Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/I11yOf8621A4bMVjivGCunNhodU.roa
File: I11yOf8621A4bMVjivGCunNhodU.roa (raw, json)
Hash identifier: zD+DtTuh65HplID/p8Q/zTlZEI94dke+hM79PxEcBgg=
Subject key identifier: 23:5D:72:39:FF:3A:DB:50:38:6C:C5:63:8A:F1:82:BA:73:61:A1:D5
Certificate issuer: /CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Certificate serial: 019744E6FB5125E105FE8A721FFAEA4CB497
Authority key identifier: DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/I11yOf8621A4bMVjivGCunNhodU.roa
Signing time: Fri 06 Jun 2025 11:01:17 +0000
ROA not before: Fri 06 Jun 2025 11:01:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205892
IP address blocks: 62.164.172.0/22 maxlen: 24
95.129.28.0/22 maxlen: 24
185.190.72.0/22 maxlen: 24
195.158.216.0/22 maxlen: 24
2a0a:540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:e6:fb:51:25:e1:05:fe:8a:72:1f:fa:ea:4c:b4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Validity
Not Before: Jun 6 11:01:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=235d7239ff3adb50386cc5638af182ba7361a1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:a9:12:8d:34:c4:b6:0f:9b:5d:43:8f:c3:
a8:10:33:66:ef:61:e5:da:3c:94:bf:73:31:5d:4a:
8c:c1:d5:c3:87:9e:d7:a5:75:bc:dd:e4:af:f7:99:
f1:5f:30:40:16:3b:7d:cf:bd:1a:14:a1:58:7c:89:
66:74:6c:d2:5b:56:20:2e:3e:1b:1f:b3:66:1f:3d:
01:41:c0:8f:92:1c:0f:bf:28:23:39:24:f5:f0:3b:
a2:f3:0f:c4:82:49:06:58:93:a5:57:70:07:7e:5e:
1f:a7:25:2a:47:9a:3c:cf:76:50:f4:07:bd:27:f2:
f3:e8:28:14:80:8d:11:e1:cb:08:0d:4a:5c:3e:e1:
dd:9b:b0:2f:a5:b6:8d:99:24:07:17:35:0f:45:ed:
b9:c0:c3:17:cb:87:67:41:5d:09:06:80:a2:31:6b:
8d:f2:9c:a5:f4:58:94:3c:3c:03:dc:3d:50:77:b0:
b8:7b:0c:41:6e:f4:75:69:a3:70:11:93:27:72:2f:
37:9d:d8:02:f9:4e:d1:06:f4:6e:0e:dc:e5:4f:11:
66:c2:5e:4d:79:91:79:c6:2a:77:27:76:a4:d2:fc:
8a:32:e8:2d:fe:63:77:8a:65:85:a5:73:9d:d8:e1:
65:8e:c5:ea:d5:45:7c:f3:72:68:19:29:d8:da:97:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5D:72:39:FF:3A:DB:50:38:6C:C5:63:8A:F1:82:BA:73:61:A1:D5
X509v3 Authority Key Identifier:
keyid:DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/I11yOf8621A4bMVjivGCunNhodU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.172.0/22
95.129.28.0/22
185.190.72.0/22
195.158.216.0/22
IPv6:
2a0a:540::/29
Signature Algorithm: sha256WithRSAEncryption
9a:ba:98:ec:63:29:9d:fb:3f:4c:a3:ef:5b:69:7c:98:a0:18:
80:dc:f7:70:05:42:26:76:f6:b6:50:c5:96:08:96:09:b8:bd:
72:a1:c2:10:43:44:a2:84:9f:36:fc:d8:df:84:3b:b7:23:55:
6c:19:a4:73:d3:97:2d:ba:0a:8b:f2:e3:44:8f:24:49:2d:a1:
25:d4:4a:2a:61:61:38:45:2d:9d:c7:62:b4:0e:22:eb:69:01:
e8:bf:ba:b5:4f:c2:34:93:dc:15:81:dc:65:d7:e4:9f:92:01:
04:86:0e:8a:62:16:ba:d7:0a:9d:a0:5b:ee:c5:44:40:b3:35:
8b:f2:fa:80:1b:5b:37:3d:88:1e:44:94:75:44:99:ae:07:ea:
d3:a3:43:2b:50:3e:75:72:ab:e1:9c:c2:03:ae:d8:2a:07:c3:
b4:ef:0c:2f:14:e8:e5:23:ae:bc:9b:73:67:a4:94:36:66:9e:
a5:84:69:e0:df:ac:1d:59:e6:16:12:e2:b6:b2:ad:e0:fc:a5:
c9:b7:f9:4a:6e:39:92:19:32:59:d6:4e:82:5e:e3:e0:d9:a4:
5a:52:ac:24:95:35:a1:2e:6b:f3:96:3b:0f:49:a2:fa:72:0f:
70:39:f5:17:76:4e:75:87:09:7b:0f:79:5e:15:95:1c:90:46:
4d:a4:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:32:55 2025 by rpki-client