Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/dy9sl06INn9kP69qxVHrVhPgQXI.roa
File: dy9sl06INn9kP69qxVHrVhPgQXI.roa (raw, json)
Hash identifier: L8mYQTsA5QM3vpADKddeUPokEK78aqQil5p3eBpUowM=
Subject key identifier: 77:2F:6C:97:4E:88:36:7F:64:3F:AF:6A:C5:51:EB:56:13:E0:41:72
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0196C495DF1EDAE0498591E7C9CA8274C523
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/dy9sl06INn9kP69qxVHrVhPgQXI.roa
Signing time: Mon 12 May 2025 13:01:18 +0000
ROA not before: Mon 12 May 2025 13:01:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 109.122.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:df:1e:da:e0:49:85:91:e7:c9:ca:82:74:c5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: May 12 13:01:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=772f6c974e88367f643faf6ac551eb5613e04172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:36:6c:76:a6:b3:10:6d:0a:f6:f4:d7:29:
1a:14:4e:f1:43:f6:79:e2:a4:7a:74:c7:2c:d8:17:
17:ac:d6:a6:5c:78:73:e4:ec:cf:af:fe:26:f8:42:
58:65:3d:2e:51:ac:fd:ea:1c:dd:3d:43:24:74:23:
a0:aa:06:c0:4b:22:6b:60:03:9d:87:44:05:76:ac:
b8:3e:c6:12:dd:4c:a1:2a:02:5a:15:f1:99:b8:bc:
0a:3f:54:df:89:88:6e:d1:98:8f:fa:ed:6d:d6:28:
32:9b:8a:7f:be:c2:ec:2e:13:b6:d9:4a:3d:28:60:
a3:bb:e1:be:68:c0:3e:40:06:d6:b6:6f:c2:fe:04:
e8:10:d5:5b:78:13:e5:d2:74:78:b1:a2:7d:ff:ed:
61:f9:7e:47:7e:a2:33:0a:0a:6c:79:f2:ed:93:99:
91:13:cf:ac:f0:05:11:18:2c:9a:45:a9:9a:18:91:
cf:15:8f:3b:82:fb:5d:7a:0a:42:80:a3:5c:6d:83:
27:99:89:14:90:df:f5:e2:56:bf:b4:44:64:05:ca:
9a:a0:6e:c8:ac:5b:5d:c7:3d:6a:b6:9f:d6:59:55:
0b:03:64:4c:49:f6:d9:83:65:3a:09:ab:21:8f:bb:
69:db:1c:fd:4b:a5:dc:4e:c2:6d:93:e4:e5:64:29:
d9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2F:6C:97:4E:88:36:7F:64:3F:AF:6A:C5:51:EB:56:13:E0:41:72
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/dy9sl06INn9kP69qxVHrVhPgQXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.61.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:8c:0e:8e:09:91:c5:2a:72:2c:84:ae:1a:ec:8c:f7:67:9e:
dd:be:7d:08:c0:07:25:6a:da:86:10:1e:f2:cd:2f:a0:d7:e1:
e8:ca:df:83:58:e0:97:d5:db:ff:8a:09:27:d7:bf:a3:55:7e:
6c:38:59:1e:b8:32:ae:6e:15:91:95:51:a0:d7:3a:45:7f:98:
65:08:01:72:0c:68:7e:37:f8:e0:a0:28:23:31:4b:95:97:93:
e7:64:5e:e6:9f:f5:ab:fd:19:e2:75:85:9a:e1:85:b9:c7:cf:
f3:0a:67:48:7a:fc:fd:cd:e9:4d:e4:19:98:65:19:d5:35:85:
84:e3:ce:6a:37:ee:10:5a:c5:16:74:57:16:af:13:14:3e:1a:
cf:62:29:39:da:c3:c6:0f:50:12:ae:a2:aa:c7:29:c1:66:25:
56:2a:4a:94:09:2d:6f:13:20:0b:04:23:d9:db:4b:67:79:fe:
da:0b:55:a4:45:62:68:9e:c6:e8:f4:a2:4e:80:e9:34:8f:75:
89:c2:bf:4d:e6:93:9b:54:b0:fa:27:5c:56:f9:85:53:31:20:
8c:61:bd:ea:5d:23:fb:2a:72:cb:43:1a:28:ed:26:5a:c2:17:
4e:ba:64:07:97:22:2a:b1:76:21:f8:de:2f:d5:5a:40:fe:e6:
69:88:52:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:03:48 2025 by rpki-client