Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/J3PL6Vrh4ZHj4LwmfQzc6DgLNEg.roa
File: J3PL6Vrh4ZHj4LwmfQzc6DgLNEg.roa (raw, json)
Hash identifier: Zf2Jum+GGhLoMiMhVcTBQEVg+bg1hIoaPd5fJz/kISg=
Subject key identifier: 27:73:CB:E9:5A:E1:E1:91:E3:E0:BC:26:7D:0C:DC:E8:38:0B:34:48
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01971C40C0A016CE92B9CC3265BA9A41AA88
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/J3PL6Vrh4ZHj4LwmfQzc6DgLNEg.roa
Signing time: Thu 29 May 2025 13:34:55 +0000
ROA not before: Thu 29 May 2025 13:34:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 45.9.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:40:c0:a0:16:ce:92:b9:cc:32:65:ba:9a:41:aa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 29 13:34:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2773cbe95ae1e191e3e0bc267d0cdce8380b3448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:a3:b9:6c:44:93:fb:6d:f5:f8:1e:5c:b4:
e4:09:f1:09:14:88:73:e3:7c:3f:af:a8:4c:56:1f:
bc:ad:f9:7b:9b:3d:99:b7:0c:00:c8:d8:4c:0b:d7:
12:f2:34:8a:94:8f:f5:09:41:06:3c:4b:f3:a4:66:
0b:12:2e:18:23:6d:72:7f:01:7e:26:3f:b4:8d:d6:
d8:b7:d1:9b:f5:36:a6:b1:c1:d7:03:a1:7a:88:6e:
13:fe:4e:f7:5c:0c:76:81:68:5a:23:ca:c2:21:a1:
ea:6b:cc:7f:60:d0:4f:2d:3e:71:33:a8:40:a3:85:
70:b6:16:69:a5:7d:4c:2e:d4:69:82:e5:ff:f1:76:
2a:8e:05:e0:77:55:39:c4:10:f4:96:1a:4b:c3:2d:
da:b2:59:d1:52:6c:93:e4:cd:80:4e:26:b2:db:ef:
2f:53:44:68:2b:48:30:a7:0f:5c:21:da:17:cd:e7:
d3:52:27:09:e9:2d:80:6a:6b:b6:2e:fc:52:a7:52:
4c:5e:68:32:a4:03:96:18:41:f8:1e:51:74:e9:2d:
d3:d9:2c:0b:50:01:e2:d9:e9:76:7b:67:49:bb:b0:
47:c7:23:d0:16:c2:b0:58:8f:f8:bd:c0:b2:71:e5:
b8:8c:77:24:97:5b:b8:b3:03:c6:ff:a3:f5:a2:88:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:73:CB:E9:5A:E1:E1:91:E3:E0:BC:26:7D:0C:DC:E8:38:0B:34:48
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/J3PL6Vrh4ZHj4LwmfQzc6DgLNEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:3e:a3:48:0d:e4:c2:5c:7f:f3:f4:9b:7b:f2:8c:bf:de:e2:
fb:b1:89:ea:f8:af:c5:f9:e2:a5:d3:24:65:2e:2b:5d:b0:18:
9d:9f:10:6a:0c:df:95:f3:a8:30:15:47:c2:eb:06:7d:c6:d6:
17:48:1f:eb:93:fd:82:c3:15:90:16:05:df:c0:d5:3f:a3:da:
77:46:81:67:c6:04:26:5b:30:a2:39:76:08:94:8f:fa:ae:89:
b2:ac:6d:fc:ce:0f:ad:4f:e2:8c:d4:54:2a:c4:d5:76:08:af:
b7:cf:75:56:1d:c6:46:ed:69:22:b9:7e:21:85:97:bd:04:84:
e4:67:4d:cc:bc:b0:da:5f:5b:aa:67:75:9c:a9:e6:a1:96:91:
6c:f4:4b:bd:0e:33:73:cb:1d:90:7a:ce:dd:2d:1e:83:3e:31:
be:d9:5a:ce:65:68:cd:da:c3:38:d8:00:81:ad:cc:0c:fe:2d:
1e:0d:b3:83:3c:47:21:f4:27:8f:91:aa:76:68:06:50:a8:88:
9c:a0:84:54:00:16:c3:14:54:db:9d:47:4c:20:55:f3:ae:5c:
90:da:07:6e:2f:f1:64:ef:84:c3:58:fe:dc:18:a7:8e:e3:2a:
a6:d5:f7:f5:36:94:ee:e0:1a:94:9a:3f:c6:ae:39:2e:a3:ec:
1c:40:90:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:43:33 2025 by rpki-client