Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/p02sjha6oluTWKotOKPITJ53VlU.roa
File: p02sjha6oluTWKotOKPITJ53VlU.roa (raw, json)
Hash identifier: rLFuslHglQh990YEEpEUg7xz9pfaxlb0KsezlTb7ZC4=
Subject key identifier: A7:4D:AC:8E:16:BA:A2:5B:93:58:AA:2D:38:A3:C8:4C:9E:77:56:55
Certificate issuer: /CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Certificate serial: 0196EDB02B08EDF775BE7B1D522C3A225B54
Authority key identifier: 37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/p02sjha6oluTWKotOKPITJ53VlU.roa
Signing time: Tue 20 May 2025 12:34:27 +0000
ROA not before: Tue 20 May 2025 12:34:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197136
IP address blocks: 91.216.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:b0:2b:08:ed:f7:75:be:7b:1d:52:2c:3a:22:5b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Validity
Not Before: May 20 12:34:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a74dac8e16baa25b9358aa2d38a3c84c9e775655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:de:28:1b:98:ea:d6:2c:89:19:b7:ce:a4:
c8:d8:ac:1e:e7:a0:97:ba:7f:5e:cd:92:dc:1d:53:
54:df:fa:78:21:54:ae:10:cd:9e:a9:0b:f0:2c:f9:
23:29:ff:7f:e3:63:4a:f8:23:4c:da:6e:92:98:2d:
dc:41:7a:c4:bc:13:52:f4:2a:0d:2a:f9:67:2f:3a:
9c:d8:80:dd:45:05:a1:09:dc:75:db:3a:30:fe:24:
29:10:c1:ac:65:9a:f4:b7:26:64:37:ff:99:42:2f:
21:4a:62:93:cb:f2:e8:29:84:40:24:dc:d0:dd:80:
13:ba:29:5f:cf:c5:9b:f4:35:60:46:25:51:2f:4a:
4f:d3:89:d3:90:3d:e8:52:c6:d3:65:cd:6f:7f:2c:
a6:a5:b5:11:ca:18:4c:7a:21:2f:5d:89:a0:e7:e8:
fe:5f:36:cd:94:45:43:de:7d:a6:d0:df:8c:31:db:
23:40:9c:02:4b:76:b5:dd:73:e6:22:ac:d3:28:7a:
57:be:7a:84:5f:55:46:a2:9d:17:f1:a3:01:43:49:
3d:bd:3e:e6:89:28:3a:45:76:df:ae:d0:59:2c:bd:
c6:c9:fe:92:96:89:f4:74:ca:c6:a8:1c:8c:4d:5c:
9d:10:4f:3f:8e:eb:a4:07:c5:d8:a9:6e:01:ee:fc:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4D:AC:8E:16:BA:A2:5B:93:58:AA:2D:38:A3:C8:4C:9E:77:56:55
X509v3 Authority Key Identifier:
keyid:37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/p02sjha6oluTWKotOKPITJ53VlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.51.0/24
Signature Algorithm: sha256WithRSAEncryption
29:46:3d:66:c4:33:26:a3:e3:59:81:fe:4a:56:82:ca:00:00:
84:76:79:4f:76:3c:68:5d:d8:9c:91:c0:1a:48:d0:74:7a:83:
ed:6d:e8:f9:8a:34:dc:ca:ac:9d:47:24:4e:5a:58:a6:f4:03:
3c:9f:89:16:cd:8a:55:3b:80:b2:65:1b:21:3b:69:6d:f4:06:
ec:5e:ce:9a:0f:c0:48:cf:84:7c:88:7f:24:a2:15:ca:2e:e5:
c6:bb:cf:8a:a7:59:9e:a7:7b:f3:e6:19:33:b3:d5:23:c8:b5:
7d:89:e1:48:d9:72:5b:ff:af:ba:b5:65:8f:0f:16:c0:13:24:
4a:fd:d7:b4:88:b4:7b:cb:4f:e8:e1:5e:ae:c0:5e:20:50:2a:
35:8d:93:50:f7:3d:87:fd:54:eb:32:b7:ae:36:18:96:e7:5e:
6c:c5:55:d7:70:0a:a1:9e:1f:df:90:7a:dc:80:ce:94:08:4d:
33:57:e9:7c:bf:66:b6:c0:1e:32:f5:03:3d:09:aa:af:00:b1:
d8:c0:ca:53:64:ee:bf:a6:d2:52:20:9b:61:03:c1:30:5d:d2:
4b:8e:13:74:1e:29:89:0c:22:14:06:b7:72:65:d8:bc:37:06:
10:b8:c0:8d:60:33:cc:1d:90:69:cf:95:3c:fb:10:6e:18:3b:
f5:2d:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:00:56 2025 by rpki-client