Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/I39FUsGFsmr9SUUDo-UEb6qOXN4.roa
File: I39FUsGFsmr9SUUDo-UEb6qOXN4.roa (raw, json)
Hash identifier: u4zl9OvdC2vc0LELt8+dwM6CALTiKOkmaqaJx/FGR/8=
Subject key identifier: 23:7F:45:52:C1:85:B2:6A:FD:49:45:03:A3:E5:04:6F:AA:8E:5C:DE
Certificate issuer: /CN=4eec68f7514db22173650088294b0143b377fc23
Certificate serial: 01980D5BFB73A843BC901E27685A38CE0E02
Authority key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/I39FUsGFsmr9SUUDo-UEb6qOXN4.roa
Signing time: Tue 15 Jul 2025 09:13:08 +0000
ROA not before: Tue 15 Jul 2025 09:13:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49384
IP address blocks: 193.169.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:5b:fb:73:a8:43:bc:90:1e:27:68:5a:38:ce:0e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eec68f7514db22173650088294b0143b377fc23
Validity
Not Before: Jul 15 09:13:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=237f4552c185b26afd494503a3e5046faa8e5cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:2c:7b:8b:f5:2f:4e:8d:67:86:d4:57:15:
86:6f:d7:8a:50:5a:31:40:b3:7b:de:b7:7a:54:f5:
f0:05:b1:ab:c0:08:59:c0:29:56:0a:08:5d:6c:ff:
88:da:3d:8c:a7:db:25:34:c7:06:12:5c:46:30:80:
ff:96:4e:1e:23:ef:16:7b:8a:a1:eb:2f:98:c4:8b:
b1:26:02:4c:88:47:63:ca:b5:eb:94:d1:f2:97:00:
63:c3:a9:9a:f5:8c:72:ac:ab:1d:70:58:a9:16:35:
ac:c3:73:08:3c:f3:dd:2e:bc:36:23:ea:9f:ae:d0:
3c:03:9e:cb:36:33:43:e7:f0:a1:07:0d:c8:37:b0:
df:d9:c7:9e:8e:7a:33:b3:7c:f6:49:c9:9b:4f:ee:
ac:10:99:02:f1:e8:28:33:0b:01:ca:fe:31:63:0c:
50:5c:f3:6d:2f:8d:c1:5b:ba:7b:1c:55:d7:da:a5:
48:37:4d:00:e7:fa:16:75:21:1d:77:f8:8c:df:61:
41:84:ac:a2:79:6b:37:4e:9b:5d:9d:ed:86:5e:9c:
eb:15:a6:2a:2d:8a:67:68:1c:f6:1d:21:5f:86:04:
2e:0c:77:e4:db:ff:62:af:72:3d:6b:ad:e0:a6:3c:
3c:01:0b:06:7b:be:1b:7e:a3:a5:2a:db:e4:bc:bf:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7F:45:52:C1:85:B2:6A:FD:49:45:03:A3:E5:04:6F:AA:8E:5C:DE
X509v3 Authority Key Identifier:
keyid:4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/I39FUsGFsmr9SUUDo-UEb6qOXN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.142.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a8:1e:74:3f:b7:0c:9e:44:52:2f:21:01:54:11:02:9c:3b:
cf:14:ec:a2:a5:1e:28:a1:45:62:ca:66:73:cb:96:f5:f1:79:
20:f9:a4:c1:2c:05:32:f1:b4:17:5d:64:ff:da:59:1f:59:27:
8d:0e:9c:b2:f3:9a:02:ac:72:cc:f2:1d:62:a8:f8:ec:f6:24:
7c:dd:59:67:47:5a:b6:e6:64:e5:db:35:60:4e:b2:47:b5:fa:
74:96:73:21:26:b8:99:bb:68:8a:a6:bd:fd:67:05:53:d4:29:
4a:e3:b1:83:90:21:ad:68:6a:27:f8:03:22:3c:9d:5b:73:4e:
22:31:6b:cc:b4:74:36:4a:29:09:8a:32:d9:6d:ea:b0:5e:6e:
84:a2:8c:d9:d7:ba:3c:e0:98:55:52:c4:4d:84:82:79:c7:5c:
ca:8f:74:5f:2f:8d:54:c5:73:62:1a:63:96:72:d2:71:ef:7b:
aa:0e:ca:fb:40:b5:20:78:90:54:a8:98:56:31:bf:60:f0:6b:
4d:c8:df:e1:d9:50:db:62:6a:9d:87:62:e6:80:49:d0:1f:07:
47:af:17:ab:a3:00:63:b7:dc:bb:64:a4:ee:24:97:ad:fd:7c:
80:35:af:e9:79:f5:e9:9c:c8:3a:0c:94:43:a6:76:78:0a:dd:
5b:64:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 15:09:06 2025 by rpki-client