Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/1wei3P__YsLq8D2DZQdx3r5Se8Q.roa
File: 1wei3P__YsLq8D2DZQdx3r5Se8Q.roa (raw, json)
Hash identifier: mJ3sfO2t0ZrVqr8Lh/dS5cWV3uJ23FidlrzCBj85Xpg=
Subject key identifier: D7:07:A2:DC:FF:FF:62:C2:EA:F0:3D:83:65:07:71:DE:BE:52:7B:C4
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 0196C3C719B952D9471C60936C3DC964AFD1
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/1wei3P__YsLq8D2DZQdx3r5Se8Q.roa
Signing time: Mon 12 May 2025 09:15:27 +0000
ROA not before: Mon 12 May 2025 09:15:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 45.135.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:c7:19:b9:52:d9:47:1c:60:93:6c:3d:c9:64:af:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: May 12 09:15:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d707a2dcffff62c2eaf03d83650771debe527bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:61:01:56:86:d4:8c:7e:a7:08:60:e3:a7:40:
5b:a4:16:ab:7f:9b:0a:d2:eb:ff:ed:3a:55:51:17:
34:9d:97:a7:21:30:64:28:c6:74:9d:ec:9b:0b:65:
c2:ed:43:c2:38:a8:7b:20:11:66:ec:9d:50:6c:aa:
49:cc:07:95:63:6a:6d:7d:3c:d9:40:40:ec:7f:fe:
10:5c:24:1b:c4:07:64:0f:d2:31:95:95:34:cc:8f:
1a:20:0c:0d:cc:e3:1b:5d:ad:24:3e:d9:3d:41:f7:
5d:79:8d:bd:8f:49:bf:e6:53:ba:35:26:fb:63:3e:
3a:79:f7:b7:4d:e9:dd:fb:d2:df:47:19:f7:9f:4d:
8f:b4:36:e1:6a:94:57:58:5c:22:ec:fd:2d:6e:c5:
d9:8b:f3:e4:de:5b:c1:b6:41:ab:72:8b:ec:86:72:
f4:cb:82:21:7d:c3:0b:79:fe:69:1a:78:0c:b2:dd:
56:74:e4:14:d7:30:5e:cf:05:d7:a0:08:39:c5:fe:
cc:00:0a:c9:2f:b7:85:46:65:2f:b1:62:6c:df:55:
be:32:ad:32:69:2f:97:d3:0b:61:9b:12:b1:f5:ed:
fa:92:b8:ea:68:26:fd:5a:8c:5d:38:5c:46:2e:f2:
0c:60:23:c1:2a:4c:9e:86:03:5a:29:85:cd:ec:a7:
82:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:07:A2:DC:FF:FF:62:C2:EA:F0:3D:83:65:07:71:DE:BE:52:7B:C4
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/1wei3P__YsLq8D2DZQdx3r5Se8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:36:8b:0a:a0:b4:58:f4:32:d3:fa:f7:7a:f5:04:23:e0:1b:
bb:e1:a0:04:87:7b:1a:f7:2c:cc:c0:b9:9a:66:19:8b:eb:97:
4d:99:01:ab:e8:f1:1f:58:e9:be:e2:15:60:46:7d:2e:5b:7c:
99:ce:68:d9:87:db:5a:b9:ba:df:68:5a:62:17:64:4f:97:23:
a8:09:b0:be:c9:0a:61:e9:c0:19:d8:76:f7:01:49:73:cc:10:
81:4a:f9:70:ec:bc:17:d4:38:6f:11:90:89:b2:64:8b:d7:54:
71:03:ea:0c:0b:ae:7a:fb:5d:e9:83:58:10:89:b6:cf:9e:1e:
5e:49:cb:49:61:80:61:00:96:98:05:92:4c:ae:3a:7c:16:08:
15:d7:04:c1:c9:bc:62:97:4f:0d:36:62:3c:fd:2a:c0:da:0f:
d8:d8:e4:6a:7b:67:ba:34:65:3b:66:b2:94:93:eb:ee:11:44:
ea:6e:07:e5:1c:16:54:2c:3d:e9:8c:f7:29:4b:95:b5:c9:01:
b1:11:1c:22:cd:91:91:c2:79:f1:77:f0:48:09:ba:3d:5f:1d:
fc:80:62:b7:df:8b:e4:b2:b4:8c:b4:c0:b0:8b:e7:cd:e1:9f:
dc:e4:ac:82:31:ce:fd:41:f4:5a:c5:6a:7f:81:71:b6:cb:52:
f1:68:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:42 2025 by rpki-client