Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/junb4Hu7skcDtoWuQpLCf11hPIk.roa
File: junb4Hu7skcDtoWuQpLCf11hPIk.roa (raw, json)
Hash identifier: WDV6wqg1Z11gLdLlJ/tRkdmj0uUMTkoiQFmb7Lj/0IM=
Subject key identifier: 8E:E9:DB:E0:7B:BB:B2:47:03:B6:85:AE:42:92:C2:7F:5D:61:3C:89
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 01975E253D005EA52CC70007EE5CC7DC6393
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/junb4Hu7skcDtoWuQpLCf11hPIk.roa
Signing time: Wed 11 Jun 2025 08:39:48 +0000
ROA not before: Wed 11 Jun 2025 08:39:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197730
IP address blocks: 91.190.152.0/24 maxlen: 32
193.28.186.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:25:3d:00:5e:a5:2c:c7:00:07:ee:5c:c7:dc:63:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Jun 11 08:39:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ee9dbe07bbbb24703b685ae4292c27f5d613c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:ec:6f:c3:6d:cd:4b:3d:1c:08:ba:0a:8d:
ce:de:98:0e:58:a1:53:dc:77:58:35:0f:b2:19:1f:
51:00:30:a3:28:fb:ff:29:02:e5:df:a4:a1:d5:42:
9a:f5:d8:da:60:50:35:c3:7e:4c:c4:b9:24:5c:1c:
ef:25:c4:43:1d:56:b3:5c:63:05:65:13:61:c8:16:
36:d1:ba:be:39:13:c9:0f:58:dc:e8:41:04:18:58:
94:56:29:95:fc:25:8a:d7:37:54:a3:2e:96:3d:8b:
32:e2:62:47:19:d3:c0:5f:19:e5:a8:3d:6e:7f:a6:
d9:bf:54:6b:9a:c2:78:46:31:71:9a:3d:33:a5:6c:
af:d3:2f:33:5b:10:61:be:c6:18:41:77:8e:b3:32:
4b:d0:06:73:37:7d:86:d1:8c:98:72:65:57:26:f6:
98:82:3e:95:5d:0b:e5:f7:32:80:df:6b:88:2d:44:
0b:26:bd:c8:33:2d:3a:63:81:02:b6:27:7c:59:7e:
46:d4:4b:3b:95:f7:57:4a:18:69:80:88:42:cc:75:
13:d6:0b:7a:ea:9b:05:20:39:62:aa:6b:c2:24:3a:
7b:d6:4f:23:7a:09:29:ae:22:cb:95:af:1f:de:69:
84:36:a1:44:0f:92:7c:cd:0c:70:d0:26:dd:30:e5:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E9:DB:E0:7B:BB:B2:47:03:B6:85:AE:42:92:C2:7F:5D:61:3C:89
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/junb4Hu7skcDtoWuQpLCf11hPIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.152.0/24
193.28.186.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5f:9b:1d:0b:ad:49:48:18:3d:a6:0f:a1:8d:cc:31:bd:a1:
11:51:10:b7:f9:20:0b:36:d7:1d:6d:44:f0:ac:a3:c6:87:cb:
ff:86:3e:20:0d:77:f3:da:bd:59:f4:75:e2:b2:96:24:48:04:
76:c7:7f:58:9d:ff:da:ee:00:23:18:1a:28:c3:b0:d6:2b:61:
a0:0e:a2:03:da:13:46:de:4e:28:27:a3:44:ea:22:7a:04:d2:
03:30:72:67:8d:71:e8:cf:de:b6:4e:65:0f:a3:7d:91:8a:55:
c7:3a:f7:5e:f4:2e:5e:0a:12:62:07:c2:36:0c:08:51:19:ae:
82:87:55:b3:0f:31:5e:6b:1e:be:85:b7:48:5d:70:79:f1:d0:
15:a8:6c:5f:ea:c6:00:3d:b8:57:a0:7b:ed:32:c5:73:75:68:
0f:95:fd:3e:2f:8c:a6:11:51:5f:4e:62:90:eb:b6:f7:7a:2a:
d0:91:25:14:22:3c:fc:ba:2b:67:c0:c1:75:82:a2:2f:4a:01:
29:fb:5b:8a:a5:5b:e0:6d:ac:b2:e6:3d:1f:49:d1:0e:3d:a6:
f5:c1:aa:a1:9d:1c:dd:06:a9:76:9d:2b:87:03:0e:6f:ff:18:
51:b6:98:6d:1b:1c:5d:65:dd:cf:0f:c1:c4:ec:ad:83:ef:35:
3a:c7:a2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:18:47 2025 by rpki-client