Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/w1BzHYlYCb3EG4ztspZKX_15RAY.roa
File: w1BzHYlYCb3EG4ztspZKX_15RAY.roa (raw, json)
Hash identifier: ASsa3u4RFIDCrpyjiaJAOUJvMGU5bhKQs1/vB/xTB6w=
Subject key identifier: C3:50:73:1D:89:58:09:BD:C4:1B:8C:ED:B2:96:4A:5F:FD:79:44:06
Certificate issuer: /CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7
Certificate serial: 019715EA6F271C907B9A9F33B9826AFE31E2
Authority key identifier: 96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/w1BzHYlYCb3EG4ztspZKX_15RAY.roa
Signing time: Wed 28 May 2025 08:02:54 +0000
ROA not before: Wed 28 May 2025 08:02:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214202
IP address blocks: 195.8.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:ea:6f:27:1c:90:7b:9a:9f:33:b9:82:6a:fe:31:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7
Validity
Not Before: May 28 08:02:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c350731d895809bdc41b8cedb2964a5ffd794406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:7e:4c:ff:4b:6b:24:d1:11:da:fc:d2:2e:
39:03:08:b8:54:cc:5c:db:06:0c:90:72:23:70:1e:
19:c8:fa:c0:0a:b6:ee:49:a6:6b:52:64:0a:bc:db:
40:32:77:ed:3a:7d:1f:98:71:db:33:2d:80:f7:80:
ae:ed:d3:f8:ca:34:c7:b2:10:46:ad:87:a3:28:4b:
2a:8d:83:9b:f7:03:72:17:f3:8c:9d:41:fd:33:6f:
cb:0d:ec:4a:de:a9:c0:c9:e3:fd:bd:2f:ed:b4:e6:
a4:ac:f9:14:98:9b:4a:3a:44:59:c7:30:52:48:0a:
60:f3:e2:bb:df:f1:83:27:3b:42:b6:de:08:cf:06:
6a:e4:59:a9:5f:4e:ae:d1:d7:f6:47:a7:36:3c:ae:
d2:4f:f8:e8:ad:35:c3:be:22:1a:19:15:23:ce:7a:
9b:65:dc:e9:47:0d:a0:49:18:2d:47:5c:17:d8:25:
31:60:c0:24:71:d4:1b:58:d7:46:19:1d:a9:06:67:
75:e1:f9:3a:6b:e0:ee:60:4f:ef:cc:60:69:1b:9e:
dd:cb:4f:61:ee:d6:e8:e9:ea:62:98:39:e3:2a:cf:
d9:3b:49:30:02:65:ae:b6:12:d6:1c:d9:36:75:ee:
13:59:97:8a:7d:30:69:83:7a:de:e6:d7:e1:7d:75:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:50:73:1D:89:58:09:BD:C4:1B:8C:ED:B2:96:4A:5F:FD:79:44:06
X509v3 Authority Key Identifier:
keyid:96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/w1BzHYlYCb3EG4ztspZKX_15RAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.98.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:eb:f0:a7:62:d8:59:b3:d1:35:ec:0c:b7:2c:5a:8f:07:49:
37:e0:cf:96:65:91:64:19:be:17:b0:f4:dd:3d:83:d5:89:0a:
f5:58:25:fa:e8:4e:6e:63:78:84:a9:4c:64:5e:87:70:1a:4e:
a3:10:37:24:85:d2:05:bd:30:27:b2:01:26:ea:5d:e4:42:48:
eb:58:e4:f8:51:c6:c6:f5:6a:f4:66:a6:d9:ed:b8:99:03:ae:
cb:39:ab:22:90:79:9a:c8:d2:a6:4a:c7:1b:44:7e:00:34:6c:
8e:5a:c8:0d:56:1e:0a:62:05:9e:20:d5:1c:8c:21:0e:99:c9:
b4:e2:5e:13:e9:ed:22:0a:ea:f0:95:bf:b8:4a:22:05:58:80:
1c:84:4c:f2:c1:25:e6:15:fc:96:7a:b9:d7:26:00:9d:20:28:
35:80:2a:8e:ba:27:cb:73:1b:f3:32:dc:cc:b2:c9:37:fc:4c:
c0:78:d3:da:55:d0:44:f4:39:5e:57:72:bc:06:78:78:f7:1e:
b0:36:03:a0:1d:a5:7c:3c:c8:96:48:e0:71:02:72:ea:da:72:
72:39:a4:91:7c:30:1d:80:99:8a:40:32:de:28:37:32:00:23:
a6:34:6a:0d:8b:47:f0:44:2f:5b:d4:5c:9b:e0:b3:fb:fa:f1:
9d:31:19:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:46:56 2025 by rpki-client