Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E_4uqxlUSKVOao7dEi8kN_XuK90.roa
File: E_4uqxlUSKVOao7dEi8kN_XuK90.roa (raw, json)
Hash identifier: 1Lat24C92Twn3R4vIaoduoELgX0KPsDBFgBW/oE27us=
Subject key identifier: 13:FE:2E:AB:19:54:48:A5:4E:6A:8E:DD:12:2F:24:37:F5:EE:2B:DD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0197286A75FA5A9D771190615787AC5216E3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E_4uqxlUSKVOao7dEi8kN_XuK90.roa
Signing time: Sat 31 May 2025 22:15:55 +0000
ROA not before: Sat 31 May 2025 22:15:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214556
IP address blocks: 77.90.27.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:28:6a:75:fa:5a:9d:77:11:90:61:57:87:ac:52:16:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 31 22:15:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13fe2eab195448a54e6a8edd122f2437f5ee2bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:12:14:26:00:2f:c5:18:48:9d:2d:21:2e:9c:
b8:d7:fb:b4:b8:a8:a7:99:04:0c:40:5a:e9:80:72:
0a:ff:a1:a6:4b:b8:c6:a3:f5:d9:c9:36:6f:6e:8b:
ae:84:6c:f1:47:03:b3:50:14:49:15:1a:97:1f:23:
a9:9b:8f:fe:ff:7d:3d:55:00:da:1b:c3:f1:37:0e:
9b:2d:67:f8:62:85:cc:97:d8:c9:59:03:ac:18:58:
44:6d:b6:d6:be:c7:87:0b:fe:62:38:13:f4:80:3c:
89:55:4f:c3:b6:d6:89:e7:68:bb:af:84:b5:64:9b:
e0:87:1d:75:ef:fc:9e:c9:a9:d9:fd:52:9d:ae:71:
c0:ca:30:00:19:95:c5:54:44:53:f1:98:0b:73:63:
1c:3b:b2:16:79:5b:6d:e3:fd:04:74:fe:a9:99:33:
eb:c2:5f:5f:b6:98:5f:76:78:76:c1:bc:e0:9f:8c:
de:e3:9e:9c:56:0a:63:1a:ba:14:15:16:d8:07:05:
02:02:68:1d:b0:4d:5b:82:c1:97:74:68:ba:11:72:
39:a6:11:cb:4b:b2:66:f5:c3:04:2b:e3:66:ac:04:
7d:ad:13:11:3b:e1:ff:fb:bf:27:ad:ec:8b:03:ae:
e1:39:f9:c7:7b:6c:c6:34:55:2c:75:24:fa:61:c9:
27:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FE:2E:AB:19:54:48:A5:4E:6A:8E:DD:12:2F:24:37:F5:EE:2B:DD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E_4uqxlUSKVOao7dEi8kN_XuK90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.27.0/24
94.249.215.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1c:93:08:08:11:38:64:23:4f:a8:10:ce:0a:6d:a2:53:d1:
83:44:01:1c:cc:0b:06:2b:66:9c:0c:f4:bb:99:4d:41:8d:1e:
52:ac:ee:9b:17:ba:e3:c6:56:23:83:06:45:54:47:9d:d2:a6:
61:c9:da:f3:35:de:00:74:28:e1:96:e6:35:21:0b:f6:e0:87:
54:ea:86:45:b8:4c:1d:54:43:c6:a4:db:21:00:d1:eb:76:40:
28:9c:b5:5f:68:59:44:94:9e:32:ba:ad:1c:e6:30:b7:67:cf:
4f:01:3d:3f:df:98:b3:5b:d1:bc:56:43:10:47:a3:57:91:30:
28:a6:8a:90:d2:5d:2a:7d:30:b8:a8:d9:e3:25:7b:00:e3:65:
f6:b4:9c:90:76:5e:d2:e5:2b:9b:a3:6e:f2:fc:62:8b:1d:af:
63:4d:86:93:65:d8:b8:11:a2:15:ee:ad:9c:94:7f:2c:2d:4b:
8e:05:1b:e5:f0:25:00:45:19:43:39:a7:13:ea:aa:3c:63:2e:
10:cc:5c:c3:5b:72:5c:3f:b7:9e:72:ac:91:65:e9:0e:18:8f:
2a:2f:09:f9:48:e7:b6:19:08:d7:96:1e:a0:6f:e2:b9:b7:0e:
8d:ec:43:53:98:34:52:ec:71:a3:b6:da:a5:d3:88:c0:f9:92:
9d:be:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:34:52 2025 by rpki-client