Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/s74QcPj6WUCrRcJlfYROM44Z84I.roa
File: s74QcPj6WUCrRcJlfYROM44Z84I.roa (raw, json)
Hash identifier: PNzbrjH6p0ioPiYVsUKAMPyafTv5d3t0sO5Ii2EwxZo=
Subject key identifier: B3:BE:10:70:F8:FA:59:40:AB:45:C2:65:7D:84:4E:33:8E:19:F3:82
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 0197347E8B3B8CCEBCCE7754C3618B94C39D
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/s74QcPj6WUCrRcJlfYROM44Z84I.roa
Signing time: Tue 03 Jun 2025 06:33:17 +0000
ROA not before: Tue 03 Jun 2025 06:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41055
IP address blocks: 89.38.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:7e:8b:3b:8c:ce:bc:ce:77:54:c3:61:8b:94:c3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jun 3 06:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3be1070f8fa5940ab45c2657d844e338e19f382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:ca:e4:56:f7:fc:3f:0e:cc:f5:c0:8a:ab:
ae:4a:63:1d:85:9d:4a:6d:68:a3:b3:9c:8d:1d:d8:
d1:c6:aa:64:10:82:4d:52:5a:8d:2d:a4:5b:f3:3e:
73:16:89:66:51:e0:43:08:c8:d5:7a:77:a3:b0:ba:
8a:35:a6:18:94:95:65:fc:b1:3d:5c:ce:dc:56:7e:
55:3f:ef:2f:41:55:8d:e0:cc:68:b4:cb:14:17:8f:
03:b4:83:b8:a4:3a:7b:27:2d:16:9e:65:57:18:9f:
90:05:e4:56:98:19:d7:53:b4:2b:4b:1b:ef:af:62:
f0:4f:1a:43:c2:de:59:46:df:c9:19:1c:ec:e6:2d:
b1:f4:9c:8d:af:18:00:c6:b5:4c:56:92:d3:19:52:
ce:78:59:0a:4c:fd:c8:7f:0b:4a:15:fd:95:94:35:
43:02:e5:85:3d:21:86:59:8e:8f:1e:48:01:09:54:
11:6c:fc:48:50:b5:18:bf:c7:2a:92:23:dd:c7:52:
4b:c7:ef:eb:f4:fc:ff:4e:2c:bf:9b:4b:dd:c4:df:
2a:1d:f8:c0:a2:13:09:9e:fc:47:d4:52:5c:b5:fb:
c6:97:4d:78:a9:0c:bb:e4:90:eb:d9:34:67:36:aa:
1c:e7:70:e5:3a:af:30:7e:bf:ca:c8:61:ec:d7:8f:
af:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BE:10:70:F8:FA:59:40:AB:45:C2:65:7D:84:4E:33:8E:19:F3:82
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/s74QcPj6WUCrRcJlfYROM44Z84I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.27.0/24
Signature Algorithm: sha256WithRSAEncryption
53:3f:59:dc:2a:2b:1a:ae:f1:36:5c:47:05:01:0d:40:a2:f9:
3e:7b:c7:ba:f9:e9:b8:ee:31:71:03:4f:24:4f:0e:58:ec:70:
61:dc:88:e7:38:4b:dd:a2:bd:70:5b:c1:d0:98:93:90:01:dd:
cd:cf:8c:cd:c4:ff:44:19:b1:9e:fe:e6:53:9e:aa:2f:c4:0d:
6c:63:97:f9:22:7b:ca:4c:aa:d9:14:bc:d7:2d:5c:50:e7:0c:
bc:01:82:0b:c6:6b:7d:99:a7:53:dc:b8:a4:6a:35:14:c7:bb:
cc:a4:bc:0a:94:ed:47:42:9a:c1:03:e2:70:f9:23:97:cb:18:
c7:ec:8b:d7:6f:96:5b:ae:31:50:bc:1d:61:f9:14:34:76:52:
73:38:41:64:5d:e5:11:8d:65:bb:5c:74:af:13:cd:ea:79:f0:
0e:00:76:1c:f0:9f:65:62:52:f5:7a:b1:f5:be:7b:6e:3a:fb:
c6:5e:73:13:85:89:da:18:f6:37:1e:6c:a5:e7:f8:32:da:d0:
bd:3b:22:39:bc:87:e1:da:33:bc:c8:e5:86:f1:34:3f:2c:ab:
0f:f0:f3:17:99:ac:a2:ed:f8:31:e0:5d:7d:9b:41:15:b1:fb:
95:53:59:35:be:95:14:aa:c6:b5:15:b2:8e:cc:a5:64:c6:4e:
93:ab:45:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:55:47 2025 by rpki-client