Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p4PxwATxi7tdJZq8Nr-n_2xkJkc.roa
File: p4PxwATxi7tdJZq8Nr-n_2xkJkc.roa (raw, json)
Hash identifier: qG9DY5b9BbaNP4H3JzdmQObhu6rsz9CDS87JPBi9h5k=
Subject key identifier: A7:83:F1:C0:04:F1:8B:BB:5D:25:9A:BC:36:BF:A7:FF:6C:64:26:47
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196CF5E11163B86AD0EE6C3127C709E6F7D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p4PxwATxi7tdJZq8Nr-n_2xkJkc.roa
Signing time: Wed 14 May 2025 15:16:10 +0000
ROA not before: Wed 14 May 2025 15:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197071
IP address blocks: 5.175.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:5e:11:16:3b:86:ad:0e:e6:c3:12:7c:70:9e:6f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 14 15:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a783f1c004f18bbb5d259abc36bfa7ff6c642647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:f9:c2:63:eb:e9:f8:e9:72:4c:ef:4d:fc:
4f:c5:b3:80:a4:56:af:8e:1e:4c:7f:ec:cd:63:9a:
98:f8:ab:d9:54:af:88:52:d8:3e:a9:96:c6:11:0e:
a4:ce:18:f3:65:28:b5:99:c4:ff:8d:e3:78:15:23:
a3:75:de:6c:d1:37:2e:eb:ae:aa:e7:63:13:87:e3:
30:4e:1f:8e:1d:fa:af:c2:c2:9e:02:98:a3:fe:46:
64:2c:52:17:57:56:6c:c0:e7:c8:68:6b:2c:4a:f5:
78:5f:2a:34:9e:a8:4b:26:88:aa:00:d8:05:61:72:
5d:a4:f1:2d:11:5d:30:05:fc:f1:c9:80:e9:dd:6c:
a5:a8:70:c8:15:2d:d0:19:a0:a0:48:9b:59:d6:eb:
7c:1b:a6:6b:49:41:08:e7:80:9d:94:06:a0:61:56:
24:70:28:a3:10:62:5f:bc:5a:6b:a3:dc:f8:6a:83:
f4:02:aa:28:e7:03:8b:2f:0c:4c:6e:62:f2:65:c3:
32:44:2e:85:0a:00:8c:d4:84:78:69:0f:60:a9:ce:
a6:d9:a9:5f:b0:89:c2:f5:ba:01:64:a2:a5:17:b2:
a0:7e:cd:70:c1:52:e7:7e:3f:f4:6f:3b:79:bb:82:
c4:a1:36:ba:5e:cd:f4:fc:63:3d:25:26:9e:2b:48:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:83:F1:C0:04:F1:8B:BB:5D:25:9A:BC:36:BF:A7:FF:6C:64:26:47
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p4PxwATxi7tdJZq8Nr-n_2xkJkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.206.0/24
Signature Algorithm: sha256WithRSAEncryption
11:22:15:1f:88:d8:b7:75:1e:25:6a:62:0a:e3:18:ee:97:d1:
5c:d6:fd:86:18:c4:9d:04:47:c0:dd:13:5c:13:0f:ce:9c:ec:
af:ab:20:65:52:fb:fb:7a:f3:57:c1:bd:d8:b7:7c:e0:8f:29:
13:dc:37:61:b7:a1:60:ee:90:cf:d8:bf:45:bc:25:4d:03:55:
72:cb:ac:a8:e3:17:01:d4:78:e8:95:9c:bb:6a:a2:4e:03:06:
c7:c3:09:d1:2c:6f:84:b7:c7:c0:7f:03:c2:5c:ed:ec:02:9c:
c3:ad:98:42:73:36:de:e4:a4:45:db:50:1b:cd:e2:eb:5a:4c:
35:a9:bd:0f:fe:8d:a8:54:c7:0a:c3:cd:d5:94:dd:c6:8b:bc:
db:91:c0:79:d8:47:ce:13:cc:49:60:1a:26:4e:ec:18:54:97:
1f:ab:a9:8e:13:cd:a2:80:83:da:41:dc:c8:39:e4:d1:bf:8c:
05:8d:bf:51:f9:17:1e:62:bd:ce:dc:61:79:77:8c:27:70:fc:
0d:d1:34:c0:64:c8:ed:e4:e2:5f:08:1b:9a:11:be:d5:70:59:
89:54:d4:21:77:9e:22:80:49:a5:e3:ad:e5:91:87:e1:bc:cb:
d8:54:03:1f:28:43:bb:0e:1e:bc:f6:9e:06:aa:d9:74:89:29:
26:85:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:35:11 2025 by rpki-client