Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/1d5tIKFWKjHBDKkGnBRvTBWCJAk.roa
File: 1d5tIKFWKjHBDKkGnBRvTBWCJAk.roa (raw, json)
Hash identifier: fRtqk0iZm2CdbdhKX93X5/SECEfnUXkhKcE8ZqaJIDU=
Subject key identifier: D5:DE:6D:20:A1:56:2A:31:C1:0C:A9:06:9C:14:6F:4C:15:82:24:09
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 0197D1497BE81E64F9695A699F3EEC86256B
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/1d5tIKFWKjHBDKkGnBRvTBWCJAk.roa
Signing time: Thu 03 Jul 2025 17:15:43 +0000
ROA not before: Thu 03 Jul 2025 17:15:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60594
IP address blocks: 192.162.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:49:7b:e8:1e:64:f9:69:5a:69:9f:3e:ec:86:25:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jul 3 17:15:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5de6d20a1562a31c10ca9069c146f4c15822409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:72:4a:9c:0f:bf:06:54:a9:d2:d4:a3:a7:
17:e5:96:d5:3d:a9:bd:f3:ef:e1:36:ea:f0:3a:c2:
8c:eb:6a:2e:40:19:45:5c:ea:ee:34:53:46:b2:c3:
02:72:2d:97:ae:2a:70:a2:20:c8:e6:33:e6:a3:2c:
eb:39:7c:8d:bb:cf:d3:07:ca:1f:09:5e:7b:43:af:
73:fd:76:e0:f5:67:31:0c:aa:4a:a8:88:be:dd:42:
7a:cc:94:a5:1e:44:9e:6d:0b:cc:88:97:ea:13:50:
34:23:8d:b0:2e:1b:b5:2c:f5:a5:15:56:5f:93:a4:
11:1b:76:77:81:60:17:7f:ec:31:fb:ff:13:5f:ba:
2e:4b:28:c4:9b:52:ba:51:76:a3:5d:c4:39:9d:91:
95:15:bf:35:16:30:3f:4e:38:7b:6c:9d:93:45:02:
0c:a6:2d:f7:1d:26:64:fc:f8:d5:1d:60:a3:e4:bd:
e9:5b:cc:5e:1a:fa:dd:16:a5:d5:83:61:1a:d3:6e:
90:f3:7b:a8:e2:a4:cd:43:16:c4:2b:dc:83:a0:a2:
61:66:55:3a:10:79:46:99:97:28:57:ea:a7:8e:c0:
a7:9f:4c:4e:6c:3a:ce:88:eb:e9:51:54:7c:1f:fe:
4a:8c:a0:1a:dc:e3:d8:8d:89:ef:1a:83:40:02:0f:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DE:6D:20:A1:56:2A:31:C1:0C:A9:06:9C:14:6F:4C:15:82:24:09
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/1d5tIKFWKjHBDKkGnBRvTBWCJAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ba:8a:c2:b6:f5:6b:22:ca:22:b8:f1:10:64:c3:29:d3:1d:
e9:68:c9:a5:64:99:67:4f:06:cf:d3:ed:61:9f:6c:3a:b6:c4:
cf:6b:f0:59:6f:6b:25:9d:2b:68:ac:57:7e:96:98:b2:72:4d:
ab:5b:4f:b9:d7:bc:e6:ce:c3:77:2d:9c:0c:be:71:0d:d9:4a:
2f:c1:55:30:fb:a5:8c:9c:4a:66:98:e4:e9:d5:df:a2:62:da:
39:d3:12:91:17:0d:79:1a:35:60:19:f8:f7:62:b5:40:20:8f:
c5:6e:31:c9:dc:20:d8:6a:08:55:36:83:47:bc:ea:db:55:31:
33:a1:b2:0a:81:25:e0:9e:72:a4:ae:5a:b0:1d:eb:ac:1e:37:
58:c6:de:cd:94:7e:58:a9:0c:7a:cb:b5:aa:f4:2c:d1:fa:0a:
62:cd:9e:8d:d3:9b:86:97:f0:80:8a:e7:6e:7a:18:41:c7:2e:
e3:2a:c4:58:c3:65:2e:71:2d:03:f3:2d:9c:5b:6f:42:72:c4:
58:fb:f6:5a:93:b8:73:4c:a5:7e:35:fb:79:fb:5b:21:c5:67:
2c:12:41:20:8a:42:0b:e1:08:2e:37:0d:6f:ac:e4:a4:f0:73:
ac:15:04:03:49:6c:dd:5d:4b:4f:8a:eb:1c:70:3d:67:59:40:
a5:dc:83:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:00:02 2025 by rpki-client