Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/3e9xcybUyOgWOmdj2KT0VPc-IQ4.roa
File: 3e9xcybUyOgWOmdj2KT0VPc-IQ4.roa (raw, json)
Hash identifier: h6OpcAY2hGkLVmHjk3z97L6JK9iEJZ7vz8cORcaFzmM=
Subject key identifier: DD:EF:71:73:26:D4:C8:E8:16:3A:67:63:D8:A4:F4:54:F7:3E:21:0E
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019764CBA79705865BBE92E9BFC6A06408F7
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/3e9xcybUyOgWOmdj2KT0VPc-IQ4.roa
Signing time: Thu 12 Jun 2025 15:39:17 +0000
ROA not before: Thu 12 Jun 2025 15:39:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398478
IP address blocks: 222.167.192.0/21 maxlen: 24
222.167.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:cb:a7:97:05:86:5b:be:92:e9:bf:c6:a0:64:08:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jun 12 15:39:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddef717326d4c8e8163a6763d8a4f454f73e210e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:61:06:f6:7b:ea:08:df:5a:06:e5:99:f3:
ae:d7:52:ec:f0:09:f1:6b:7d:c2:06:36:13:d3:b6:
ba:21:17:d0:7b:96:64:dd:9f:99:58:94:a4:5b:27:
4b:ba:c0:e7:e1:8e:21:aa:94:db:23:4c:9a:fa:53:
e0:cd:d8:b0:e0:91:78:01:0e:2d:4e:32:97:37:1c:
f5:5c:7c:9b:7b:88:e5:b7:89:49:03:01:38:a5:8c:
08:e2:81:2a:73:1f:d9:c0:cb:59:22:b6:89:c1:27:
fe:0d:9e:82:75:4e:e5:66:36:c4:43:e1:2c:0f:b4:
7a:a9:f0:34:82:ff:41:98:e2:89:71:ff:21:07:b3:
66:4e:2a:f3:e3:f0:cc:a8:72:31:c0:3e:0f:d9:53:
fe:6d:e4:a4:c0:3d:33:e7:05:b7:10:ab:c2:e8:f9:
2c:b0:07:a4:b5:8f:8d:c7:08:8b:fc:f4:2e:89:73:
8c:59:5c:f4:79:4c:91:9d:90:55:75:46:cc:50:13:
77:5e:66:72:3c:24:2e:a4:d6:1d:c3:e9:d1:9e:5f:
ec:9f:8e:c4:6a:ef:a5:b6:97:2b:4b:36:cf:e9:a4:
f8:ca:b2:cb:40:10:a5:72:c9:d5:dc:9e:e7:b3:65:
c2:78:73:46:22:c9:37:bf:e7:a4:10:8c:18:0f:02:
f8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EF:71:73:26:D4:C8:E8:16:3A:67:63:D8:A4:F4:54:F7:3E:21:0E
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/3e9xcybUyOgWOmdj2KT0VPc-IQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.192.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:5e:f8:b0:16:db:a6:ec:fa:d6:6c:65:a0:96:2c:a3:74:de:
88:08:4c:98:07:cd:f6:f1:eb:6b:a4:a2:f2:7b:4b:08:1d:a2:
88:0e:cf:f1:1f:bd:63:2c:2b:5e:aa:d9:ea:7e:08:ad:70:ea:
c1:cf:10:9c:34:2d:3e:56:07:93:c9:7b:bf:4b:2f:ad:1a:79:
87:78:69:51:48:a4:4b:1f:47:a1:ad:c0:a4:31:88:c4:0d:91:
01:d9:98:f0:22:f6:11:2a:06:6e:fa:e7:52:dc:e2:32:6f:ff:
1f:15:2d:6c:43:a0:05:f7:36:bd:67:c4:92:1e:5c:69:0c:1d:
eb:68:92:1c:da:1a:07:27:70:da:82:7e:2f:df:a7:8f:d4:98:
e5:02:f6:68:29:06:b4:13:7e:bc:76:de:2a:47:e5:cc:5f:cf:
03:59:f2:78:6b:8e:64:9d:62:04:56:dc:80:2a:49:92:d6:9d:
88:ff:71:ef:4b:7d:72:af:28:57:4d:55:7f:aa:56:93:83:f7:
4e:5f:33:7e:7f:bc:c0:bb:7b:bc:55:c8:81:d2:72:be:dc:2a:
04:de:f9:96:f2:46:2b:ea:f7:96:17:d9:70:73:3f:02:f7:60:
79:19:99:a9:2c:28:3f:3e:71:13:97:a9:1f:f3:ea:0f:39:96:
67:19:52:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 02:45:09 2025 by rpki-client