Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/4XfsdEdHX1kDpX0ZLU7CoiedwkE.roa
File: 4XfsdEdHX1kDpX0ZLU7CoiedwkE.roa (raw, json)
Hash identifier: E0vTS5o3+h35/sl1eIPy8wBqph3C9G+ZoO/00bLGlrw=
Subject key identifier: E1:77:EC:74:47:47:5F:59:03:A5:7D:19:2D:4E:C2:A2:27:9D:C2:41
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 019710BCC07828E7622B7936BC576468B9B7
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/4XfsdEdHX1kDpX0ZLU7CoiedwkE.roa
Signing time: Tue 27 May 2025 07:54:54 +0000
ROA not before: Tue 27 May 2025 07:54:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56400
IP address blocks: 91.225.160.0/22 maxlen: 22
91.225.160.0/23 maxlen: 23
91.225.160.0/24 maxlen: 24
91.225.162.0/23 maxlen: 23
91.225.162.0/24 maxlen: 24
91.225.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:bc:c0:78:28:e7:62:2b:79:36:bc:57:64:68:b9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: May 27 07:54:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e177ec7447475f5903a57d192d4ec2a2279dc241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:da:61:9c:03:74:9d:b3:1e:5e:e8:92:3f:90:
97:a9:a6:28:27:64:8e:69:36:09:69:4f:49:ca:63:
d7:3b:34:6b:39:b0:95:c1:4f:dc:10:c0:32:fe:d4:
6e:a5:75:95:37:10:3d:69:84:b5:fb:1b:c7:66:fd:
d7:47:36:b0:95:5a:55:fd:70:c8:39:02:fc:ef:75:
75:9e:ad:60:2d:22:de:0c:76:a6:54:ed:3a:bb:c4:
0c:89:9a:08:c0:0e:08:67:14:d4:15:a7:05:aa:88:
c4:ac:11:3c:af:15:fc:1e:44:95:11:43:d4:6c:cf:
97:ca:bd:bb:01:20:dd:a9:9a:ad:69:a3:99:22:3c:
fa:19:82:fb:e6:30:5d:41:46:e5:b7:d0:e8:b9:53:
4d:91:13:06:22:86:85:cc:f3:69:ed:ba:1a:e4:1e:
6c:8e:5f:a6:71:c2:e2:b9:9f:7b:ec:91:ab:fd:c2:
a6:19:2b:86:b2:ce:d5:b1:29:f2:e9:56:87:0c:7a:
4b:81:e6:ed:bd:cc:34:07:01:ca:14:f9:15:6a:dd:
30:99:69:f6:cc:27:f2:b1:3b:27:aa:84:64:b1:38:
bb:6f:71:93:c1:7f:da:53:db:bf:3f:04:39:ae:ac:
e7:10:03:dc:dd:89:4d:0e:aa:d0:ad:51:b5:ec:99:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:77:EC:74:47:47:5F:59:03:A5:7D:19:2D:4E:C2:A2:27:9D:C2:41
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/4XfsdEdHX1kDpX0ZLU7CoiedwkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.160.0/22
Signature Algorithm: sha256WithRSAEncryption
47:df:93:e3:54:01:10:1f:6b:75:db:b0:5c:0e:fd:41:4e:71:
e0:c6:5b:20:72:b8:54:63:58:c4:37:33:5c:4a:39:86:43:5e:
f4:6a:c3:30:32:df:be:04:67:f6:9b:e8:6c:a9:53:9f:b7:f8:
97:6c:e9:ec:12:b3:b6:33:5a:bf:5b:08:bb:a9:4f:4d:14:d4:
97:92:d9:05:74:52:a2:74:c3:00:e9:80:9d:31:3e:ee:53:ca:
84:02:82:cf:7f:a6:d8:ca:11:31:5a:3e:1d:3b:08:3e:25:7f:
5f:6b:de:ab:03:ee:91:f1:a8:a1:f3:cf:41:1d:08:cf:16:eb:
3c:1b:1c:50:87:49:2f:c8:16:5a:1c:6d:4b:8d:73:c8:4f:cb:
69:ef:25:aa:0c:6a:69:fe:43:b2:3e:6f:f3:96:60:bf:05:f1:
28:97:dc:e1:28:b1:68:52:7d:3b:85:7f:b4:65:ab:66:03:89:
86:28:f2:c7:40:04:67:e0:4a:71:7b:4d:39:ed:a8:73:6a:70:
1c:55:3b:67:2f:cd:ac:90:ce:31:48:ff:f6:3a:46:94:f5:62:
66:78:65:2e:4c:c1:f5:24:a6:bb:94:92:55:21:07:58:16:c6:
64:e6:96:be:11:95:7a:e3:e2:e7:e3:4f:c2:66:1d:d8:9f:7e:
94:a5:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:20:03 2025 by rpki-client