Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3DnijcOk4pRZV3A2b1gbs49cfbg.roa
File: 3DnijcOk4pRZV3A2b1gbs49cfbg.roa (raw, json)
Hash identifier: /4DH6F1yjsvfJw0qQTST/uaPxJ3FgZI2ew+v+PtsFEk=
Subject key identifier: DC:39:E2:8D:C3:A4:E2:94:59:57:70:36:6F:58:1B:B3:8F:5C:7D:B8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0197E98DB9C227AE79F01E7F39FB6F3AEED6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3DnijcOk4pRZV3A2b1gbs49cfbg.roa
Signing time: Tue 08 Jul 2025 10:21:08 +0000
ROA not before: Tue 08 Jul 2025 10:21:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214677
IP address blocks: 194.5.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:8d:b9:c2:27:ae:79:f0:1e:7f:39:fb:6f:3a:ee:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 8 10:21:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc39e28dc3a4e294595770366f581bb38f5c7db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:d8:32:35:21:e2:db:ef:ab:b3:48:79:be:
7a:1f:df:b3:aa:94:ab:a9:6e:ef:59:98:ef:6f:f0:
cb:10:e8:56:aa:ee:11:1d:b7:80:9b:cc:c1:fc:12:
fe:2f:99:0f:16:3f:75:da:6f:c5:64:04:5c:2b:a0:
08:6d:79:ee:54:c6:a0:54:88:0c:5a:a7:ea:b9:b0:
96:3f:f2:41:d5:22:75:fb:a7:18:84:aa:70:2d:18:
63:c6:1d:f8:b5:25:06:91:04:41:7b:43:ce:f0:38:
3b:99:1d:94:a0:51:83:91:09:5b:b4:1e:66:d6:74:
9a:07:4b:11:f7:43:fd:b3:31:11:51:e0:71:a2:c1:
67:ab:c0:34:11:9a:0e:15:8d:d9:d9:f2:b8:95:cc:
28:73:41:54:bf:e0:d7:d6:18:ee:37:f0:68:b6:37:
ca:1c:f6:6a:84:1c:65:95:3e:b2:ec:03:51:05:de:
aa:bb:7f:b4:f3:26:7b:83:a6:7a:8c:6f:16:3b:a2:
e0:f6:83:e6:82:c0:de:b4:53:1b:37:80:91:ad:ff:
2b:f4:bc:03:bd:f5:c3:a8:40:4f:89:d4:b4:5c:ba:
d6:e1:a1:b0:2a:46:29:3e:99:ce:7b:b9:19:20:fe:
1b:dd:cc:ba:a4:20:9f:7e:f4:04:5a:98:53:5c:ae:
37:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:39:E2:8D:C3:A4:E2:94:59:57:70:36:6F:58:1B:B3:8F:5C:7D:B8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3DnijcOk4pRZV3A2b1gbs49cfbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:99:2f:d6:c3:22:8d:9b:db:76:31:43:97:59:b7:18:90:0d:
e1:7b:8f:2f:91:5e:7f:1b:12:d0:55:c0:75:d0:b5:95:bc:35:
63:5e:8f:ac:75:4d:51:af:e0:25:5b:41:58:ca:02:9b:a4:97:
35:5f:19:60:79:a5:04:4e:38:62:c9:0b:e4:5f:48:c6:a6:f5:
55:02:97:71:f9:ca:e1:be:64:7e:5c:26:67:91:44:c3:82:fd:
dc:33:dc:c3:0e:a2:1c:43:65:56:9d:ae:c9:ba:c9:45:ab:35:
f8:f7:43:55:28:87:74:b5:f3:90:16:68:3a:bb:ab:e6:b8:77:
a0:b9:40:26:b9:1c:0d:d4:1e:ee:8e:8b:29:f0:a1:b1:67:b4:
c5:a5:16:4e:f7:85:99:76:bd:08:f1:44:fe:7d:a5:6b:73:1d:
78:98:3b:09:ec:6a:e1:22:76:46:e0:62:d4:16:da:b9:48:22:
01:8c:07:e7:7a:df:ed:f2:5a:4f:bb:e6:a2:7f:29:f3:1d:68:
bc:3e:96:8a:95:9d:f8:e7:3b:c0:69:6a:9c:f6:49:7d:e9:ee:
e8:61:85:dd:45:b3:a3:ac:72:c5:b2:e5:e9:09:30:e7:9d:21:
ec:e8:05:b7:30:e7:58:af:ae:b2:0a:3b:0e:0c:d3:37:a8:64:
94:dc:ba:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:08:27 2025 by rpki-client