Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/22lLDFU8nwc93-jfzNMpRH5sgrw.roa
File: 22lLDFU8nwc93-jfzNMpRH5sgrw.roa (raw, json)
Hash identifier: +NBjFjyK6WbMQY3zkQQYj9FPVF3OF9alYPIlrwi+mjY=
Subject key identifier: DB:69:4B:0C:55:3C:9F:07:3D:DF:E8:DF:CC:D3:29:44:7E:6C:82:BC
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 01973F04F0DD9888DF5A16783D81EF98E202
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/22lLDFU8nwc93-jfzNMpRH5sgrw.roa
Signing time: Thu 05 Jun 2025 07:36:17 +0000
ROA not before: Thu 05 Jun 2025 07:36:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42688
IP address blocks: 46.70.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:04:f0:dd:98:88:df:5a:16:78:3d:81:ef:98:e2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Jun 5 07:36:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db694b0c553c9f073ddfe8dfccd329447e6c82bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:3c:a4:ae:1a:37:7d:7f:cb:c0:49:33:f3:
75:e3:35:c6:b9:8b:bd:b4:61:6b:46:8f:6e:a6:24:
9f:2a:b7:c2:79:16:8f:5f:56:c0:4b:cd:10:4e:f1:
6e:e9:24:57:2c:ca:66:12:ab:f2:49:69:20:3d:f6:
0e:10:91:e9:84:44:29:cf:dd:9b:3f:1d:0a:da:27:
aa:9b:a6:1d:a7:b4:de:6b:66:c4:3c:57:19:aa:33:
67:c9:70:81:eb:03:22:38:e3:a1:21:ab:e1:81:17:
fe:a4:32:1f:27:17:f1:7c:cd:a7:bf:43:fd:13:52:
f7:11:7a:6a:d1:a2:e7:97:3e:80:1d:12:5d:61:9d:
b0:48:7f:d7:7b:98:c3:d8:57:76:ea:55:4c:52:5c:
35:71:48:c6:62:b3:9b:b6:f1:ef:2e:d5:70:11:39:
11:cc:a4:32:c6:11:6e:4a:dc:63:1b:5d:08:c9:f6:
c2:b1:ef:51:74:c7:0e:9c:45:a2:c3:77:29:cd:d3:
41:6b:d1:44:de:93:8e:a9:0a:09:2d:c9:5d:e3:b1:
f5:3b:90:72:7d:aa:f4:c0:cf:85:88:bd:42:43:90:
e3:bb:4a:42:0a:40:41:50:b8:35:fb:0e:1f:20:cc:
e4:3e:bb:03:77:ad:07:a2:03:22:7b:7d:11:a7:22:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:69:4B:0C:55:3C:9F:07:3D:DF:E8:DF:CC:D3:29:44:7E:6C:82:BC
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/22lLDFU8nwc93-jfzNMpRH5sgrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.70.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:63:8e:b1:e8:3a:12:d4:c2:f8:fa:95:b9:da:1d:fc:d2:e4:
03:16:10:a8:f9:cd:75:d4:38:85:8e:7a:49:c8:2b:fd:b5:e8:
54:68:45:14:d6:bb:39:11:63:49:2e:6b:13:02:6d:95:99:bf:
da:b5:10:36:84:96:91:6f:a0:0e:74:8a:9a:b1:6b:2f:3d:f5:
8f:3b:2d:b0:8b:13:e1:14:4d:c7:db:57:bd:d7:fd:2b:38:1f:
de:ac:07:1e:f9:5b:e1:06:82:56:28:bb:b1:63:dc:e0:7c:7f:
8a:e4:16:c0:01:37:f4:69:1c:02:96:4d:60:f1:44:9d:a7:4b:
94:30:12:8f:b7:69:33:ee:93:5e:79:92:21:6e:49:81:23:19:
88:8c:26:13:17:59:c5:83:ca:00:a3:5a:03:5a:71:c8:0c:0d:
0a:4c:f9:c0:94:00:d7:89:0d:d2:19:30:bc:e0:7a:0f:3d:d7:
28:35:4c:24:f2:76:16:b0:b6:4e:09:4a:76:e2:b5:c4:46:93:
32:af:7c:f4:dc:81:2e:cc:3f:db:2b:27:46:32:ec:ad:cf:a2:
b7:9f:7f:10:84:45:6f:be:66:27:58:bf:c6:8b:ce:e2:47:ee:
88:ee:a6:e8:d8:fe:2b:74:56:53:41:08:64:2f:6d:73:2c:4d:
c8:47:4a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:44:21 2025 by rpki-client