Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/1tUtdPntOZo4oZY0gj-5-iL3XLM.roa
File: 1tUtdPntOZo4oZY0gj-5-iL3XLM.roa (raw, json)
Hash identifier: qzUzuRDUtz2FZx8A/P+rSyUpdTrCQoQOZBqqm3OS2Vc=
Subject key identifier: D6:D5:2D:74:F9:ED:39:9A:38:A1:96:34:82:3F:B9:FA:22:F7:5C:B3
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 0197DF577DBA7F3814F8CCE3DCB518198D3C
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/1tUtdPntOZo4oZY0gj-5-iL3XLM.roa
Signing time: Sun 06 Jul 2025 10:45:42 +0000
ROA not before: Sun 06 Jul 2025 10:45:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24703
IP address blocks: 91.210.188.0/24 maxlen: 24
91.210.189.0/24 maxlen: 24
91.210.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:df:57:7d:ba:7f:38:14:f8:cc:e3:dc:b5:18:19:8d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Jul 6 10:45:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6d52d74f9ed399a38a19634823fb9fa22f75cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:78:ed:0b:fd:43:f2:62:8f:01:04:88:03:
f0:e8:72:2d:68:d3:70:7c:bb:03:83:69:10:b8:db:
59:71:e7:84:08:5e:5a:85:5b:da:fc:f0:e9:1a:1d:
62:91:3e:48:c8:de:07:1b:a5:b8:c3:05:c7:05:f4:
eb:e1:39:46:8c:44:62:29:44:a0:f6:4a:3a:52:68:
89:11:59:89:22:ca:dd:1d:d6:07:9b:50:7d:ad:d0:
4a:35:db:a5:78:ca:5c:f9:ff:6a:58:56:1a:d0:c4:
56:45:f2:8a:c0:48:ce:19:f5:5b:fe:66:5d:2f:23:
ef:9f:29:b0:74:28:3e:80:fc:3e:cd:20:64:0f:52:
7e:90:c5:ac:af:21:83:85:fb:47:06:71:73:f3:21:
4c:85:01:65:47:46:0c:67:86:5b:18:ae:a2:05:97:
f7:64:37:72:fb:48:0f:bc:30:f3:41:cf:95:b5:2f:
4c:5d:db:10:01:63:23:f5:e0:70:9e:c7:9f:a4:fb:
a3:98:d7:84:5f:62:3d:68:b3:4b:3b:14:4b:4e:9c:
5a:b9:e4:a4:41:6e:33:a7:f4:ea:1a:7b:0f:6d:d4:
37:b5:8f:a0:9e:31:a9:05:bd:68:36:21:1c:d0:2d:
2e:9d:ee:ec:d5:d2:73:e0:10:b5:49:4a:ec:c3:cd:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D5:2D:74:F9:ED:39:9A:38:A1:96:34:82:3F:B9:FA:22:F7:5C:B3
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/1tUtdPntOZo4oZY0gj-5-iL3XLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.188.0-91.210.190.255
Signature Algorithm: sha256WithRSAEncryption
65:26:33:1d:e4:dc:c9:a6:86:c8:22:ba:10:8e:61:7d:78:79:
7e:2a:de:69:d7:15:1c:cb:86:6d:1d:a7:72:6a:09:04:53:db:
2a:5c:35:ed:57:fd:12:26:9b:4d:85:2e:70:42:ac:b6:86:d1:
f2:3b:ea:b5:48:5b:f8:fa:6a:d8:73:0a:fd:44:4f:9a:21:90:
cb:af:52:bf:d5:f3:6d:6f:9f:b3:fe:cb:5f:d9:7d:4f:96:dd:
c6:93:cd:38:f4:b8:e1:ce:6a:6c:fc:eb:82:7e:38:04:7a:66:
04:3b:9f:48:3f:99:33:a8:0d:c5:fc:e2:46:fa:17:d3:33:4d:
47:08:73:1e:23:b5:e2:20:3d:9e:f4:b2:fc:7f:80:ff:8e:02:
2a:d9:b8:e4:7e:99:01:86:63:4e:d6:c9:81:6d:05:4b:88:b5:
d5:50:b1:bc:4d:4c:a2:ac:0d:74:b6:a2:9c:df:16:66:a7:f7:
ec:c8:62:4d:79:6f:36:25:e2:08:ab:08:83:78:8a:a9:d6:93:
08:9a:21:25:20:24:c2:83:65:54:de:3e:f1:a3:25:83:f9:3c:
02:42:a6:f6:5b:f2:58:e1:35:1c:4e:0d:bc:a2:da:bd:e6:86:
77:c6:74:5f:44:87:e0:e4:ed:91:03:ac:60:fa:17:4d:c0:ff:
65:dd:19:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:03 2025 by rpki-client