Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/iHINYB6HK5zhAGO6DPDZUdJealQ.roa
File: iHINYB6HK5zhAGO6DPDZUdJealQ.roa (raw, json)
Hash identifier: 1IUHjcWX52sSzysLKUjgjcoc6L0bnB3UjXNih8ZRCGU=
Subject key identifier: 88:72:0D:60:1E:87:2B:9C:E1:00:63:BA:0C:F0:D9:51:D2:5E:6A:54
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01970AFF549BBC6873EB1D2709895C7E0440
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/iHINYB6HK5zhAGO6DPDZUdJealQ.roa
Signing time: Mon 26 May 2025 05:09:54 +0000
ROA not before: Mon 26 May 2025 05:09:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50896
IP address blocks: 37.9.40.0/24 maxlen: 24
37.9.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0a:ff:54:9b:bc:68:73:eb:1d:27:09:89:5c:7e:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: May 26 05:09:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88720d601e872b9ce10063ba0cf0d951d25e6a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cf:40:a4:c1:2a:a9:47:3e:d8:df:6c:09:61:
16:fb:63:08:c2:f2:00:28:64:8b:0e:4a:c7:e1:fe:
03:2b:b7:af:06:4c:6d:a1:24:c8:dc:46:2a:b4:d6:
13:d7:49:10:11:03:3f:5e:40:c3:d4:a6:66:60:c9:
b9:99:61:33:fc:31:71:b6:7c:72:04:26:14:a0:ab:
11:fb:ee:60:19:bb:d2:87:a2:a9:43:73:cd:83:46:
da:26:b7:fc:d6:6d:80:c9:42:bc:c2:c2:6a:12:bd:
c6:07:a3:bb:26:21:42:cb:b4:2f:67:31:10:ad:31:
ad:88:25:61:6b:48:af:37:65:be:e8:23:0e:a6:4a:
02:a4:4f:cf:98:bb:7f:5f:82:a2:b0:46:6d:7e:bb:
df:83:7e:f1:e8:c1:88:de:7c:14:75:11:9e:2b:71:
ad:18:52:af:bd:ea:fa:1b:e5:2a:63:b6:bd:3c:e8:
9a:91:c2:3a:f8:fc:22:7d:f7:78:06:bb:8e:fb:f0:
dd:b3:59:05:66:f3:4a:ed:fb:24:2f:60:af:01:21:
41:5f:42:ad:d2:58:25:5c:71:23:4b:31:3c:a1:be:
39:6a:2d:60:2e:82:d3:14:cf:b5:39:ba:f9:86:18:
f8:65:b5:d9:9a:fb:a2:e4:87:7d:3e:65:38:e7:ac:
f0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:72:0D:60:1E:87:2B:9C:E1:00:63:BA:0C:F0:D9:51:D2:5E:6A:54
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/iHINYB6HK5zhAGO6DPDZUdJealQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.40.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:5d:dd:4c:6e:45:10:00:a2:ab:9d:c3:23:f8:96:cf:68:b9:
0d:3b:36:bf:ed:a7:62:e8:3b:bb:60:21:d2:75:ca:9b:56:f8:
88:69:8e:a5:50:6f:78:91:3b:80:a5:50:10:9d:41:a2:c9:96:
54:54:7c:5a:0c:e6:82:f6:12:ca:8f:66:64:36:76:1f:70:61:
e4:73:8f:5b:c1:82:df:df:87:d6:83:ac:fb:f2:b2:24:78:73:
aa:4a:28:75:c7:c3:58:5f:8d:ed:cb:07:90:da:76:2e:0f:a8:
3b:53:c9:43:3c:b3:27:de:48:66:9d:68:d4:83:2a:61:80:72:
83:e3:02:c5:21:47:26:c1:0f:92:09:0a:2b:30:6e:b5:67:2e:
3a:76:ad:66:08:dc:cc:86:5c:8a:f1:ce:03:c0:3e:fa:47:28:
1a:9c:7c:74:64:5c:16:fd:65:00:33:70:2a:58:38:66:5e:53:
92:35:5b:ff:09:b9:1e:c5:8b:20:aa:60:03:42:0e:08:da:8e:
02:26:77:78:b8:03:52:62:4f:b2:be:88:c1:d7:84:e7:d8:04:
4a:0c:ff:02:b3:9c:91:96:db:e7:99:ae:25:79:3f:c4:78:ed:
ec:95:7e:80:93:7c:dd:68:23:47:9f:98:af:4d:75:03:65:76:
dc:0d:ff:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:05:50 2025 by rpki-client