Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/N4_GCAOqqXyy_yCv67SR1l-BFxw.roa
File: N4_GCAOqqXyy_yCv67SR1l-BFxw.roa (raw, json)
Hash identifier: 4FNVNYJc+7CGziaOSacYxtJ+Aw//xMuJdHGZSFJe1iM=
Subject key identifier: 37:8F:C6:08:03:AA:A9:7C:B2:FF:20:AF:EB:B4:91:D6:5F:81:17:1C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01971E7E5F4EEEE52FFA095AC05D67FE1B74
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/N4_GCAOqqXyy_yCv67SR1l-BFxw.roa
Signing time: Fri 30 May 2025 00:01:27 +0000
ROA not before: Fri 30 May 2025 00:01:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18526
IP address blocks: 94.103.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1e:7e:5f:4e:ee:e5:2f:fa:09:5a:c0:5d:67:fe:1b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 30 00:01:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=378fc60803aaa97cb2ff20afebb491d65f81171c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:b4:58:5c:91:e7:61:8c:39:4d:f3:f0:ff:
93:1b:8c:a2:2b:c0:2b:72:c3:5a:b9:b3:9f:77:1e:
67:b6:fe:a4:9e:33:f1:83:71:07:d1:c1:45:62:6f:
db:3b:19:9b:dc:f7:d8:3a:ea:97:bb:ac:82:f8:c6:
4a:75:34:e3:26:5d:84:7b:a3:29:4d:89:d6:69:f6:
65:c1:56:3b:d5:01:81:3d:4e:e6:67:60:1a:df:f8:
9c:f2:6e:b5:33:c6:07:43:5e:5c:7d:91:a0:8f:27:
4d:f4:88:81:80:b5:16:66:46:f1:1e:f5:74:c4:93:
a9:1c:38:ad:6d:46:61:83:e8:2e:e0:27:e2:82:ac:
fb:cb:59:96:41:d2:3d:dd:8b:c2:0f:8d:b9:a7:f5:
47:eb:11:e0:c0:a5:7e:ea:1d:f7:70:eb:39:8c:2b:
fb:60:5b:96:ff:4d:64:91:c2:b7:e6:50:8c:cf:a1:
2d:3e:eb:b1:1b:53:45:33:28:1f:d5:56:6b:a7:28:
44:e1:ba:5d:60:21:f7:81:57:70:5d:6f:ee:93:ac:
05:08:bd:5d:dd:c4:ae:66:ce:15:96:58:44:02:e6:
66:40:b0:65:94:e5:83:71:65:ff:22:d4:0c:af:c9:
39:32:72:c4:66:a4:80:3d:a6:5f:25:ab:d1:63:6a:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8F:C6:08:03:AA:A9:7C:B2:FF:20:AF:EB:B4:91:D6:5F:81:17:1C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/N4_GCAOqqXyy_yCv67SR1l-BFxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.171.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:45:56:56:3d:95:64:28:01:36:9c:86:52:a7:2d:3c:a2:b6:
f1:b6:52:12:99:91:85:ac:ea:ef:95:ef:c2:0c:6d:ba:08:90:
dd:c4:6a:62:c7:f3:e0:a0:7e:99:c3:16:19:72:79:e9:ad:7f:
18:9b:59:63:a7:45:cf:0a:a8:f9:65:e2:0a:15:1c:38:62:71:
db:ac:3c:ea:21:2a:27:c6:37:03:34:80:82:14:5f:88:00:cb:
e1:ba:23:e0:e9:d7:3d:51:11:b8:5b:bf:92:d9:84:c8:cd:75:
09:3a:64:97:f4:35:38:1d:16:3b:d0:34:4a:ed:60:67:d4:51:
6a:53:6f:83:12:e3:bd:fd:9b:ed:2b:9c:30:f6:5f:c7:d8:d8:
76:5a:de:6f:fb:9c:d5:cc:dc:0c:df:d6:b5:b3:78:b7:7e:4a:
80:b4:49:f7:45:32:cb:bf:53:88:0e:29:b0:52:1b:67:9f:6e:
b3:7c:e4:1a:01:a1:76:fe:37:45:6d:f8:e2:a2:da:dc:ee:a9:
f7:a7:28:b4:51:9f:2e:bb:bb:e3:60:ad:7a:f4:1a:ea:29:5a:
3d:b4:65:b1:9e:94:5c:cd:0e:5a:a4:3c:85:e2:c2:d8:86:17:
c6:2d:4a:eb:e8:a5:4e:f5:27:d7:5a:9c:9e:67:1a:7a:67:b2:
81:90:de:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:28:18 2025 by rpki-client