Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/3uPLM02UL2awUH-Kuoh6brdmF8Q.roa
File: 3uPLM02UL2awUH-Kuoh6brdmF8Q.roa (raw, json)
Hash identifier: 7YTaX8xKCH2MetKx49NBdkYFZn8uvSI3o4szPzVZP/w=
Subject key identifier: DE:E3:CB:33:4D:94:2F:66:B0:50:7F:8A:BA:88:7A:6E:B7:66:17:C4
Certificate issuer: /CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Certificate serial: 0196B480A0D7A5451B442C7DF2634EF6192E
Authority key identifier: 5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/3uPLM02UL2awUH-Kuoh6brdmF8Q.roa
Signing time: Fri 09 May 2025 10:04:10 +0000
ROA not before: Fri 09 May 2025 10:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56612
IP address blocks: 195.128.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:80:a0:d7:a5:45:1b:44:2c:7d:f2:63:4e:f6:19:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Validity
Not Before: May 9 10:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dee3cb334d942f66b0507f8aba887a6eb76617c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:b3:51:dc:6c:dd:dd:83:26:a2:3c:7d:73:
6f:8a:39:97:c2:52:02:16:52:f8:c6:6e:f1:b3:69:
7d:a4:49:78:ea:d7:e5:6a:7d:2a:0b:89:da:f1:b0:
b9:aa:2a:55:96:c6:31:4c:76:42:9a:44:18:b7:e4:
b4:d0:bd:df:a6:1a:8c:f0:d7:93:f7:4f:c5:c4:9c:
8c:61:3b:da:6c:98:13:bb:68:dc:66:c3:6e:35:d5:
95:60:2d:60:c8:79:26:30:f6:7f:30:b2:42:2b:7d:
1c:8c:f5:cf:5c:43:18:66:2a:4d:f8:50:4f:53:88:
df:12:4a:42:91:76:0a:59:9f:04:7d:92:2d:d0:5f:
33:67:dc:43:14:83:ee:ae:f1:16:74:99:9c:5d:fe:
ee:85:5b:e7:27:82:15:f6:1b:88:c3:e5:3c:bf:cb:
ea:ba:ee:34:cc:fe:94:3a:a1:59:9e:40:48:bf:22:
3f:52:d6:07:85:95:69:f7:ca:d9:84:89:63:93:b8:
b7:62:d4:81:6b:94:f6:e9:75:0d:02:59:db:48:b7:
62:71:40:2c:f1:f0:84:f4:77:4a:c1:1e:e0:ca:a9:
b7:ad:54:a7:70:e9:f1:46:70:c5:2d:8a:e9:12:04:
52:74:58:35:c3:f0:1e:14:ea:6c:e5:7c:8a:b4:ca:
e3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E3:CB:33:4D:94:2F:66:B0:50:7F:8A:BA:88:7A:6E:B7:66:17:C4
X509v3 Authority Key Identifier:
keyid:5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/3uPLM02UL2awUH-Kuoh6brdmF8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.150.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c3:48:67:ff:01:3e:08:2f:28:a2:81:7f:13:d1:1e:a5:35:
41:0f:c1:1f:d3:58:b6:5b:47:36:ae:0c:ea:c7:31:95:bf:7b:
2e:55:0c:07:02:1a:bb:b0:b0:6d:cd:9d:59:47:88:1d:6e:4c:
25:bf:a1:c4:20:17:89:7a:60:e6:3f:16:77:c9:e7:75:13:15:
39:16:31:6c:82:4c:fa:b7:89:5f:ed:83:7b:cf:21:45:e9:f1:
f5:82:64:43:44:47:f2:62:ae:ac:d3:7a:17:4a:17:6a:49:f0:
93:83:d6:b0:e0:7c:62:bc:10:49:7b:9f:a3:81:76:16:fe:6d:
26:de:22:36:9b:9a:e8:0b:3b:e1:52:70:0a:b4:0f:f5:c8:9c:
87:3f:e7:22:10:cb:04:ac:df:a0:b3:68:45:c5:81:53:2e:d6:
9f:e2:40:25:20:95:e2:fe:50:2f:87:f4:b9:26:3a:35:4b:e3:
d9:ec:3e:43:40:63:b0:0b:8d:16:9a:dd:f8:cf:dc:3d:23:7f:
fe:ed:e3:a2:8b:76:a9:ae:26:cd:11:bc:67:10:37:c8:ef:76:
56:c6:11:64:95:f4:60:ef:72:30:69:17:09:73:56:06:80:c4:
fe:26:7f:b1:15:a5:31:21:81:7b:63:47:fd:e8:9a:ad:a2:d2:
ef:8b:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:07:17 2025 by rpki-client