Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3Ub8JXx3_nYEuw2ChlqJ2Qa5MUo.roa
File: 3Ub8JXx3_nYEuw2ChlqJ2Qa5MUo.roa (raw, json)
Hash identifier: Yty7fA711pMF0/3FbBIzIDn4peQpe0hvUZ0BG6IVIng=
Subject key identifier: DD:46:FC:25:7C:77:FE:76:04:BB:0D:82:86:5A:89:D9:06:B9:31:4A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01971216D2AB3880185A8A2E2FD900D0ABB1
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3Ub8JXx3_nYEuw2ChlqJ2Qa5MUo.roa
Signing time: Tue 27 May 2025 14:12:54 +0000
ROA not before: Tue 27 May 2025 14:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 274062
IP address blocks: 92.118.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:16:d2:ab:38:80:18:5a:8a:2e:2f:d9:00:d0:ab:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: May 27 14:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd46fc257c77fe7604bb0d82865a89d906b9314a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:15:9d:61:a9:8f:4a:32:56:5f:9e:df:76:
e2:50:94:6e:d2:ce:b3:c1:a3:78:fa:15:99:fa:59:
31:7e:cd:a0:06:0a:69:1c:8d:d0:43:d6:f2:b3:fb:
d4:41:5c:49:e2:8a:91:8f:1d:2f:c1:f4:f9:45:e4:
fe:4c:ec:83:67:73:0c:30:f1:c6:02:26:6f:56:38:
17:66:26:04:c6:ed:4e:a9:90:0a:bb:d5:c1:2f:11:
1b:4b:fb:67:4a:64:6d:fc:ff:c4:e8:eb:18:45:db:
31:e3:d2:da:4b:61:10:83:9e:3a:7e:30:d7:43:b2:
4d:5b:9e:64:63:b9:03:d7:25:17:6d:b1:ac:5d:fa:
d1:01:a5:19:11:fa:96:5c:79:69:c7:b0:68:a4:8a:
d1:5d:72:a4:25:45:79:b1:e6:40:bb:7a:65:4b:4e:
d3:60:d5:15:33:9b:9a:48:73:ae:b5:3f:e2:3a:62:
f6:57:e2:57:5f:c7:d8:4d:01:42:cd:2b:27:65:8f:
c6:88:6a:88:58:42:0f:8d:0b:b5:5d:36:a2:0f:d8:
8c:2c:be:ad:8b:9b:4a:15:cb:3f:0d:60:2c:b5:47:
49:02:69:d7:61:94:fb:62:15:79:9b:e9:f4:76:13:
43:5c:58:ac:6e:39:99:61:bc:a5:5d:55:4e:7d:45:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:46:FC:25:7C:77:FE:76:04:BB:0D:82:86:5A:89:D9:06:B9:31:4A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3Ub8JXx3_nYEuw2ChlqJ2Qa5MUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.182.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9c:ac:f2:61:65:81:f7:33:8b:82:6c:5a:6e:10:7e:44:4a:
99:57:6c:34:22:c1:d1:47:7b:7a:c7:77:2d:a9:e4:0f:aa:51:
99:8d:06:c9:1c:d4:1e:81:77:5a:73:ef:a1:32:83:47:af:f2:
5b:68:56:34:fc:86:90:b0:69:64:8f:79:00:50:b8:00:38:17:
f7:85:67:aa:65:aa:e7:31:17:db:0b:8c:c9:a1:2d:4e:19:3a:
f3:b1:7e:a3:55:91:5f:30:67:ea:cb:13:37:b4:95:eb:f4:9a:
dd:59:0b:ec:a6:54:48:c1:07:46:44:f0:c1:97:79:d8:8b:17:
e8:76:1d:46:0d:c9:dc:15:9a:dc:78:2d:9f:bc:65:1b:b0:a3:
df:b3:d9:68:98:ee:b9:12:67:3b:75:93:41:7c:b6:f4:81:34:
fc:27:5e:76:96:f8:e7:e9:d0:8c:b8:7f:ed:99:19:e9:05:87:
76:d6:c9:b5:b7:29:28:c0:3a:7b:10:5f:7d:03:9e:da:32:7f:
b7:0a:ff:5a:36:23:a6:cc:19:91:a8:df:89:4a:51:a9:c6:ec:
3d:19:0f:a7:1d:8d:21:88:0d:24:bc:21:a5:b6:55:c9:2e:6f:
7b:db:81:2d:e3:7d:b0:d3:26:2b:d6:9e:0b:f7:cc:ea:54:68:
f3:9d:f2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:32:39 2025 by rpki-client