Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/PlNj2d6nJdCalfpN6r_rJytfYJI.roa
File: PlNj2d6nJdCalfpN6r_rJytfYJI.roa (raw, json)
Hash identifier: 0wdTzkVtCGDZ5ADOoR8XnEMg9MH672ZEq8atlwavEHU=
Subject key identifier: 3E:53:63:D9:DE:A7:25:D0:9A:95:FA:4D:EA:BF:EB:27:2B:5F:60:92
Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial: 01970C41063669CDF54A20D2BD4E069B960E
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/PlNj2d6nJdCalfpN6r_rJytfYJI.roa
Signing time: Mon 26 May 2025 11:01:17 +0000
ROA not before: Mon 26 May 2025 11:01:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209077
IP address blocks: 194.92.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:41:06:36:69:cd:f5:4a:20:d2:bd:4e:06:9b:96:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Validity
Not Before: May 26 11:01:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e5363d9dea725d09a95fa4deabfeb272b5f6092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:f6:0b:d7:0f:b6:f1:8d:25:a1:ba:70:37:
52:80:c3:3b:71:26:26:9d:81:59:1a:f7:b3:83:68:
9d:c7:6a:fd:aa:4b:1a:01:d6:5b:88:d8:ac:6c:b5:
32:b3:07:e0:a5:be:d0:97:82:c4:1d:cf:1d:a9:01:
3d:94:75:29:86:e3:e6:03:c1:21:76:f4:26:d4:ad:
f9:9a:2a:16:b9:73:aa:bf:ec:78:d0:cb:b4:02:4d:
97:fa:a7:63:57:9f:65:1b:de:3b:b0:a2:a3:cc:9f:
d7:37:3a:40:4d:ad:89:4f:b4:90:88:8a:c4:ac:8b:
c4:18:ad:6e:38:e9:9f:02:2e:d7:8c:c7:cd:4f:19:
0f:98:95:2b:d3:d1:05:e3:60:65:9c:dd:10:5c:74:
a3:af:8e:aa:0b:b3:82:bb:b9:ff:27:3b:d0:72:6c:
4e:a1:ac:91:b3:50:33:4a:c2:4e:a7:7a:ee:99:8e:
5e:25:12:f6:98:df:93:88:3c:a4:4f:a9:9f:92:4a:
2f:4f:7f:4e:60:71:63:8d:8c:85:45:80:23:16:cb:
3c:38:3f:03:90:ad:21:7f:3d:3f:61:92:fb:f7:26:
06:9f:58:6b:30:b9:2a:dd:74:3d:6c:7b:ed:9f:08:
ee:6a:14:da:1b:fe:02:f4:71:73:5d:88:bb:7e:f9:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:53:63:D9:DE:A7:25:D0:9A:95:FA:4D:EA:BF:EB:27:2B:5F:60:92
X509v3 Authority Key Identifier:
keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/PlNj2d6nJdCalfpN6r_rJytfYJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.92.78.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:65:9a:a2:34:b5:eb:d7:49:ca:37:da:8f:9a:0d:35:d4:7a:
83:44:5e:45:a2:93:9e:78:5c:65:0c:a9:5a:3d:f3:88:25:93:
cb:a9:3b:ec:63:f1:23:63:6b:c5:b8:9f:4a:6a:92:00:11:be:
ec:7d:ea:19:22:df:a8:9e:a7:0d:bc:8d:04:2d:63:e1:97:b2:
73:b7:20:75:f6:ba:1d:eb:1c:4f:82:ad:b1:7f:8e:0a:77:19:
e8:0a:8e:ee:f5:00:8f:f4:21:7b:51:bf:54:87:ca:e4:1e:28:
37:c5:ef:23:f9:85:29:b8:bb:2e:10:e1:51:f0:87:1b:e8:b7:
23:13:97:88:ba:1b:2e:ef:d5:a6:fd:b1:70:25:d6:8e:eb:8b:
90:46:6b:76:a0:ea:37:f9:96:7c:20:80:fe:4b:4d:94:70:04:
75:36:41:63:71:64:b6:79:0b:9d:97:39:09:32:e5:47:ff:d8:
16:17:3b:f2:aa:a1:6d:a4:f2:a6:61:7d:0c:b9:19:57:5f:1c:
f6:b8:0a:90:68:10:6e:65:fd:53:cd:98:4b:5b:47:9e:82:61:
0c:fb:4d:df:9f:42:63:0b:30:ec:14:81:4d:06:f1:65:32:29:
f2:86:13:7a:99:5c:96:44:fb:c6:2c:97:0b:8f:a1:64:7a:2b:
3b:47:ac:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:37:38 2025 by rpki-client