Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/p03EoH5XFva0OIfQnxqffNm4ZvE.roa
File: p03EoH5XFva0OIfQnxqffNm4ZvE.roa (raw, json)
Hash identifier: Wew8is0Ow617QiWMc1vuUJjZYXt68/dM84EY8eQITFE=
Subject key identifier: A7:4D:C4:A0:7E:57:16:F6:B4:38:87:D0:9F:1A:9F:7C:D9:B8:66:F1
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 0196F8B2946A2382BFBA81BEF9314924C419
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/p03EoH5XFva0OIfQnxqffNm4ZvE.roa
Signing time: Thu 22 May 2025 15:52:54 +0000
ROA not before: Thu 22 May 2025 15:52:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210756
IP address blocks: 185.109.28.0/24 maxlen: 24
185.109.29.0/24 maxlen: 24
185.109.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f8:b2:94:6a:23:82:bf:ba:81:be:f9:31:49:24:c4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: May 22 15:52:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a74dc4a07e5716f6b43887d09f1a9f7cd9b866f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:7b:f5:47:f8:de:24:42:04:cb:0a:7e:f2:
ae:40:c7:eb:44:a6:90:c0:44:ba:15:09:1b:81:ad:
33:d0:fd:2c:be:f0:99:2b:51:c2:39:16:83:44:4c:
b9:62:3b:74:3d:43:c4:e6:41:86:bc:dc:0a:81:b5:
41:74:1a:4e:e1:0e:3d:6b:b9:a2:42:de:4e:2f:03:
ac:5f:c9:c4:eb:a6:4a:82:43:c8:26:f0:60:26:53:
ff:a2:6e:56:ab:75:51:70:e5:b2:94:97:d2:b9:97:
ba:6c:31:e5:1f:89:de:f7:df:4c:dd:d3:45:76:6a:
8e:66:a5:c9:87:11:b0:4a:e4:12:e2:2a:af:a6:34:
ce:1e:95:53:94:20:40:54:a4:75:9a:f1:9e:6b:31:
20:1e:b2:a4:2b:6f:8a:25:7e:16:83:7a:92:e3:45:
40:0d:21:f6:c2:a1:77:8c:d0:1d:57:f8:e2:24:c4:
0a:fc:5a:80:39:0e:60:36:4b:7b:ab:e7:f9:b2:a8:
48:12:2f:dc:ef:09:12:9b:3d:81:01:6f:3c:43:46:
cb:13:3f:f5:ad:7a:a5:58:ec:c6:1c:47:ae:df:74:
a1:05:53:07:90:02:f2:2a:ab:9b:90:3c:1f:87:f6:
db:36:32:ff:f7:4d:74:97:b6:bd:d3:a3:66:3a:fd:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4D:C4:A0:7E:57:16:F6:B4:38:87:D0:9F:1A:9F:7C:D9:B8:66:F1
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/p03EoH5XFva0OIfQnxqffNm4ZvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.28.0-185.109.30.255
Signature Algorithm: sha256WithRSAEncryption
bb:2e:75:ca:21:7e:4c:0b:13:8c:76:84:da:88:f5:f6:1a:bc:
ab:ed:39:8c:84:76:eb:8a:bf:3f:35:f3:68:73:c8:ad:29:26:
6f:a6:5d:d1:9b:8a:7c:cf:c4:b7:94:fb:b9:4d:c7:6a:b5:16:
13:2c:97:8a:92:59:29:19:88:9c:f5:3c:a4:45:3d:f9:d6:73:
49:f4:fc:c5:dd:82:48:83:8e:47:6e:ff:47:73:65:9f:32:e2:
25:83:2c:ff:91:6e:5d:17:43:ab:7a:56:0e:7e:2a:7f:fc:8d:
dc:01:bb:3b:81:b2:43:14:33:a1:4f:e1:e5:73:bd:90:1f:ac:
ff:34:2a:37:32:ff:2d:2a:15:00:a7:6f:af:35:6d:4a:fe:bc:
7f:97:de:4b:87:cc:e3:ba:a1:ad:b4:ea:c2:ef:5e:c1:2b:7e:
2b:4e:9f:12:cb:d9:82:53:b7:43:d2:3d:b8:0a:03:2d:c0:53:
ab:0e:e5:b0:2a:6f:5f:4d:58:10:01:04:38:4e:12:1e:da:b9:
60:9a:f2:b8:eb:c4:37:4e:24:03:c7:24:0c:f6:ee:31:df:9d:
bc:71:b6:f6:81:76:36:65:f5:af:57:0c:d3:ef:e5:bd:83:f0:
a4:4b:c1:86:d5:05:37:e4:38:26:80:42:60:e8:80:de:89:e0:
0a:f7:f8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:16:10 2025 by rpki-client