Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/kK6YDKhFK0O4ZVPYiKbnrwP6h6g.roa
File: kK6YDKhFK0O4ZVPYiKbnrwP6h6g.roa (raw, json)
Hash identifier: eYiZG4qotu5f2pJqUyvz45seHMJB4Y67i3mWJoKdrWA=
Subject key identifier: 90:AE:98:0C:A8:45:2B:43:B8:65:53:D8:88:A6:E7:AF:03:FA:87:A8
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0197134C44CD9FD55CCB62727544B1764C2D
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/kK6YDKhFK0O4ZVPYiKbnrwP6h6g.roa
Signing time: Tue 27 May 2025 19:50:54 +0000
ROA not before: Tue 27 May 2025 19:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 31.42.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:13:4c:44:cd:9f:d5:5c:cb:62:72:75:44:b1:76:4c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: May 27 19:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90ae980ca8452b43b86553d888a6e7af03fa87a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:b0:d9:b3:50:1c:58:4f:b3:92:c0:25:9c:
13:6c:e8:4e:e2:df:f9:1a:98:6d:86:f7:21:40:7d:
7a:4a:b1:e0:15:23:08:f5:76:d1:84:c2:09:35:99:
90:dd:39:b8:27:6a:09:ca:53:4f:86:71:2c:32:e8:
e6:e3:6e:40:f1:b9:09:da:3a:1e:eb:c2:2b:72:a2:
c1:4f:e1:5d:0f:36:bd:2c:64:62:81:8d:cc:b7:cc:
b6:24:e4:c9:e9:90:e4:f2:1f:d5:01:57:91:df:e1:
7a:73:f8:d8:7f:9f:d0:2b:f2:a8:27:78:d9:47:f5:
c3:f0:f3:74:93:cf:b1:1d:fb:69:5a:b2:ea:1a:1a:
24:8f:14:44:be:50:e5:f0:00:af:dc:32:d4:fb:e9:
b7:8a:fb:31:ea:34:53:07:59:85:1c:f9:c4:7b:b7:
00:4f:53:97:78:88:cf:b3:51:b5:35:a5:25:9a:cc:
2a:e2:ad:f9:ff:09:aa:48:7a:7d:60:75:cf:eb:04:
59:4c:c3:6c:64:c9:7c:af:67:86:b6:27:04:e9:b5:
4b:f0:8c:bc:74:f3:66:84:49:ee:f7:8b:bc:4c:fb:
7a:8e:88:7d:25:a5:fd:59:68:72:9f:25:bd:45:eb:
31:da:55:f3:c9:c8:34:6d:9f:67:9e:4b:d3:be:70:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AE:98:0C:A8:45:2B:43:B8:65:53:D8:88:A6:E7:AF:03:FA:87:A8
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/kK6YDKhFK0O4ZVPYiKbnrwP6h6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.121.0/24
Signature Algorithm: sha256WithRSAEncryption
66:56:93:6d:e8:e9:0e:13:67:60:5c:cb:df:94:58:d5:33:be:
27:65:46:40:47:09:12:ed:1d:f9:d7:b2:6d:9e:27:18:29:27:
da:ec:d2:f8:19:ce:39:f2:ae:71:4b:1c:57:a0:e6:f2:a9:05:
f0:99:78:02:05:00:d0:09:8a:2f:b6:b2:d6:68:d1:5f:29:18:
18:51:d5:16:95:66:bc:5e:db:f1:15:b2:4d:00:68:b7:a8:ae:
14:54:f6:34:1b:23:3f:47:84:b5:44:67:fd:57:28:d8:ae:b6:
26:97:48:a3:01:81:82:7b:bc:b5:b4:d6:d7:a0:ea:73:74:d6:
d7:8a:98:4c:16:cf:bd:ff:c2:c6:9f:d4:40:b6:be:01:e9:a2:
29:9f:d6:83:71:5f:0c:2b:02:8f:9b:e0:cf:dd:72:19:a1:44:
d4:be:d7:ea:de:68:dd:d2:47:77:d4:fd:0c:9e:b6:dd:e6:1c:
eb:32:91:34:cb:e6:96:fe:9a:ca:c2:c1:10:24:53:f3:29:48:
04:99:96:57:e8:81:cf:d5:f9:8f:31:66:29:91:40:0f:a7:08:
52:b0:74:aa:d0:0a:61:9b:c7:65:8d:25:5b:ee:02:8c:5b:1f:
85:da:a8:d4:7f:1a:9f:e0:48:e8:cd:de:9e:cc:35:b8:ac:88:
d3:92:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:13:28 2025 by rpki-client