Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/1tSheZow3C5eA6jOu_MWtrfHmEY.roa
File: 1tSheZow3C5eA6jOu_MWtrfHmEY.roa (raw, json)
Hash identifier: KFhShtQvmMD0Mr4HPxFeWZgSKSgyixhc5C8a67+FVZE=
Subject key identifier: D6:D4:A1:79:9A:30:DC:2E:5E:03:A8:CE:BB:F3:16:B6:B7:C7:98:46
Certificate issuer: /CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Certificate serial: 0196D04A45138EA97BB038A6F5613B234061
Authority key identifier: 99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/1tSheZow3C5eA6jOu_MWtrfHmEY.roa
Signing time: Wed 14 May 2025 19:34:10 +0000
ROA not before: Wed 14 May 2025 19:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 194.246.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:4a:45:13:8e:a9:7b:b0:38:a6:f5:61:3b:23:40:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Validity
Not Before: May 14 19:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6d4a1799a30dc2e5e03a8cebbf316b6b7c79846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:b8:50:17:0b:53:4d:59:f6:af:13:97:e0:
10:01:d8:d8:b4:14:4e:cf:cb:2c:e1:48:d2:1a:cb:
f5:b7:5c:c8:91:13:64:42:7e:0a:29:0f:0a:75:f6:
74:8f:a8:ba:76:ff:06:a8:c1:19:c9:4a:f0:d6:75:
20:49:92:55:d9:b3:f3:30:1f:43:74:07:97:ad:71:
a4:07:53:f2:83:23:a6:b8:cc:8d:bd:11:bf:a6:ca:
35:38:62:7b:dc:ea:b0:57:2a:b7:d9:59:5f:1e:76:
2d:b5:8b:72:15:ff:f0:ca:35:51:f8:98:cf:cc:b7:
ab:b5:c2:e5:07:ab:90:90:0d:dc:54:f1:12:29:3a:
07:e5:01:57:1e:f9:f5:1d:42:cc:08:c6:2c:96:bb:
3e:8e:ef:88:11:83:ae:7d:88:e8:c6:95:c7:05:87:
b2:c1:5f:ec:10:0e:ea:f5:34:d1:0e:1f:ee:34:71:
82:23:c3:58:ae:64:ec:1c:b5:8b:0f:a9:54:2f:03:
f1:fb:98:13:8d:70:89:ed:9b:ec:6f:47:b2:fa:7d:
5b:41:4f:1b:0e:39:74:24:25:c2:3b:4e:41:48:1d:
80:ee:28:5b:a4:64:30:8e:3c:d0:4f:10:95:22:db:
97:5f:ee:50:71:c6:84:b2:d3:0f:ff:a4:75:cf:c6:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D4:A1:79:9A:30:DC:2E:5E:03:A8:CE:BB:F3:16:B6:B7:C7:98:46
X509v3 Authority Key Identifier:
keyid:99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/1tSheZow3C5eA6jOu_MWtrfHmEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d2:c4:a4:86:17:25:da:08:8a:0f:c1:79:e5:17:ff:f1:0b:
9c:d2:be:bd:3c:93:1c:e0:f8:20:34:6d:fa:cd:d8:b1:51:a7:
1a:c3:c3:97:b7:3f:98:88:8e:38:c1:35:7a:cc:bb:26:f4:f3:
91:e3:87:6a:19:98:d9:6f:21:0c:5c:d7:31:3b:fc:e7:42:58:
9f:40:65:93:f9:62:9d:c3:92:c0:cf:54:1c:75:3e:de:05:3d:
e9:45:20:cc:6a:0c:5e:7b:f2:1a:7e:c9:7f:20:77:6c:10:dd:
d1:f6:99:62:81:48:7b:40:ee:94:e9:36:20:d8:af:bb:50:41:
87:7c:d7:9c:3d:d6:17:6f:19:9c:74:1c:3b:6b:c2:30:07:ad:
b3:20:5a:ce:33:46:8b:62:8a:dc:22:00:36:03:ad:91:fb:64:
68:fa:ef:fc:1e:b3:25:61:2c:27:5b:a6:3f:59:91:34:a8:c1:
45:6c:5b:32:4a:10:bd:5b:8e:65:1b:57:dc:13:c4:0c:88:1f:
b2:e4:3a:9b:13:a3:a1:bf:99:ec:20:53:23:f2:08:04:2d:45:
47:43:4b:10:2f:0f:d4:e2:f9:9d:7b:8f:1b:f0:bd:98:e1:22:
5c:3f:a4:94:f5:b1:84:50:67:3b:74:90:59:8e:74:db:4d:72:
d5:a9:20:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:52:43 2025 by rpki-client