Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Ssr1HuTSbq8Tt5mgqPf01JbXHXk.roa
File: Ssr1HuTSbq8Tt5mgqPf01JbXHXk.roa (raw, json)
Hash identifier: P6zje9Izk/OUuzN7wk6WeEj1wdH+x3cVzICGzDetkW0=
Subject key identifier: 4A:CA:F5:1E:E4:D2:6E:AF:13:B7:99:A0:A8:F7:F4:D4:96:D7:1D:79
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0196BAB8BA5E894FC61BB96B76D74308DDBE
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Ssr1HuTSbq8Tt5mgqPf01JbXHXk.roa
Signing time: Sat 10 May 2025 15:03:10 +0000
ROA not before: Sat 10 May 2025 15:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197555
IP address blocks: 193.35.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b8:ba:5e:89:4f:c6:1b:b9:6b:76:d7:43:08:dd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: May 10 15:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4acaf51ee4d26eaf13b799a0a8f7f4d496d71d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:3a:95:71:a7:09:bd:4b:d0:59:dc:0f:a5:
48:ba:39:d6:67:d1:ea:5f:3c:e1:42:b6:df:a4:90:
54:80:77:3a:e4:94:b7:7e:c4:0b:43:28:83:f9:de:
22:cf:2c:ae:4e:bd:3e:43:4b:47:81:c4:71:09:97:
c4:0d:8c:8c:87:da:52:1a:6a:9d:86:94:21:ff:87:
f3:5f:85:32:6f:a3:ce:32:0b:be:69:85:d5:99:05:
50:51:b0:1b:d8:e2:dd:60:a2:2e:98:32:dc:8b:28:
41:a6:2b:45:aa:2c:73:06:ae:7a:c7:dc:14:16:4c:
03:35:06:ee:0f:b3:be:1f:bd:a0:a3:60:51:4d:db:
e9:7b:99:b6:67:d9:20:f9:04:fe:e9:5d:29:78:c7:
04:54:87:04:cf:1d:ef:e9:9c:e8:8a:bd:dc:cb:a1:
6d:ba:19:f3:81:21:aa:e2:1d:5c:a5:05:6c:a4:28:
76:1e:fc:76:8d:6f:cc:42:cd:e5:09:fd:a3:cd:08:
55:45:0d:ec:45:20:c3:0c:07:8c:3e:5f:25:dd:f2:
1f:a0:66:24:cc:9b:23:11:52:94:3e:c8:30:59:4d:
70:21:71:6c:80:ad:3d:c7:99:88:07:ed:db:e0:fe:
29:7f:0f:91:10:40:25:e6:2b:19:27:bf:ef:39:33:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CA:F5:1E:E4:D2:6E:AF:13:B7:99:A0:A8:F7:F4:D4:96:D7:1D:79
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Ssr1HuTSbq8Tt5mgqPf01JbXHXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.153.0/24
Signature Algorithm: sha256WithRSAEncryption
49:54:45:6b:e5:eb:bf:80:32:b9:26:b5:fa:93:e2:cb:e2:01:
f6:64:91:e3:e8:07:e8:8f:a7:91:ba:fa:29:bc:66:0f:09:02:
1f:d5:f3:fc:eb:10:b0:e6:e6:9e:63:62:58:a0:c3:93:7f:c4:
80:1b:bf:6a:c7:37:ad:9e:b0:45:91:6e:f1:81:04:be:1b:00:
8a:b7:a6:60:b8:bd:44:fa:b8:1a:fc:06:48:30:9d:34:8b:f2:
5b:72:14:e3:aa:64:0f:86:0c:fe:dd:be:e6:c0:2b:b4:ef:e5:
13:0f:a1:02:e2:45:64:67:b5:b5:3c:5c:5d:89:12:d2:02:67:
b9:87:0e:a8:11:31:d6:38:db:cc:10:96:4e:d5:cb:88:0f:26:
5d:f1:00:85:d6:f3:f7:0e:4a:64:99:58:a4:06:02:e7:18:2e:
91:81:c4:0a:b7:0e:42:6d:fd:87:5a:e0:b5:40:52:3a:9d:1d:
58:c5:a8:1e:c3:0d:30:0c:17:d7:4f:44:66:9e:a2:38:af:22:
82:95:ba:10:e7:d5:41:51:e6:9c:d7:94:c2:67:67:e9:0c:da:
fc:3e:67:c3:09:53:46:c6:45:3c:a2:96:05:c0:18:f1:e8:64:
49:29:af:ca:61:a5:55:93:f4:3a:24:e6:e1:62:32:c5:de:61:
ee:75:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:33:50 2025 by rpki-client