Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/RXOWuzIO3GP1EkbIwvuqPcEpiDs.roa
File: RXOWuzIO3GP1EkbIwvuqPcEpiDs.roa (raw, json)
Hash identifier: vXTbGxFCLWqp0CNvIIccpXNG33skDlTQkxc0RSBrijk=
Subject key identifier: 45:73:96:BB:32:0E:DC:63:F5:12:46:C8:C2:FB:AA:3D:C1:29:88:3B
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01973A85363D71B3CBAF5E0663CB2CA925BC
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/RXOWuzIO3GP1EkbIwvuqPcEpiDs.roa
Signing time: Wed 04 Jun 2025 10:38:18 +0000
ROA not before: Wed 04 Jun 2025 10:38:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207416
IP address blocks: 178.236.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:85:36:3d:71:b3:cb:af:5e:06:63:cb:2c:a9:25:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jun 4 10:38:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=457396bb320edc63f51246c8c2fbaa3dc129883b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:9d:e9:f4:47:20:66:c7:12:7b:65:d6:bb:
b7:d1:df:34:ad:9a:44:7c:1d:dd:83:a6:5d:9c:a8:
d9:a2:74:bf:01:60:a3:18:46:b1:11:bf:4c:a9:bd:
8e:10:9f:d9:9c:9a:05:9a:e6:ee:27:3d:5d:0d:93:
75:16:93:56:9b:33:2f:0a:cf:3f:6a:8a:4e:b3:d9:
34:72:f6:ac:0d:ed:70:7b:6d:bb:2a:f9:81:30:00:
fa:5b:c3:3f:f5:27:8d:82:8d:d2:2d:18:52:3e:ce:
1e:31:bf:ba:12:bf:8e:21:dc:3d:1a:a5:5f:97:80:
55:86:a6:b8:a9:2d:29:30:1f:c2:01:4b:d4:8c:d1:
88:1e:7a:6e:f9:65:2b:a6:7b:7d:9b:8b:ea:2a:b0:
e6:62:ef:20:e9:0c:6e:05:8b:58:27:1a:50:ae:63:
ec:81:56:ce:f6:06:5a:11:00:7b:8a:8b:29:2b:b3:
01:e4:8a:69:ea:e0:c9:f7:d8:e4:b3:34:22:1e:d3:
87:22:31:a1:56:5d:2c:0d:7f:91:d0:9a:11:9d:be:
d9:b9:35:67:c3:78:0c:df:3e:df:af:b7:25:48:1b:
0d:15:c5:95:e4:a0:86:b8:9f:e8:aa:84:10:d1:d2:
c8:b2:c4:3b:bf:9a:12:e2:e8:87:6c:69:a1:de:ef:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:73:96:BB:32:0E:DC:63:F5:12:46:C8:C2:FB:AA:3D:C1:29:88:3B
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/RXOWuzIO3GP1EkbIwvuqPcEpiDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:5e:11:9d:fd:7e:ad:fa:d8:73:c9:1b:c5:ba:84:2d:4f:33:
78:24:c1:88:05:20:c4:bb:f0:ec:8c:ab:4f:a9:8b:41:1b:18:
21:da:dc:a4:af:18:03:a1:e7:0c:52:2d:a3:b8:92:31:b6:29:
11:26:f2:9b:9b:0e:87:1f:95:fd:9f:fb:7b:75:7e:5f:97:f7:
85:83:fe:4b:f9:6c:4d:8f:7b:63:6b:93:b1:c7:6c:1c:5c:0d:
fc:b9:ce:16:61:59:c1:88:b0:92:ae:63:6f:2b:c6:10:2e:c1:
ac:3d:56:7b:5a:33:ef:d6:9e:62:56:d2:9e:62:fe:62:ea:99:
a1:30:68:d0:82:36:ab:f9:b9:1c:ee:ab:4e:b3:dc:79:db:01:
19:93:0c:0a:b9:c4:3b:f2:92:77:05:22:8f:36:82:cd:61:1a:
34:79:48:d9:b5:8c:0c:68:0e:45:22:de:1f:a6:ce:a9:f0:4a:
4b:d4:e8:91:5a:f0:55:70:2e:d3:af:ea:23:83:3d:d9:5f:0f:
1d:a8:17:68:f2:ba:37:8f:42:2d:52:49:ff:e4:8d:21:23:ea:
db:c8:ae:25:4d:ad:98:7c:7e:90:d6:75:83:5f:ef:01:7e:57:
ab:d2:b8:6b:bd:6b:2f:5a:ea:7b:1b:bf:3e:86:98:7f:ee:b8:
5c:7a:8a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:29:31 2025 by rpki-client