Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1ps_JXvHrVoFUPxYGp2BHP36Ztc.roa
File: 1ps_JXvHrVoFUPxYGp2BHP36Ztc.roa (raw, json)
Hash identifier: ta8CMfbMk29Fhndl6ZZIYNJy1DPsZd7Ckx7RxOALCt0=
Subject key identifier: D6:9B:3F:25:7B:C7:AD:5A:05:50:FC:58:1A:9D:81:1C:FD:FA:66:D7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0196EE024D374D65B248B41F1D685D70205F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1ps_JXvHrVoFUPxYGp2BHP36Ztc.roa
Signing time: Tue 20 May 2025 14:04:10 +0000
ROA not before: Tue 20 May 2025 14:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 109.204.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ee:02:4d:37:4d:65:b2:48:b4:1f:1d:68:5d:70:20:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 20 14:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d69b3f257bc7ad5a0550fc581a9d811cfdfa66d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:a1:f8:5c:72:8e:2a:37:c9:d0:6c:48:0c:
58:85:29:e6:21:3a:08:45:fe:78:11:09:87:af:c7:
2e:40:a0:bf:6c:02:a4:4b:72:c1:5c:bb:b3:a8:ac:
de:41:bf:21:99:e4:99:c9:06:01:bb:c1:66:31:45:
db:37:8b:d3:37:dc:22:cc:7e:7e:0e:f0:14:96:61:
f5:00:c5:dc:75:37:a3:85:d9:f1:87:84:33:85:76:
e1:d6:87:a2:12:3f:25:a2:a8:5a:7a:e4:1a:81:49:
a0:99:21:99:3f:3a:6a:a8:d4:11:84:e7:72:1d:8c:
53:d3:de:c0:41:51:1a:14:e2:9d:08:be:d7:14:6f:
a4:5d:f9:b5:35:1d:9d:9f:19:f1:33:58:b1:80:41:
f4:5c:5a:d5:40:d5:4f:34:a0:4a:53:63:84:57:40:
4b:35:d4:c6:55:26:f9:30:90:04:17:c1:80:be:e3:
e5:e2:14:94:3c:df:60:3e:35:62:1c:32:00:39:f6:
05:26:57:c5:b5:c1:ba:c6:e1:80:ef:f6:6e:e5:75:
bd:c4:67:0b:84:83:8d:d8:ca:00:28:81:bd:9b:bd:
22:5d:d7:96:33:90:f9:fc:84:6e:c0:60:be:11:0b:
88:e1:14:84:68:c4:26:74:36:f4:c7:6d:e9:f6:67:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9B:3F:25:7B:C7:AD:5A:05:50:FC:58:1A:9D:81:1C:FD:FA:66:D7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1ps_JXvHrVoFUPxYGp2BHP36Ztc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.204.104.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:9b:ba:54:1a:40:06:67:a5:22:51:f1:f6:5c:82:d3:6f:89:
75:c5:a2:f5:87:72:41:8f:27:6f:a4:aa:e8:71:65:02:0e:39:
86:83:c6:82:85:9e:4f:05:43:37:9b:ae:cc:e4:21:86:f8:87:
f7:00:0a:03:a7:7b:92:5e:e4:5e:9a:30:b1:e5:40:1f:eb:e8:
a5:78:43:33:ea:ac:56:ac:b4:1f:19:61:97:df:08:da:33:08:
df:1f:e3:b6:fa:21:ab:07:44:d6:59:23:bb:5e:d5:de:bb:81:
78:87:b1:12:59:b9:ef:e1:a3:90:16:a6:98:a1:4e:d9:08:48:
36:f8:86:5c:78:02:b0:75:14:1f:0d:a1:79:b3:6d:3e:a7:7b:
1e:30:85:07:97:65:a1:16:85:79:29:9c:34:25:1b:fc:81:d5:
0b:72:08:ef:3d:b5:47:04:13:ec:60:8c:71:a3:7c:4d:95:5f:
78:9a:6c:30:d1:b8:9d:fa:84:bb:8b:44:f2:f9:72:e0:06:ad:
1a:7f:43:b2:a6:b0:a0:2c:7d:7f:2f:92:59:12:6b:2b:bf:38:
38:3f:51:62:e7:76:08:8a:79:d6:08:6c:86:74:ef:31:6b:50:
ba:08:55:a6:fb:3d:1a:9b:12:03:5e:98:f4:61:43:35:d0:a4:
79:40:ff:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:18 2025 by rpki-client