Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/CgXI5U35Ja5zJXPDonw3z30RNaw.roa
File: CgXI5U35Ja5zJXPDonw3z30RNaw.roa (raw, json)
Hash identifier: /SDzrOj7t4jarg6p84Jy88QYELt9kRi3PTsQMNXWwN8=
Subject key identifier: 0A:05:C8:E5:4D:F9:25:AE:73:25:73:C3:A2:7C:37:CF:7D:11:35:AC
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 019905B474418979476947ED9D9C64A8CFF2
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/CgXI5U35Ja5zJXPDonw3z30RNaw.roa
Signing time: Mon 01 Sep 2025 14:35:36 +0000
ROA not before: Mon 01 Sep 2025 14:35:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 192.109.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:05:b4:74:41:89:79:47:69:47:ed:9d:9c:64:a8:cf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Sep 1 14:35:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a05c8e54df925ae732573c3a27c37cf7d1135ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:d7:94:ea:57:c1:5b:87:38:a7:fd:51:c2:
38:06:31:c1:b5:b5:5f:b7:c7:e7:1e:d9:8b:a5:1d:
14:29:00:6a:0c:a4:a7:a4:91:f5:80:ce:7f:45:42:
86:0a:12:30:92:dd:ea:23:ac:fe:f1:53:09:b2:df:
cc:16:3e:91:fe:b6:55:9a:f4:56:6f:4f:99:ed:b9:
4b:a7:cf:56:34:17:02:a1:b8:1e:f5:45:d0:37:21:
e0:57:b9:b2:ee:41:b8:de:80:f4:28:0b:9d:ef:d0:
22:16:33:09:68:35:b9:01:63:4a:bf:a7:cd:ec:a9:
3c:6b:42:eb:ad:01:7a:bf:00:cb:d6:65:04:07:27:
c3:2f:f3:f2:88:a8:91:53:81:cf:d0:8b:f0:d5:c7:
fb:41:03:bd:f0:b7:21:c8:bc:4e:d1:bc:c2:0d:67:
56:17:77:db:b0:0c:c8:01:99:a9:e6:9d:61:d0:d6:
c7:bc:b4:2b:cd:9d:3d:41:f3:7f:c0:a0:1a:5a:56:
1e:0e:0e:78:6c:cf:49:b4:06:0a:cd:d4:23:12:79:
ae:a3:6a:0c:b1:5b:4a:ac:63:dd:dc:14:4c:cb:7b:
b9:80:07:11:60:d6:75:d8:0b:da:6c:30:12:9c:39:
fc:a7:66:4d:54:18:b4:c4:9e:5d:01:39:8d:3b:c7:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:05:C8:E5:4D:F9:25:AE:73:25:73:C3:A2:7C:37:CF:7D:11:35:AC
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/CgXI5U35Ja5zJXPDonw3z30RNaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.138.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a4:9e:d1:82:22:34:86:73:61:ab:45:e0:0c:00:d3:3e:43:
69:37:77:a1:f9:47:87:a6:3e:2e:52:9c:a3:29:94:b3:6c:55:
47:64:5a:d1:15:58:0b:7d:d0:9d:5e:cf:71:ff:c9:79:08:31:
69:2c:f6:be:79:76:0f:68:75:4e:80:88:27:73:04:98:51:ea:
66:15:89:c1:90:be:55:31:3e:6d:7e:d3:4c:12:42:05:28:9d:
19:c9:61:c0:ba:aa:77:e2:55:3d:0c:95:a9:b3:5f:39:37:ea:
41:d1:c1:14:61:aa:56:d1:44:91:38:fd:f2:1e:62:f1:6b:fc:
ee:20:12:05:58:8d:d8:34:f4:f2:7e:06:47:bf:ee:24:77:84:
71:bc:63:65:b5:37:70:89:79:78:d2:ce:1c:26:82:b2:ec:1d:
63:a2:f6:03:51:c5:84:11:99:61:65:19:3f:a7:61:b7:21:04:
8d:28:73:55:64:49:a2:7b:ac:fc:b5:71:43:c3:f9:13:8c:d3:
38:e1:c3:97:1e:b3:a2:00:67:ed:66:18:02:8c:19:fa:47:a5:
9f:83:02:55:8d:02:30:ee:e3:04:08:39:2f:63:e2:0c:35:1c:
88:63:d0:3b:f6:52:7e:83:ba:8f:cc:3c:52:f8:e4:d8:6f:d7:
99:61:6f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:05:48 2025 by rpki-client