Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/lXHb7zIdd8-97pWSYhMG24vYUMM.roa
File: lXHb7zIdd8-97pWSYhMG24vYUMM.roa (raw, json)
Hash identifier: nnzxUPpxMM9kY0CHWaC4ehb2mi1S1i+vBqZrGfDBrFY=
Subject key identifier: 95:71:DB:EF:32:1D:77:CF:BD:EE:95:92:62:13:06:DB:8B:D8:50:C3
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 0196FDCC1E5E8A5AF1A171A13F9586CEA912
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/lXHb7zIdd8-97pWSYhMG24vYUMM.roa
Signing time: Fri 23 May 2025 15:38:54 +0000
ROA not before: Fri 23 May 2025 15:38:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201949
IP address blocks: 193.3.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:cc:1e:5e:8a:5a:f1:a1:71:a1:3f:95:86:ce:a9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: May 23 15:38:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9571dbef321d77cfbdee9592621306db8bd850c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:4a:a1:cd:14:81:db:16:f1:bc:54:ae:33:
ac:44:8d:16:5d:5e:d4:9d:41:d6:87:2f:a6:6c:6a:
79:f0:ef:2a:24:82:50:7d:95:49:4f:3d:4c:82:52:
f4:06:65:c5:22:ce:ec:40:31:58:3f:ca:33:75:18:
d6:fd:95:7a:d2:5c:97:05:54:aa:f6:fc:b7:50:09:
8d:57:4d:ee:0e:c5:99:6c:a9:3f:2c:a3:82:bc:04:
02:ee:d8:f5:39:49:0e:1c:f9:5b:f0:02:f4:a5:d6:
bc:15:ea:40:52:93:69:37:84:dd:cc:d7:7a:7c:d2:
25:f4:02:60:ea:81:d5:62:31:c2:7f:dc:8e:ad:22:
7b:ca:c3:88:a9:8a:94:56:5f:ca:5d:a4:bd:16:27:
ca:7c:97:71:e9:c3:18:e6:11:8a:c5:19:ee:24:73:
af:2b:07:92:2f:9c:d2:f8:80:f8:af:02:a9:9a:a4:
5d:4f:e1:2f:ee:a5:ee:ed:71:c0:44:e7:06:0e:fb:
a4:b6:e5:7d:6e:f7:42:81:1f:e7:7e:8d:f3:9f:b6:
b8:35:f3:7c:a0:b8:54:5a:4a:b9:37:cb:39:17:6f:
c2:5a:c0:64:ee:ca:6b:f6:5a:32:5f:9c:e6:8a:11:
b2:af:9b:a8:01:d5:2e:3d:dc:3e:19:41:7a:3a:48:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:71:DB:EF:32:1D:77:CF:BD:EE:95:92:62:13:06:DB:8B:D8:50:C3
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/lXHb7zIdd8-97pWSYhMG24vYUMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f2:7a:c4:36:ea:f4:ce:c9:20:56:6f:8d:b8:1b:d8:6e:ec:
0f:ad:68:6c:24:85:7e:ef:ba:25:80:1a:32:79:d4:69:04:b9:
4a:dd:a3:1c:8f:f9:08:6b:c7:06:f8:73:cb:33:2d:e4:ab:bb:
95:41:20:e5:15:34:59:5b:e8:ab:d1:14:8d:c5:61:97:52:b9:
eb:53:44:ba:e6:c7:4b:56:78:02:d6:13:03:07:d4:ba:98:34:
c2:d0:d6:f1:24:8d:42:b0:66:ac:ec:96:0a:9b:b6:62:56:70:
a5:95:8d:77:29:5c:01:66:7f:ae:c0:ed:43:ba:c5:2c:1a:0f:
7f:43:20:0e:76:25:cb:28:27:ea:88:ac:11:06:cd:9c:42:bb:
ed:b3:da:1c:6c:c3:d1:4d:a1:3e:ff:72:9b:b8:11:13:09:b2:
f2:4a:24:d4:2f:26:4f:b1:44:e6:b9:c7:46:f6:87:13:d0:6f:
af:58:f9:fd:0a:1f:e2:0b:14:19:66:d8:e9:f7:5e:a7:0c:4c:
79:be:fa:c6:9d:58:66:da:57:ec:c9:21:97:e1:e8:52:43:e4:
48:ff:63:6c:e5:52:41:23:b7:58:6c:82:31:8d:3d:ea:9a:aa:
1f:c8:70:fb:ba:fb:db:2a:78:16:75:36:d2:81:a5:37:ce:51:
93:f4:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:59 2025 by rpki-client