Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/cxz-2E55vUnhXaRtAbhK3OL2nAU.roa
File: cxz-2E55vUnhXaRtAbhK3OL2nAU.roa (raw, json)
Hash identifier: IbELDbTdi+MNIqP5SlIoOe+zI9Hcbbnqhg2nm6KYKeY=
Subject key identifier: 73:1C:FE:D8:4E:79:BD:49:E1:5D:A4:6D:01:B8:4A:DC:E2:F6:9C:05
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0199153B7CDEB8E96F0D50D8DBD0FFA32A43
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/cxz-2E55vUnhXaRtAbhK3OL2nAU.roa
Signing time: Thu 04 Sep 2025 14:57:24 +0000
ROA not before: Thu 04 Sep 2025 14:57:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208137
IP address blocks: 62.60.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:3b:7c:de:b8:e9:6f:0d:50:d8:db:d0:ff:a3:2a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 4 14:57:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=731cfed84e79bd49e15da46d01b84adce2f69c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:b4:be:07:68:5b:22:e4:f8:a7:99:39:c7:
c7:77:e1:cf:8f:28:f5:9d:f7:db:2b:c2:04:98:34:
d5:11:f8:92:a9:49:bb:4d:98:26:e3:b3:4c:c1:53:
be:61:f1:af:05:28:96:63:9c:81:93:91:be:9d:98:
9b:a0:3f:23:f7:11:e2:a5:cd:d8:a4:99:f6:9f:45:
c8:46:e2:82:c9:d1:92:99:aa:1d:a4:fc:16:65:51:
ad:05:0a:d4:3d:43:ee:dc:24:7f:18:80:be:5e:ac:
8f:d9:ca:a7:48:8d:63:ba:c7:41:8b:bc:d3:1f:c4:
7e:88:f8:1e:03:7d:fd:df:66:a3:38:4c:a9:51:eb:
7e:0c:75:44:44:02:b8:c4:9c:31:27:cd:cc:fe:f6:
e4:c5:9b:fc:96:e3:2e:39:05:06:9d:f3:14:8f:28:
a5:57:23:13:0e:61:43:5c:30:45:c1:09:d0:e6:6e:
3f:a4:26:0f:25:fb:e0:5f:92:5c:70:bb:48:a5:b0:
a1:00:0a:6e:e3:ae:3e:8d:93:22:71:0b:86:18:13:
d2:34:c1:69:86:f4:6d:cc:2c:d1:04:4d:5c:40:b1:
4d:98:11:3d:31:7e:3a:e0:fe:51:2f:f2:6f:04:de:
be:2b:7a:7b:2d:cb:5d:8c:8f:54:ff:93:cf:0d:b1:
b0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1C:FE:D8:4E:79:BD:49:E1:5D:A4:6D:01:B8:4A:DC:E2:F6:9C:05
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/cxz-2E55vUnhXaRtAbhK3OL2nAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.131.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:dd:ec:1b:6f:40:30:0a:78:ff:6c:94:75:29:5f:6a:49:3d:
15:88:12:da:0a:93:fc:1d:6d:da:f8:60:be:3c:3a:c0:6b:14:
d1:3a:01:f3:3d:c7:be:a7:ed:18:33:e4:54:5e:3f:71:ed:d2:
e3:10:bf:78:54:86:b9:f4:8e:1e:c0:59:59:8e:53:fe:a8:55:
e5:bb:90:52:0b:10:3c:39:4e:4e:4c:9a:b6:ef:e8:e3:4b:11:
29:0c:18:3c:2d:ae:7f:60:b6:8e:74:90:61:82:21:56:65:3d:
79:16:b6:17:12:16:3e:e5:80:60:58:7b:92:d4:f8:c3:a8:37:
43:4d:b6:37:c1:cc:8f:34:25:8b:1b:62:6f:f8:11:be:70:9f:
24:2b:c4:36:9e:22:d6:0d:6e:1c:4f:64:62:f2:a4:8a:59:97:
e0:9e:b1:88:c0:ea:05:01:64:1b:2f:d7:65:e2:8d:9d:57:87:
d5:68:0a:c2:3a:38:d0:03:9b:6a:3b:bf:ec:30:93:32:87:6c:
a4:d5:b3:96:9b:43:e6:23:83:0e:b4:1c:9f:fd:13:4f:b2:58:
66:ca:7a:8d:92:18:ab:fb:c4:82:82:cb:3f:43:14:62:b3:25:
a0:7a:4e:ac:34:19:d6:c5:93:69:aa:a3:2c:8e:10:ce:b7:91:
f5:dd:41:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:39:54 2025 by rpki-client