Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/FD5eZ9WTnwJ5n2l_V7-DFMkDAmk.roa
File: FD5eZ9WTnwJ5n2l_V7-DFMkDAmk.roa (raw, json)
Hash identifier: 5X+F3zJhX8DlISb93S4qdF1bDYjU/DI8wtFO7omMZgs=
Subject key identifier: 14:3E:5E:67:D5:93:9F:02:79:9F:69:7F:57:BF:83:14:C9:03:02:69
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 0197465706F5F7850F533BEA86CE952D604E
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/FD5eZ9WTnwJ5n2l_V7-DFMkDAmk.roa
Signing time: Fri 06 Jun 2025 17:43:17 +0000
ROA not before: Fri 06 Jun 2025 17:43:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 146.19.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:57:06:f5:f7:85:0f:53:3b:ea:86:ce:95:2d:60:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jun 6 17:43:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=143e5e67d5939f02799f697f57bf8314c9030269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:17:0e:9b:0c:32:73:b3:92:1e:c6:8b:c1:f3:
25:38:be:ef:3a:f0:9e:d2:4f:bc:25:23:0e:a8:b7:
91:e9:cd:c0:84:0c:af:d1:94:71:06:8f:75:2e:63:
35:30:f3:c6:f7:3a:57:2a:53:32:9d:9c:72:73:4a:
1d:20:4f:0b:94:f4:48:d2:b6:42:41:48:92:69:b0:
c3:80:7f:73:e2:8d:55:b9:69:31:4d:99:48:9b:59:
0c:3e:86:41:d9:63:51:34:86:46:39:2e:22:a9:7c:
2c:58:1e:d0:05:88:39:0e:a4:42:76:2b:ab:e9:8d:
20:b3:ed:ca:bc:90:8a:c8:3e:fd:ce:01:8d:ac:6e:
f8:31:e9:17:7f:e3:ed:9b:89:d0:f8:7d:fb:a9:d5:
ec:52:1e:e0:54:3c:0d:2a:48:df:c3:01:a5:75:71:
42:f2:f9:c6:85:e1:63:50:26:49:26:be:3f:b1:0a:
39:ce:7e:f9:a3:51:cf:b2:4f:65:82:56:45:4d:4d:
08:be:35:79:49:9d:94:af:c5:c5:a7:06:09:18:d5:
36:2f:4f:82:0f:78:c4:40:cf:e2:73:7c:97:41:3f:
62:c9:99:cd:fb:8f:3c:95:5f:3a:5e:d4:41:72:93:
4b:e9:fd:e4:f7:15:58:ad:46:7a:d4:05:94:72:e9:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3E:5E:67:D5:93:9F:02:79:9F:69:7F:57:BF:83:14:C9:03:02:69
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/FD5eZ9WTnwJ5n2l_V7-DFMkDAmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:fe:63:4a:e0:99:43:77:27:21:3e:c8:66:b0:b5:13:82:d9:
40:f6:68:4c:cb:aa:72:9f:c6:cb:68:85:d3:a2:b7:54:c1:86:
77:ea:d4:6b:63:e3:58:74:7e:ef:4c:bf:15:22:f7:1b:2d:f2:
4c:15:14:f7:d9:c7:18:90:10:d2:5a:79:14:9c:39:d0:3a:5c:
a3:69:79:53:00:b4:ee:7a:f5:6c:2b:f5:f2:d1:a6:90:be:27:
32:47:74:b7:6c:eb:32:34:d5:e6:8c:e2:66:f0:fa:8d:6f:63:
a6:b0:3b:1f:a7:f1:cb:cc:06:76:cd:dd:2e:60:94:b7:87:b9:
8a:77:52:da:f9:1c:f5:8b:07:10:37:fd:2e:4c:7d:0b:b1:19:
41:10:7b:c1:5b:10:d7:5f:c8:c9:52:9a:75:ed:a1:cb:f4:05:
71:fe:aa:e0:db:de:26:66:2b:7e:25:c4:8c:44:78:af:fc:06:
78:97:9b:99:a8:7b:92:e8:dd:aa:a3:88:18:38:ba:fa:24:66:
36:88:ca:15:35:dc:b1:dc:69:27:81:4f:b7:b5:19:2b:3a:73:
3c:78:e7:10:ab:1a:b4:3a:a1:50:ce:ea:42:4f:55:fb:6b:a2:
ea:20:1d:0f:65:cf:79:1a:a3:b7:b8:f6:9d:43:a6:a7:e0:59:
53:0e:73:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:42:47 2025 by rpki-client