Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/xg4TB9W34T_2H7A6G22FFhh44IA.roa
File: xg4TB9W34T_2H7A6G22FFhh44IA.roa (raw, json)
Hash identifier: clTVUz8w+JASk2G55oRaZ8c/R0rPlvX1Is7X2/fJkW4=
Subject key identifier: C6:0E:13:07:D5:B7:E1:3F:F6:1F:B0:3A:1B:6D:85:16:18:78:E0:80
Certificate issuer: /CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f
Certificate serial: 01978D4649A476BE55BFF980F0C8DA2D6AB5
Authority key identifier: 6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/xg4TB9W34T_2H7A6G22FFhh44IA.roa
Signing time: Fri 20 Jun 2025 12:18:03 +0000
ROA not before: Fri 20 Jun 2025 12:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197678
IP address blocks: 91.230.24.0/24 maxlen: 24
2001:67c:2808::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8d:46:49:a4:76:be:55:bf:f9:80:f0:c8:da:2d:6a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e8bf857ae07f0d5efd5775ad529ce4eed9b7d2f
Validity
Not Before: Jun 20 12:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c60e1307d5b7e13ff61fb03a1b6d85161878e080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:1a:75:7f:ab:cf:b9:54:cc:3e:56:87:37:
bb:75:55:ea:9a:2c:a4:af:db:f0:bf:40:10:86:20:
39:83:3a:1f:11:f0:57:f1:dc:b3:af:63:22:45:6f:
3a:f6:6d:3f:e9:d4:6a:8e:b4:12:4b:d4:28:5c:f0:
6d:c2:30:88:0a:13:57:21:4b:f6:aa:d4:b7:b2:e6:
16:36:89:ce:cc:b8:8b:dc:05:83:d9:68:a5:2e:89:
6d:de:6f:db:78:6f:b9:af:53:b3:59:0b:38:39:b8:
bf:6b:0b:dd:85:e2:62:80:be:50:bb:67:59:8a:e6:
84:ef:90:f2:ca:be:55:7c:36:0a:b7:6d:b4:17:a5:
9b:ca:ff:96:20:4f:91:b3:18:0b:1b:38:87:78:9b:
60:7f:c6:7f:4c:24:e7:63:c4:4c:d5:3d:ad:b1:74:
2c:46:12:44:f2:46:77:d8:2c:ba:66:43:76:17:ce:
f6:8d:c4:0f:a6:29:fb:43:4a:f4:5f:06:bc:f8:33:
22:09:f0:5f:a3:19:25:01:3c:44:00:54:be:02:3b:
dc:cb:5e:cc:f7:3b:bd:94:a0:ab:01:00:28:65:23:
35:65:9b:88:e3:1b:29:51:b0:98:f2:04:87:39:2d:
65:51:46:5d:67:74:de:b2:cc:b0:70:3d:d3:db:b0:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0E:13:07:D5:B7:E1:3F:F6:1F:B0:3A:1B:6D:85:16:18:78:E0:80
X509v3 Authority Key Identifier:
keyid:6E:8B:F8:57:AE:07:F0:D5:EF:D5:77:5A:D5:29:CE:4E:ED:9B:7D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bov4V64H8NXv1Xda1SnOTu2bfS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/xg4TB9W34T_2H7A6G22FFhh44IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/045147-36be-4981-87a3-a6dcb9fb8e6f/1/bov4V64H8NXv1Xda1SnOTu2bfS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.24.0/24
IPv6:
2001:67c:2808::/48
Signature Algorithm: sha256WithRSAEncryption
2b:3d:84:73:9a:02:79:d0:ad:e5:05:dc:d5:53:b8:79:5a:d4:
ca:ea:5c:6a:0d:de:4c:a9:25:db:73:53:97:f1:23:17:74:71:
ed:9b:3b:d9:62:bd:74:15:39:67:90:d2:73:a1:aa:ac:c7:37:
ca:75:41:1f:70:3a:75:90:08:10:a0:25:41:b3:4f:72:b8:d3:
72:cc:c0:93:b7:b2:45:1d:98:b8:ff:8c:9c:59:31:d5:b8:37:
52:61:83:13:57:a6:7a:43:82:8c:24:ab:9a:a9:7c:6d:92:51:
c3:e7:ff:b4:29:f2:6f:f7:a1:3c:95:85:7f:72:6f:ea:2f:71:
3e:21:5f:cd:69:d4:6e:2d:28:ee:aa:81:8e:05:e2:0d:53:14:
fd:10:15:db:f2:c0:e6:b1:13:d1:64:51:a1:06:90:a4:ff:e6:
07:65:76:74:4c:86:05:73:88:74:a3:8e:6b:a5:e1:23:1d:df:
db:a2:d0:b9:a0:93:0e:9a:16:7a:58:9a:4e:65:34:15:ab:7f:
2b:91:e3:2b:61:7b:a2:bc:7f:6a:8f:a6:c2:3f:0b:94:f3:db:
b1:f0:8f:94:a5:3a:f0:59:39:40:63:02:d0:f2:5d:b8:b6:6d:
5b:d4:08:ba:3f:15:d3:c2:29:d2:71:8d:6e:2a:3c:65:32:ad:
92:09:63:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:18:40 2025 by rpki-client