Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/W9Rzl_nUV272KaDktFtANt2Hh1M.roa
File: W9Rzl_nUV272KaDktFtANt2Hh1M.roa (raw, json)
Hash identifier: XCl3VwBPXxJZecL2Zisp9JBTAzAfVDAhGmJWIpmu+3k=
Subject key identifier: 5B:D4:73:97:F9:D4:57:6E:F6:29:A0:E4:B4:5B:40:36:DD:87:87:53
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0196E76EA5D72B409442D56EBBAD91143CDC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/W9Rzl_nUV272KaDktFtANt2Hh1M.roa
Signing time: Mon 19 May 2025 07:25:10 +0000
ROA not before: Mon 19 May 2025 07:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 192.124.173.0/24 maxlen: 24
195.58.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:6e:a5:d7:2b:40:94:42:d5:6e:bb:ad:91:14:3c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 19 07:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bd47397f9d4576ef629a0e4b45b4036dd878753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:92:65:d0:1b:0a:b2:d2:4d:22:4c:06:56:
62:32:a6:12:1d:f3:d2:6f:94:c9:eb:75:58:8b:3c:
5a:ee:55:16:cf:c3:51:af:eb:2e:f3:53:45:46:ce:
d1:3f:ef:c3:13:fc:76:25:c7:24:82:87:7b:d3:da:
9b:64:bb:dc:89:6e:da:14:04:60:cb:d3:35:c4:bc:
73:aa:91:f8:81:9b:ce:2c:68:95:27:3a:fa:2f:78:
32:d7:93:b8:01:a6:bf:05:d1:f2:53:44:34:be:67:
b1:d3:85:c2:df:6f:62:7b:25:f9:9b:28:d9:62:c5:
b1:9f:a4:15:27:75:f8:fa:a9:ef:a3:e7:d3:1e:16:
21:93:69:2f:8d:5b:6b:37:85:a1:d5:b9:b7:d7:23:
51:c8:06:0d:3a:4e:14:71:1e:a9:50:a9:c0:eb:9b:
2f:fc:4e:a6:d6:1a:58:a0:42:a2:c1:1e:77:05:f3:
1b:93:4b:a6:e8:5f:3b:8a:ee:ad:79:bf:88:bc:bc:
5a:b1:c2:62:3c:d9:57:07:0e:b8:51:46:96:82:ad:
45:a7:7d:1a:38:ad:3b:be:14:de:b3:fc:26:e4:d9:
67:c1:1f:42:cc:49:b2:d5:0c:54:8c:fb:c4:14:78:
04:87:67:aa:0b:be:96:86:b9:d7:84:a6:ae:f5:4f:
a5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D4:73:97:F9:D4:57:6E:F6:29:A0:E4:B4:5B:40:36:DD:87:87:53
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/W9Rzl_nUV272KaDktFtANt2Hh1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.173.0/24
195.58.57.0/24
Signature Algorithm: sha256WithRSAEncryption
10:86:9a:ab:b2:47:51:a5:59:ef:4f:9a:f1:1c:25:fc:a3:f8:
22:5a:d7:7e:3f:66:65:db:f3:b5:55:e0:6c:dd:4f:26:5b:45:
d9:47:b1:8f:ee:f1:5e:4b:a2:a4:e6:b2:2d:dc:7b:6a:e4:4a:
be:f3:ba:1e:9b:da:99:07:b4:59:36:f4:fd:e7:08:f6:3e:af:
61:4c:55:32:0f:cd:fc:f5:74:26:e5:2e:98:89:ce:07:fa:ae:
95:34:90:40:d7:fa:e0:12:24:5a:86:27:02:71:c3:c4:3c:c2:
33:1b:53:66:d9:d7:9b:de:22:9f:10:72:02:7a:f0:44:14:e7:
c2:86:2a:50:d2:19:24:0b:86:3a:cc:c2:92:e9:e1:f2:c7:63:
44:13:73:1b:a7:69:16:5c:ad:44:cc:6d:9e:7b:8b:ba:72:91:
37:ff:5d:26:94:b9:0b:60:65:74:c8:2d:3c:89:0a:03:08:a4:
e6:ba:fa:ca:b7:86:9d:1a:16:48:08:d8:4c:6d:1b:bf:ca:89:
34:6f:b6:e1:84:86:66:06:5b:a3:89:2c:e8:9c:5d:38:8e:cd:
b5:8c:64:da:38:cd:a6:d7:1a:45:b0:6b:91:65:fc:18:60:28:
c0:13:33:8e:ff:e4:56:59:7c:13:3b:eb:c6:84:ab:87:49:e1:
01:fb:c2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:37:09 2025 by rpki-client