Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/YGuDE3vatbpuiraxDUsEQP0I-8M.roa
File: YGuDE3vatbpuiraxDUsEQP0I-8M.roa (raw, json)
Hash identifier: oWCmcqNYGbhIxxvnhOzPFCagvtC48p+eG4AMg8r9Xn4=
Subject key identifier: 60:6B:83:13:7B:DA:B5:BA:6E:8A:B6:B1:0D:4B:04:40:FD:08:FB:C3
Certificate issuer: /CN=3261efe627712604f35b9ad9ccbf0368695f5013
Certificate serial: 0197C00CA1B5508978F91313A5C9BDECD3DA
Authority key identifier: 32:61:EF:E6:27:71:26:04:F3:5B:9A:D9:CC:BF:03:68:69:5F:50:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/YGuDE3vatbpuiraxDUsEQP0I-8M.roa
Signing time: Mon 30 Jun 2025 08:55:42 +0000
ROA not before: Mon 30 Jun 2025 08:55:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60344
IP address blocks: 141.49.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:0c:a1:b5:50:89:78:f9:13:13:a5:c9:bd:ec:d3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3261efe627712604f35b9ad9ccbf0368695f5013
Validity
Not Before: Jun 30 08:55:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=606b83137bdab5ba6e8ab6b10d4b0440fd08fbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:5f:ee:67:ac:3a:0d:76:19:8d:55:f0:9b:
2b:72:54:d3:ed:a1:c0:1c:cc:5a:02:cc:17:8c:ea:
f8:aa:48:4f:27:0c:3c:65:65:85:33:8e:62:de:de:
8e:7a:91:b0:e1:86:18:b9:25:27:7b:24:27:8f:14:
15:3d:d2:47:16:69:6d:86:13:9f:50:86:65:6f:52:
58:fe:39:c3:65:e2:3b:22:bd:f8:5b:23:6a:94:23:
fa:9b:0b:be:b9:ec:79:ef:80:19:c3:f5:be:b8:7a:
22:c4:38:54:42:a0:77:17:9e:28:90:e2:9f:9a:e6:
b8:2f:f7:75:09:01:b2:5d:cf:a3:94:79:3d:8b:e8:
38:a5:35:af:23:a3:52:87:f3:5d:1c:ff:59:36:e5:
e8:0a:d5:6f:0e:00:8c:25:58:0e:1d:6e:19:7e:de:
bd:2b:d2:0a:bb:3a:01:04:5b:14:65:78:9f:94:01:
13:ed:2d:27:17:0c:db:f8:ae:ad:58:72:89:1e:01:
d9:bb:7d:d5:4c:e0:77:76:d9:b0:0f:fd:4a:25:00:
b3:ae:d5:40:0c:17:08:b8:15:f1:84:78:27:eb:f4:
44:f3:9c:1c:07:35:4f:c5:90:01:e9:50:52:99:26:
72:69:33:b7:a6:ca:93:0f:58:00:0a:30:a6:89:ae:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6B:83:13:7B:DA:B5:BA:6E:8A:B6:B1:0D:4B:04:40:FD:08:FB:C3
X509v3 Authority Key Identifier:
keyid:32:61:EF:E6:27:71:26:04:F3:5B:9A:D9:CC:BF:03:68:69:5F:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/YGuDE3vatbpuiraxDUsEQP0I-8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.49.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:1d:21:92:7e:ec:e4:a5:db:99:95:14:e1:23:08:1a:63:9e:
97:f6:ba:48:2c:ca:2e:bc:81:5e:67:bc:69:55:89:88:b6:77:
00:79:bc:6d:c7:39:ae:bf:8a:b8:33:ba:49:e2:6b:17:29:83:
59:0d:99:71:b0:6a:a4:d4:b3:b6:c5:b3:1e:a9:1a:e0:83:47:
f2:49:a5:9a:0f:d6:89:35:b7:37:03:84:24:e4:88:f9:58:7e:
e2:2b:ee:c7:c6:15:cf:c5:41:8d:1c:46:76:a3:a3:0a:d2:0a:
40:1d:88:32:ec:60:52:dd:7d:f5:0e:5e:9e:76:0a:eb:f6:8b:
fc:17:d8:c2:bd:78:09:f7:ef:b7:97:1e:e3:50:57:57:4c:13:
ab:5d:22:16:91:be:90:98:9d:21:e8:86:11:f5:8f:ba:43:36:
ec:75:d9:73:00:bf:1b:e6:b6:9e:c8:f3:e6:be:32:e5:ec:86:
ab:8a:0c:50:84:4d:92:cc:9a:7c:01:f9:a4:1d:3c:8b:d5:73:
f1:0c:45:c9:ed:81:a1:3c:6f:86:8c:f7:5e:a6:b8:12:6c:3c:
9a:36:83:e0:c8:f1:60:91:fb:7d:90:ba:8f:cd:e9:21:c5:1d:
b2:f8:b5:e3:51:29:b8:c7:f2:8e:24:3d:ba:7c:22:21:73:e0:
50:32:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:24:18 2025 by rpki-client