Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa
File: s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa (raw, json)
Hash identifier: MfReyFTsbPeeVwKX4SeLCT5vdQejZ0/27SaFtWWlLKo=
Subject key identifier: B3:A5:0E:89:A3:F0:44:30:E0:4B:81:9D:51:02:63:AC:DC:43:0A:40
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 019758D44D42AB2535A016DD6267D40E0EFE
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa
Signing time: Tue 10 Jun 2025 07:53:17 +0000
ROA not before: Tue 10 Jun 2025 07:53:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273888
IP address blocks: 158.172.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:d4:4d:42:ab:25:35:a0:16:dd:62:67:d4:0e:0e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jun 10 07:53:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3a50e89a3f04430e04b819d510263acdc430a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:74:0e:62:3b:94:29:99:e1:cf:f2:dc:a3:
ab:98:97:7c:53:e7:d5:b1:d8:86:e4:05:03:ca:e5:
66:f5:75:0e:68:7a:3f:c2:95:15:32:6c:6d:09:84:
ac:b4:3b:3b:00:2a:e1:3c:36:5e:f7:22:7f:f5:ae:
bc:ea:78:7c:c9:f9:d1:94:96:48:02:c7:91:00:3e:
13:de:89:ba:47:ae:d0:5a:bf:a9:bf:8e:5e:0e:aa:
9f:97:0f:79:69:4e:60:a4:8a:84:6d:d1:ba:c6:f8:
3a:52:47:02:e1:fe:7d:b1:09:06:0f:58:c9:0f:0f:
9d:ec:91:75:ba:54:f4:8d:5e:82:28:e1:f8:4c:7a:
73:a7:00:1a:07:29:ce:6f:9f:d9:d4:8d:7e:ac:77:
de:1b:eb:5f:05:78:e7:95:d4:27:15:ac:b5:9c:8c:
b8:c8:6d:84:c2:d5:d3:35:8b:a8:75:b3:59:11:db:
7d:14:45:7a:a7:47:37:93:6c:8b:53:27:6d:9a:6a:
96:46:79:b9:a9:69:93:d3:d2:d0:52:c8:35:53:bb:
92:af:08:20:73:29:71:af:fd:06:67:69:54:a3:d5:
4b:1c:0a:5f:f2:7c:68:24:3d:57:e0:e5:38:4a:eb:
ff:41:0b:b0:c1:18:6b:5b:32:11:8e:32:8c:1c:49:
74:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A5:0E:89:A3:F0:44:30:E0:4B:81:9D:51:02:63:AC:DC:43:0A:40
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/s6UOiaPwRDDgS4GdUQJjrNxDCkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.218.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:06:10:f8:b4:ba:b9:9e:29:17:db:16:37:a5:6b:69:46:1a:
01:0a:c5:37:ea:cd:db:06:b2:1d:93:fb:6d:b3:66:a9:50:76:
23:6c:f2:c6:1e:08:b7:f4:d5:72:04:cd:bf:02:4a:07:f7:26:
85:ac:35:b4:83:6d:f4:3b:92:d1:18:8e:d9:45:4b:8c:aa:21:
95:9f:78:c1:75:ee:50:e6:89:1f:64:23:bc:71:a0:d8:46:60:
1f:e8:5e:97:67:b7:8c:f8:fa:29:04:8c:51:10:35:2f:f2:d1:
26:2d:31:20:8e:d9:66:09:7e:36:0b:21:29:c9:4a:b6:5d:70:
06:1f:fa:eb:d0:a4:e1:61:83:35:90:4f:3c:ea:00:7b:a8:82:
d4:df:1a:a2:d1:a7:c2:bd:10:c9:f3:75:eb:f5:f3:0d:4f:17:
64:ff:bc:84:b9:e8:47:72:4d:18:5e:2c:95:34:5d:92:f8:bb:
86:dc:10:87:06:4e:bf:c8:4c:74:3b:10:c4:b4:43:30:45:8e:
9c:12:32:01:52:0c:a7:b2:54:b7:f7:94:51:9e:40:d9:7e:01:
b7:be:db:90:40:22:6f:3d:78:ee:49:5d:93:d1:77:91:03:53:
0a:80:91:20:38:ff:2e:34:78:a7:3a:e6:eb:78:78:6a:ab:b4:
c7:87:ca:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:12:50 2025 by rpki-client