Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3KAmJzQWnEQPpYgmwNanyPKar8E.roa
File: 3KAmJzQWnEQPpYgmwNanyPKar8E.roa (raw, json)
Hash identifier: MG4fXZ84psZXGtKz9u0cSAly4kc5KfJdeNHPqNEkLVY=
Subject key identifier: DC:A0:26:27:34:16:9C:44:0F:A5:88:26:C0:D6:A7:C8:F2:9A:AF:C1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0197E59343E54F20281A0FE3B28B1DC05C76
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3KAmJzQWnEQPpYgmwNanyPKar8E.roa
Signing time: Mon 07 Jul 2025 15:48:42 +0000
ROA not before: Mon 07 Jul 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214208
IP address blocks: 213.218.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:93:43:e5:4f:20:28:1a:0f:e3:b2:8b:1d:c0:5c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 7 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dca0262734169c440fa58826c0d6a7c8f29aafc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:50:4e:78:85:1c:32:96:ad:84:16:87:2a:
d0:c4:44:b7:1e:a6:09:9c:a2:7f:10:7d:6f:90:07:
69:64:55:36:31:94:b1:29:b1:61:4a:d5:70:b0:3c:
5e:c7:90:22:32:21:00:b9:68:c5:bb:b0:b5:28:aa:
64:fb:d0:00:ed:64:d0:9f:c8:ad:f7:01:57:94:89:
d0:77:d9:a0:fd:96:e3:98:c2:17:65:3f:1e:90:39:
fd:c0:67:91:90:2c:08:9c:01:de:05:1b:37:9b:d4:
ba:dd:55:d7:a8:e8:ae:bb:20:ed:a5:99:22:df:b6:
5f:7d:10:8a:3f:ba:f5:99:d5:90:8c:6d:94:4d:6a:
13:15:3a:3b:71:74:08:8f:da:a2:d2:7f:51:dc:0d:
2b:44:e6:cb:52:8e:2c:68:54:36:a4:3d:86:45:41:
05:d3:07:8d:a5:3e:91:b2:78:95:2c:e5:85:53:bd:
59:35:d2:4d:d6:49:f2:29:b0:68:d4:00:c2:8e:dd:
97:a2:43:4c:de:fe:eb:42:ae:25:eb:79:f1:7a:96:
cb:1f:21:87:56:79:94:8d:b9:00:b6:14:b1:91:73:
76:55:2b:8b:be:89:da:21:13:62:d3:08:b5:f2:6b:
30:04:24:1d:c7:c4:7f:ef:12:b8:87:86:aa:fe:78:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A0:26:27:34:16:9C:44:0F:A5:88:26:C0:D6:A7:C8:F2:9A:AF:C1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3KAmJzQWnEQPpYgmwNanyPKar8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.215.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d6:45:a4:07:e1:dd:e2:1d:19:e7:2b:98:4a:26:98:f6:53:
67:90:25:8d:98:2d:a5:63:06:8d:26:ec:ec:8a:37:c0:b1:ad:
52:bf:5e:cb:8a:18:87:bc:66:29:50:68:04:6c:0f:0c:c3:2e:
b4:55:1b:9e:9e:2f:19:d2:28:5d:32:85:fe:94:9c:1b:76:8d:
d7:d7:83:9d:2b:c3:e2:bd:7a:c6:a3:b4:d8:15:52:7c:80:f4:
e9:d2:59:26:aa:db:77:6f:ca:d4:1a:69:e7:44:83:62:56:ad:
f9:75:bc:09:ef:56:09:94:08:ca:52:97:18:e5:3c:41:2f:32:
17:4d:31:48:ea:a3:04:3a:ab:29:d0:7e:86:d0:30:ef:6c:82:
a9:0c:65:73:3f:66:fb:cf:b8:9b:d8:69:10:3f:30:98:e7:ed:
2f:1c:af:d1:e2:48:85:85:dd:c2:80:e4:48:80:b9:3b:3f:e6:
60:85:8b:6c:98:4e:7f:49:d3:1a:fa:40:b2:b3:b8:b4:a2:54:
45:8b:a5:fd:a7:6a:80:87:75:4a:95:12:53:3a:47:7d:40:eb:
a8:ff:ba:af:84:f1:a5:bf:85:7a:6d:14:9b:33:a5:ec:19:3e:
41:13:a3:68:7a:7b:45:6b:ec:67:06:64:39:63:b6:0a:19:5a:
70:8a:e3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 04:05:17 2025 by rpki-client