
29:5d:0f:92:6e:f4:42:68:6d:13:1c:cd:3d:85:97:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:C1:16:7A:AE:8B:5A:8F:7D:AB:54:87:58:28:81:63:18:46:1A
X509v3 Authority Key Identifier:
keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/dT_BFnqui1qPfatUh1gogWMYRho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.180.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:a2:92:71:db:ee:24:8b:a7:33:00:56:15:b9:59:18:02:10:
66:5f:02:f0:2d:14:33:da:21:f8:a3:85:d8:90:79:78:4e:f2:
e5:1d:c4:f1:5c:30:1d:77:27:32:26:0e:f8:bf:c4:6c:8c:8e:
9b:9b:2c:e0:65:44:8e:34:88:f1:b1:33:e0:d3:05:d4:07:b9:
7b:b4:ca:7b:2e:a6:f5:61:f7:f8:44:c0:30:58:7d:e9:4d:c0:
3b:95:70:56:08:fc:56:a2:c0:0f:6a:99:6b:f3:c1:3a:5f:8e:
76:ee:a4:38:e9:f8:7c:3d:45:e2:37:0a:7f:3a:2e:b9:18:b7:
f2:43:b2:ad:10:a0:61:d4:ee:7e:f2:11:fa:65:5b:50:27:f8:
55:6b:eb:c3:69:82:4a:d2:88:6b:72:16:d7:aa:b8:3d:24:93:
4c:38:e6:20:20:d3:bc:11:93:90:c3:43:65:99:03:76:38:2a:
47:53:a5:fe:76:fd:c0:47:a1:0c:1f:00:7f:9c:e8:33:78:a4:
00:41:53:2a:59:54:16:41:47:93:44:3b:2a:59:28:9e:6d:50:
d5:1b:b1:65:74:bf:0b:1c:47:c8:95:82:d8:f7:fa:8a:42:9d:
4e:4e:99:af:eb:a4:c7:05:2b:c5:e2:49:93:26:93:a0:a1:98:
ee:0e:f4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:34:28 2025 by rpki-client