Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/F94Kob0udJ81aujmin5aftWlc-k.roa
File: F94Kob0udJ81aujmin5aftWlc-k.roa (raw, json)
Hash identifier: U8myvcPaLrrI/wF4h2AttFUwX90hpomyomiYw0hHh/w=
Subject key identifier: 17:DE:0A:A1:BD:2E:74:9F:35:6A:E8:E6:8A:7E:5A:7E:D5:A5:73:E9
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 0197317370AA1C8B40F8EFA6C5BDFC7CE888
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/F94Kob0udJ81aujmin5aftWlc-k.roa
Signing time: Mon 02 Jun 2025 16:22:18 +0000
ROA not before: Mon 02 Jun 2025 16:22:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 5.144.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:73:70:aa:1c:8b:40:f8:ef:a6:c5:bd:fc:7c:e8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jun 2 16:22:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17de0aa1bd2e749f356ae8e68a7e5a7ed5a573e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e4:47:07:09:a6:08:f3:85:bc:34:9b:eb:12:
f1:84:7b:47:36:5d:7f:2c:81:7d:b5:79:78:7f:62:
c7:9d:35:07:33:63:2d:61:fa:8a:eb:a4:76:a1:b0:
44:43:43:8c:ea:51:60:9a:4f:cd:17:5f:37:ab:ab:
9d:22:2f:2e:3d:d5:bf:7f:17:ad:86:4f:f1:bf:fc:
89:17:c6:64:22:85:30:ef:47:4f:63:f9:13:d8:de:
f1:28:ee:5f:a0:b5:5b:27:3f:9b:8d:b8:71:8d:6a:
11:bd:95:df:d2:4b:5d:94:1d:3d:0e:95:06:52:1b:
89:f0:62:60:f1:fc:26:d5:58:32:1d:f4:5d:25:d7:
54:04:e0:60:2e:48:68:b3:ca:ba:47:59:d6:3f:43:
13:cc:a8:b5:6d:52:c0:69:d3:e9:81:3f:92:08:a9:
8c:ad:32:e7:94:68:78:00:45:66:70:d3:5c:47:50:
26:24:58:de:7d:4a:41:ba:3a:d0:0b:10:0a:48:90:
e4:35:27:3e:a1:ba:08:8a:23:2b:e7:d5:e4:eb:7e:
ad:b4:cb:d2:cc:e4:a1:30:b9:5f:4e:b7:88:a4:6b:
8b:3b:fb:6f:4f:a5:f7:a1:7c:bf:d3:60:d6:62:b0:
3a:42:79:59:c6:74:f0:12:84:c3:1a:c2:38:a4:a1:
b1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DE:0A:A1:BD:2E:74:9F:35:6A:E8:E6:8A:7E:5A:7E:D5:A5:73:E9
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/F94Kob0udJ81aujmin5aftWlc-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.155.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:96:85:b0:61:8d:49:d0:83:b3:48:30:f9:d0:16:4e:cd:18:
60:a3:52:11:e8:57:af:36:89:c6:fb:7d:e7:92:39:6b:a1:4a:
f1:99:d8:77:43:8a:a9:e4:a2:21:36:9a:31:3f:1b:67:f7:37:
04:45:5b:7d:13:d5:24:47:f5:cf:65:8c:1d:81:fc:09:6f:f3:
e5:a8:48:d2:ba:61:1f:9a:58:d1:bc:2a:d1:e9:06:23:60:3b:
4a:81:87:d7:52:c2:32:e1:3e:01:03:9b:ce:93:44:53:f3:d3:
0f:32:a3:63:56:88:81:da:df:e1:7a:23:2c:d5:54:09:67:bc:
8d:ca:01:d6:e7:dd:37:11:a5:00:8f:50:ca:62:95:78:b3:2b:
6b:fc:2b:fe:d3:48:18:a7:b3:09:fd:a7:ae:f7:4d:62:00:d7:
2b:9e:2d:20:d3:93:e6:b4:d2:48:98:e5:22:28:51:2c:b9:2c:
75:29:05:52:4b:6a:09:16:b0:0a:ae:ed:bf:98:14:ea:59:23:
45:1e:c0:cb:06:c7:62:fb:f6:42:15:4f:7a:de:9f:7c:09:91:
e3:4d:be:51:5b:c3:f6:5d:38:3e:44:97:fd:be:9c:81:29:d6:
13:4a:c3:df:64:c7:8f:7a:c5:d3:d3:82:c0:f5:7b:b6:7f:33:
02:48:b8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:16:41 2025 by rpki-client