Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c1S67ceO9O8hD3uCpVE7vo0XRHs.roa
File: c1S67ceO9O8hD3uCpVE7vo0XRHs.roa (raw, json)
Hash identifier: 6LJaZNjp3Xx7RwuV13JJddBtnUdXBzT8lzegc4ihFzU=
Subject key identifier: 73:54:BA:ED:C7:8E:F4:EF:21:0F:7B:82:A5:51:3B:BE:8D:17:44:7B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0196D9D4E60BCD4665005447F5D834AA64C9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c1S67ceO9O8hD3uCpVE7vo0XRHs.roa
Signing time: Fri 16 May 2025 16:02:10 +0000
ROA not before: Fri 16 May 2025 16:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213990
IP address blocks: 37.140.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 09:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:d4:e6:0b:cd:46:65:00:54:47:f5:d8:34:aa:64:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 16 16:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7354baedc78ef4ef210f7b82a5513bbe8d17447b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:da:d3:03:79:48:95:10:09:ce:f9:76:4e:
e5:1b:cc:fe:ef:ad:68:77:c3:e3:e6:8c:ca:01:4b:
47:0b:50:06:a4:fa:49:56:28:e6:0b:45:6a:5f:7a:
c4:d6:19:57:71:59:ba:1c:6c:7f:7a:b3:e6:b3:dc:
1d:be:01:2f:54:19:fc:b1:73:ad:ee:9b:b1:e5:f9:
ee:d4:04:12:14:3a:84:53:8d:0b:03:ec:c3:4f:d2:
4f:aa:1c:55:89:15:06:b6:5f:32:6f:bc:2d:dd:58:
4b:63:3b:f5:b2:ab:8b:be:98:a0:5b:bf:07:d6:44:
dd:39:c7:71:c8:9b:02:6c:db:4f:54:a5:3b:a2:2b:
ab:40:25:00:ac:3d:d0:b8:33:73:59:5a:84:bb:84:
0f:04:ff:50:aa:25:3d:84:3f:9a:cf:53:fd:73:39:
61:2a:1f:4b:08:75:2b:cb:6e:3c:fe:95:f2:cc:ef:
9d:e5:6a:68:fa:c0:78:00:0a:f6:15:53:7e:6c:46:
5e:04:8d:24:cf:39:6f:6b:25:b4:9f:3d:4e:ca:b6:
1f:38:d2:c9:a0:aa:85:c3:a0:2b:eb:48:ca:ea:e1:
60:30:4c:c2:97:f0:aa:0c:46:c1:75:70:49:0c:a1:
89:b1:5b:5e:f0:0f:b8:50:ed:a5:3b:57:a0:83:cf:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:54:BA:ED:C7:8E:F4:EF:21:0F:7B:82:A5:51:3B:BE:8D:17:44:7B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c1S67ceO9O8hD3uCpVE7vo0XRHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.247.0/24
Signature Algorithm: sha256WithRSAEncryption
14:dd:74:5a:97:aa:ad:67:c4:39:68:88:d0:76:8f:25:e9:52:
ef:dd:72:51:39:99:98:e6:de:96:c4:c1:30:26:a4:69:3d:b2:
26:bc:45:45:53:33:3d:24:39:d3:34:c6:30:e7:81:e5:01:75:
1c:1c:61:4c:12:0a:fe:85:04:78:af:c4:57:bb:fc:92:e5:a2:
4f:4d:0f:7e:f3:54:82:88:61:db:84:d5:64:70:c6:e4:1f:b2:
f7:03:02:58:a6:af:23:f6:a4:10:a3:2d:e7:6d:e9:26:0f:87:
59:14:15:a9:d9:eb:a2:53:bf:26:aa:4f:d9:43:4f:8a:fb:fc:
0e:ce:ff:44:6c:9a:3d:ef:d0:27:c2:07:ce:ac:5a:40:09:66:
f1:86:3f:af:51:8a:0b:71:97:85:3c:0e:e6:54:26:9f:36:3f:
22:7b:12:39:1e:e7:85:82:ea:64:27:c6:a8:91:eb:ac:f7:fb:
04:e2:25:d6:c4:1e:b7:43:86:a4:f1:fe:95:fd:4d:18:39:fe:
85:01:cd:aa:69:c4:93:d1:b4:69:7d:0d:32:e6:ae:86:05:ff:
01:f7:c5:0a:0f:80:c0:e9:a4:69:af:5f:11:ea:0b:f3:4a:71:
96:88:5d:f2:a3:49:6c:a3:8f:37:0c:44:43:a9:fd:7e:a8:73:
5c:36:da:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:15:41 2025 by rpki-client