Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/ad6x4CiW1Da9W7G7xb_TGfwpp78.roa
File: ad6x4CiW1Da9W7G7xb_TGfwpp78.roa (raw, json)
Hash identifier: YUb9Lf1mTN1JjvT/olnYRSLlIBS8OJGKrxw+VtVpgBI=
Subject key identifier: 69:DE:B1:E0:28:96:D4:36:BD:5B:B1:BB:C5:BF:D3:19:FC:29:A7:BF
Certificate issuer: /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial: 0196DFA7615516747AD7C1F8BE4C37680B66
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/ad6x4CiW1Da9W7G7xb_TGfwpp78.roa
Signing time: Sat 17 May 2025 19:10:10 +0000
ROA not before: Sat 17 May 2025 19:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213636
IP address blocks: 195.66.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:df:a7:61:55:16:74:7a:d7:c1:f8:be:4c:37:68:0b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Validity
Not Before: May 17 19:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69deb1e02896d436bd5bb1bbc5bfd319fc29a7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:0b:fd:2e:8e:84:e6:18:cb:ec:9e:9b:85:
85:26:62:87:4e:bc:ee:0e:62:de:70:90:a6:74:e5:
68:fd:dc:cf:ad:c3:64:6c:b8:57:70:63:03:cf:40:
6a:ea:02:d9:5d:30:36:e4:4e:7f:02:b3:1d:91:4e:
80:4b:98:70:63:b0:15:40:e4:78:8e:93:1a:c2:7b:
58:09:50:51:65:75:e0:e8:d3:70:66:89:2b:00:6c:
01:67:b4:ba:b6:c8:90:be:22:db:03:62:24:f3:0e:
d2:51:e7:f2:7d:2c:ef:e5:18:10:32:6b:36:c8:b0:
29:3f:fa:e6:c6:1a:1e:6b:45:9d:cf:7d:5b:0f:2a:
ca:c5:bd:02:50:ff:83:3b:bc:cc:3b:bb:3d:f4:c3:
2f:79:25:7e:be:a2:40:1f:dc:6d:a5:81:a7:06:65:
bc:8f:d6:3d:2a:15:8f:90:6d:ef:58:74:97:67:37:
7c:d1:c5:07:1e:bd:36:11:84:c7:a7:00:0f:12:88:
9c:5c:00:df:46:70:24:6a:10:f1:64:d8:84:35:19:
63:af:d7:0c:57:93:92:f4:71:d4:5f:6d:84:b7:55:
65:b6:76:e8:0f:26:d6:20:22:9b:16:66:97:40:b1:
b0:f1:20:fd:67:9d:14:0e:1a:a3:54:7b:48:3b:50:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DE:B1:E0:28:96:D4:36:BD:5B:B1:BB:C5:BF:D3:19:FC:29:A7:BF
X509v3 Authority Key Identifier:
keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/ad6x4CiW1Da9W7G7xb_TGfwpp78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.101.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e7:5a:5d:bc:ec:66:d2:22:27:e2:11:ac:29:aa:d9:c8:fe:
13:01:34:19:84:32:a3:fd:ec:74:9f:63:df:7d:2a:93:3c:b7:
9f:14:8c:39:9b:2b:7e:76:5c:7a:a3:15:0e:09:c5:4d:d7:b4:
a6:47:13:3f:8f:bd:c4:85:ad:aa:e0:89:67:22:1e:63:37:1d:
24:88:56:45:47:b0:68:5d:1a:eb:42:85:c5:f9:25:3c:44:1d:
1a:40:1f:9d:d7:34:54:aa:87:0a:55:fd:9f:07:32:f0:ec:ff:
81:eb:e4:55:5a:1a:8b:5b:32:4e:4d:ec:bd:4f:e0:4b:41:dc:
92:df:77:bf:4b:3d:d6:68:39:e8:07:b9:57:6b:5d:b5:9c:e9:
ef:5e:2e:32:5c:52:c0:2a:97:ca:29:58:f5:95:2c:ae:4f:a9:
ea:a5:ad:3e:87:e7:fa:a7:51:33:e8:9a:6b:6d:0c:20:c0:0e:
14:67:c2:6c:99:81:fc:57:94:cf:51:c2:fd:86:20:dc:11:c4:
36:7b:0e:ae:ba:dd:6d:bb:e1:39:36:96:fe:bb:ab:73:b2:ba:
e1:ab:a3:8d:85:1c:64:b6:d3:a5:b6:67:f2:fb:00:1e:31:54:
c0:ff:77:e6:c3:2f:ca:52:cb:53:eb:6d:2e:05:8d:45:6f:6c:
25:ae:5a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:18:29 2025 by rpki-client