Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/bDUFsRxvOWilElkS5MfCCIWk1XQ.roa
File: bDUFsRxvOWilElkS5MfCCIWk1XQ.roa (raw, json)
Hash identifier: mAKIKAHs72Ncw5cLpVcqx2omnJ6e82AfVTrRpnwNpJU=
Subject key identifier: 6C:35:05:B1:1C:6F:39:68:A5:12:59:12:E4:C7:C2:08:85:A4:D5:74
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 01969FBB3D1EF4E6F4200F8F6D1BE72BC0A7
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/bDUFsRxvOWilElkS5MfCCIWk1XQ.roa
Signing time: Mon 05 May 2025 09:16:10 +0000
ROA not before: Mon 05 May 2025 09:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 57.250.40.0/24 maxlen: 24
57.250.42.0/24 maxlen: 24
57.250.48.0/24 maxlen: 24
57.250.50.0/24 maxlen: 24
57.250.56.0/24 maxlen: 24
57.250.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:bb:3d:1e:f4:e6:f4:20:0f:8f:6d:1b:e7:2b:c0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: May 5 09:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c3505b11c6f3968a5125912e4c7c20885a4d574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:cb:0d:23:dd:e0:65:54:10:c9:ed:91:a9:
78:f6:ce:ea:e1:b1:90:72:d8:a7:18:1f:7e:09:9a:
cc:a0:08:6c:b3:41:3e:d8:52:41:39:8a:bd:eb:96:
79:ef:44:c7:f7:7b:a0:d0:20:ac:5e:df:cd:4d:e2:
7e:ba:14:1c:d6:34:19:3d:29:32:dc:7c:ad:10:13:
45:fe:df:89:04:07:92:80:c5:e7:f2:ae:84:72:11:
96:1c:16:39:5e:74:c5:14:9b:92:bf:2a:22:df:3e:
65:d5:08:5e:72:11:eb:78:e6:50:6b:fa:7c:c1:ba:
e2:db:88:bd:36:56:bb:f2:80:b5:5f:f4:60:59:ba:
68:03:ce:f1:b3:4e:d1:f1:27:c3:57:99:84:87:3e:
d0:13:f1:48:08:80:a8:8d:48:14:5c:ca:77:72:93:
b5:13:12:d1:6c:a6:87:13:2f:ad:bc:24:5d:ae:61:
ee:64:c4:c6:86:6d:3a:a5:e5:19:e4:af:8e:1f:48:
d2:61:d3:6e:29:15:e6:fe:91:1f:69:98:15:20:87:
5e:7b:92:e5:23:df:fd:f1:00:e7:68:3a:7f:39:08:
21:7b:8e:19:d5:a8:1e:c5:4e:13:2b:03:77:2e:fd:
b7:04:30:a8:02:59:01:cd:bf:1f:ff:c1:9e:dc:f4:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:35:05:B1:1C:6F:39:68:A5:12:59:12:E4:C7:C2:08:85:A4:D5:74
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/bDUFsRxvOWilElkS5MfCCIWk1XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.250.40.0/24
57.250.42.0/24
57.250.48.0/24
57.250.50.0/24
57.250.56.0/24
57.250.58.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:d4:3d:5e:cc:a8:29:bc:29:b1:ff:97:93:b8:52:f1:13:54:
00:ff:6c:ab:ce:df:c7:f1:41:1f:fa:9c:6b:1f:09:d3:d9:87:
40:8b:04:bd:99:7c:9a:fb:fe:42:1b:8c:87:5d:11:f8:5d:4a:
2a:d8:eb:9a:b3:4d:d0:84:15:59:b1:35:3e:2e:8d:87:fd:cb:
90:fc:34:c6:46:ad:99:ce:94:9c:00:e8:f1:a4:b7:4e:d9:34:
30:d3:d1:3d:92:a9:80:53:11:ba:9e:3e:fe:42:02:cd:2a:7f:
62:a9:f1:a0:98:73:49:e0:27:1c:5c:fc:77:6d:12:af:9e:1e:
33:c6:46:21:48:95:c7:41:df:c8:7d:08:a4:bc:94:2e:ee:7b:
25:11:ec:6a:ed:d9:6d:fd:28:d8:6f:d8:88:e1:bf:61:58:a1:
c7:65:2c:fe:e0:71:a3:27:d4:16:15:29:a2:05:3a:ad:f5:54:
50:0f:b5:66:ea:4a:0a:89:7c:91:5a:b1:60:1d:01:37:b4:2b:
ef:97:26:bd:40:7d:b0:c9:3a:e8:d4:eb:d0:b5:aa:47:12:50:
ae:01:e3:34:09:be:33:90:b2:34:96:05:c3:a7:1e:1d:55:73:
5a:1c:2c:e2:54:ed:57:2a:01:aa:be:9c:36:3e:1b:89:9c:ae:
18:8c:43:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:28:40 2025 by rpki-client