Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/U39msWOqgwaliq8DKMspRhKQ3Kg.roa
File: U39msWOqgwaliq8DKMspRhKQ3Kg.roa (raw, json)
Hash identifier: Z6S+9hFUTMzmzmKnTFgFfim8JmWqS4uAPgj1Z/Z4oQ8=
Subject key identifier: 53:7F:66:B1:63:AA:83:06:A5:8A:AF:03:28:CB:29:46:12:90:DC:A8
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 01970BA41FCF788A319B56A06A91880217FF
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/U39msWOqgwaliq8DKMspRhKQ3Kg.roa
Signing time: Mon 26 May 2025 08:09:54 +0000
ROA not before: Mon 26 May 2025 08:09:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60443
IP address blocks: 31.185.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:a4:1f:cf:78:8a:31:9b:56:a0:6a:91:88:02:17:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: May 26 08:09:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=537f66b163aa8306a58aaf0328cb29461290dca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:95:88:23:5e:23:29:5d:91:64:35:06:55:
17:26:37:8d:a6:fd:c3:74:ea:e9:83:fb:ac:70:cf:
0b:6f:13:f4:96:5d:05:d5:5a:e5:63:72:52:95:c9:
db:e9:70:9a:5e:58:9f:6b:c4:26:90:ad:f2:1c:08:
81:98:ea:b7:27:0d:62:29:9e:ad:0e:a7:2f:fc:cc:
5e:ce:9e:19:d8:1b:ca:ab:fa:92:b4:3c:ab:23:a4:
b4:10:53:44:fc:4f:7f:db:41:67:7d:5d:dc:d5:8e:
0b:41:3e:04:99:88:51:cc:11:91:dd:19:23:88:c9:
44:5d:31:ff:67:eb:04:7a:f3:77:c7:f1:0f:0e:6a:
6f:91:05:df:0a:c3:66:3b:eb:4e:8e:a6:79:92:27:
d0:43:bf:de:a7:96:20:dd:5a:2a:e7:9e:bc:0f:00:
fd:87:82:b4:ed:46:e2:00:65:0a:ac:28:9e:c1:86:
14:ec:7a:7a:6e:04:81:41:84:8e:d3:a4:0d:45:85:
8b:2c:f1:31:70:4d:ad:b6:1c:1a:80:5d:30:d2:84:
3d:17:d3:68:65:90:79:56:ff:40:66:5c:d4:e9:6c:
ce:9e:0f:40:3b:e6:ac:91:29:90:35:cd:75:e0:bb:
5e:a7:77:f9:cc:ec:8d:8d:98:d4:ca:15:cb:71:aa:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7F:66:B1:63:AA:83:06:A5:8A:AF:03:28:CB:29:46:12:90:DC:A8
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/U39msWOqgwaliq8DKMspRhKQ3Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.101.0/24
Signature Algorithm: sha256WithRSAEncryption
19:fe:30:a8:35:2d:fe:11:6a:1e:92:c6:9b:6c:20:0c:35:1c:
87:c4:63:54:ac:00:9c:e6:66:12:f3:69:66:46:25:25:e8:18:
57:f6:81:b3:43:d8:16:e0:fb:e2:76:8f:01:50:0e:d0:a7:50:
b8:a7:f9:c9:7f:6e:4c:2c:25:62:96:1c:0a:a9:f6:a2:93:6f:
1a:7d:8b:1f:fb:98:66:20:bc:9f:19:32:1c:75:d4:5b:35:bb:
7c:50:57:9a:d3:f0:93:8a:d1:c2:e1:e0:e4:d0:6f:3c:d5:2c:
77:5d:ca:40:fa:3e:f1:5f:43:16:54:0d:14:9b:e0:4f:6a:ae:
94:f3:96:e7:3e:fd:1e:6a:36:5c:db:e9:8a:44:a9:a9:da:ad:
68:54:11:1d:94:58:8a:52:50:8a:e1:eb:e7:ba:35:4c:e4:cb:
cd:70:08:4f:86:ef:ac:a5:e7:c3:79:6e:47:48:9a:14:cd:4c:
b7:8c:69:a6:c0:cd:d3:56:74:ea:c6:f9:0b:2c:fa:b1:9c:21:
ce:0f:4d:50:2c:3b:27:79:8f:37:4c:39:5d:c8:cd:32:67:da:
8c:00:36:4d:c0:1c:2e:ed:d0:0b:15:0f:47:0f:25:03:67:34:
c8:d2:95:c5:87:42:e9:34:28:21:ba:65:54:d4:76:83:65:fc:
09:9e:23:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:48:24 2025 by rpki-client