Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/l2JOTmWwgvB0Noq1JM57zkDHT7E.roa
File: l2JOTmWwgvB0Noq1JM57zkDHT7E.roa (raw, json)
Hash identifier: fvF/3WFpXW+en1bZSjFDxni1bz8bZU75qvWIdCsVsmI=
Subject key identifier: 97:62:4E:4E:65:B0:82:F0:74:36:8A:B5:24:CE:7B:CE:40:C7:4F:B1
Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Certificate serial: 0197695E9E9933EA895D0399BAF974DC7637
Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/l2JOTmWwgvB0Noq1JM57zkDHT7E.roa
Signing time: Fri 13 Jun 2025 12:58:18 +0000
ROA not before: Fri 13 Jun 2025 12:58:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212669
IP address blocks: 185.19.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:5e:9e:99:33:ea:89:5d:03:99:ba:f9:74:dc:76:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Validity
Not Before: Jun 13 12:58:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97624e4e65b082f074368ab524ce7bce40c74fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:ae:48:cf:39:8f:b4:7b:75:dc:fc:b5:b7:
50:bd:d4:20:96:83:a2:8b:08:d3:15:93:12:65:9d:
34:3b:a9:e1:7f:47:3c:d6:06:5f:e4:a8:5f:c9:27:
e4:f6:20:5c:27:b1:52:9a:4e:5a:46:30:1d:d2:2d:
4d:2d:66:42:6a:14:fd:bc:16:b1:9d:e2:75:35:2a:
31:1d:2e:5b:8a:ca:fe:e3:14:67:54:7d:da:92:46:
17:77:f8:d4:2d:18:e5:a9:87:7f:f6:a1:cc:30:97:
9e:38:75:6c:31:9b:82:ad:41:09:c9:da:33:a5:d1:
99:e5:59:a2:44:8a:63:4e:1f:86:d1:18:42:2e:ea:
94:3c:df:d8:30:62:aa:a4:71:bc:1d:49:c7:42:32:
52:0c:80:6d:cf:19:69:d7:f1:e0:0f:dd:c3:c5:c2:
3c:9f:80:8b:9b:69:43:69:3b:e7:35:5d:60:40:63:
45:d3:a7:85:aa:79:ce:85:6f:0e:27:36:c1:18:2c:
2c:87:92:c1:65:7a:10:98:b1:7e:2d:c4:8e:13:f7:
dd:48:16:8b:19:4d:be:18:b1:94:8a:19:de:b4:ea:
ba:73:83:f0:6f:48:42:28:78:43:c4:8e:08:1c:ff:
df:e6:33:4c:4e:02:28:0f:4d:ee:7a:b6:9e:b9:3a:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:62:4E:4E:65:B0:82:F0:74:36:8A:B5:24:CE:7B:CE:40:C7:4F:B1
X509v3 Authority Key Identifier:
keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/l2JOTmWwgvB0Noq1JM57zkDHT7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.34.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:0c:3a:d4:63:d1:5c:2a:b2:39:b5:3e:94:b7:fa:70:2e:6f:
a7:a5:cf:65:40:c4:7e:59:86:1b:43:dc:8a:bd:31:a9:cb:40:
e3:ea:e9:0e:3c:58:64:19:27:05:47:0f:96:04:4d:be:0c:a3:
0c:37:80:07:31:a4:6f:ca:51:56:4b:7f:69:7d:1f:c0:b2:3c:
2f:c0:8c:37:6e:b1:00:75:c8:c6:b2:28:1f:23:c5:8c:b5:05:
37:60:b5:28:27:49:9c:98:2d:19:3d:ac:91:68:33:3a:8b:5b:
ec:d6:17:16:2b:f6:d7:b1:b8:60:54:15:3e:90:4d:47:4f:48:
b6:a2:62:6c:54:d1:53:98:66:10:ef:b4:11:b7:5b:29:ee:b4:
4e:06:69:c9:42:4f:ff:8d:fe:12:a3:a1:8e:d7:0c:26:ca:47:
61:1d:27:52:03:2e:e3:cd:19:c4:2d:ac:69:37:b6:70:55:ec:
a9:76:07:7c:89:c7:d4:fe:11:1b:6a:b3:fd:98:82:2a:a1:d0:
88:bf:86:a2:04:ef:7b:0c:22:61:5b:5d:f7:54:e1:96:16:00:
4d:d4:42:e8:c0:0e:6f:c2:d2:88:05:69:29:55:de:70:25:d8:
4d:d9:b4:29:c1:6b:ab:77:50:7b:a7:50:96:16:2d:b2:eb:0e:
85:6f:6b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:47:14 2025 by rpki-client