Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/DTiRuV1XY6KzH38FzVfmATAn9tA.roa
File: DTiRuV1XY6KzH38FzVfmATAn9tA.roa (raw, json)
Hash identifier: x3sHiIQWIvAyoJyAVgj3P6adyRaFJ3FPGt1ah2jxcPQ=
Subject key identifier: 0D:38:91:B9:5D:57:63:A2:B3:1F:7F:05:CD:57:E6:01:30:27:F6:D0
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019716BE64F28C535C10FAEEAF089DF963C0
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/DTiRuV1XY6KzH38FzVfmATAn9tA.roa
Signing time: Wed 28 May 2025 11:54:25 +0000
ROA not before: Wed 28 May 2025 11:54:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210027
IP address blocks: 176.126.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:be:64:f2:8c:53:5c:10:fa:ee:af:08:9d:f9:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 28 11:54:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d3891b95d5763a2b31f7f05cd57e6013027f6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f9:4d:4c:83:4c:4e:04:c3:8a:10:54:82:87:
d3:bf:1d:db:86:49:fc:53:2f:0e:46:0b:6c:33:b9:
7b:21:66:45:60:57:ff:9b:69:b4:99:f7:22:e7:13:
17:e2:78:57:2b:51:6f:79:ff:d6:f5:a8:33:4c:63:
42:f8:89:09:5c:c5:e2:38:32:ce:ba:5c:2b:0a:56:
54:fb:44:03:3b:17:73:a1:22:af:68:ce:8f:b5:60:
1f:3a:16:e4:56:74:33:1f:60:92:bb:d8:c4:b6:04:
69:7e:e0:9f:2b:90:a8:05:ef:ad:84:f7:75:c8:36:
c2:7a:e8:64:5c:00:57:d5:cb:39:70:53:36:b3:77:
43:c2:4c:1e:d2:43:88:9f:21:ff:79:4d:b9:de:ab:
d4:c8:98:1e:fb:d7:49:27:cf:a8:0b:24:1f:71:b0:
91:76:53:f4:fe:76:e1:de:1e:24:27:80:5c:77:8a:
48:bd:53:fd:75:15:8a:af:3f:57:28:63:ba:f1:ac:
36:50:de:bd:55:93:f1:4f:87:0b:87:0a:ac:80:b8:
5e:55:23:ca:cc:95:08:03:53:c7:da:70:c0:09:10:
2a:85:60:38:52:0c:55:8a:67:15:d2:c9:e5:51:5d:
a1:a9:b1:cc:c5:44:65:81:52:f1:46:2b:6c:fc:94:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:38:91:B9:5D:57:63:A2:B3:1F:7F:05:CD:57:E6:01:30:27:F6:D0
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/DTiRuV1XY6KzH38FzVfmATAn9tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:dd:1f:64:71:c1:6d:80:dc:09:0c:13:3c:6f:85:43:d6:be:
8d:24:cc:d5:21:96:b5:f8:03:e6:64:5e:8d:11:f9:f5:9b:b8:
ca:1e:81:8e:f9:3c:89:24:52:2d:97:7a:e0:a8:fe:02:31:16:
0e:7b:4e:d8:a8:b3:56:c4:12:8e:9f:a2:8d:93:19:2c:5b:be:
fd:fc:de:53:d1:a9:98:51:06:16:4c:3b:ae:1d:72:8b:9f:51:
82:3f:5f:d4:6f:d0:74:d6:bb:93:1b:f7:ba:d5:52:63:2d:f6:
9f:4e:19:a6:67:c8:36:e3:3b:dc:ea:9e:c9:fd:9d:4b:4d:6f:
33:f7:fe:fa:c7:f6:d2:27:26:63:2a:22:d8:79:3c:13:f4:48:
83:fe:bd:18:a8:36:6b:c3:eb:51:67:1c:f4:80:46:a8:f1:7d:
1f:25:54:89:1b:36:d5:29:45:81:4c:48:2b:44:a9:c8:50:04:
3e:9d:2c:19:b1:d1:2e:09:6c:44:88:7a:c2:76:d4:eb:5d:cd:
6c:07:66:fc:df:ce:c0:a8:90:48:c6:55:4b:cf:ab:c5:f5:63:
72:d7:e7:6a:e5:63:73:d6:55:e0:7c:4f:a7:72:14:c3:b1:c9:
53:63:26:37:2e:bc:dd:47:3c:be:73:19:2f:86:39:63:fa:34:
38:0b:be:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:33 2025 by rpki-client