Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PXm_zi_84OS78NpAICvCgbdsrDI.roa
File: PXm_zi_84OS78NpAICvCgbdsrDI.roa (raw, json)
Hash identifier: QJvB2oe55IdSz0jJtLTZ2FEln72gcauAVHb/fAD114w=
Subject key identifier: 3D:79:BF:CE:2F:FC:E0:E4:BB:F0:DA:40:20:2B:C2:81:B7:6C:AC:32
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019720363D801BBABF6428CACF8FD26E9428
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PXm_zi_84OS78NpAICvCgbdsrDI.roa
Signing time: Fri 30 May 2025 08:01:55 +0000
ROA not before: Fri 30 May 2025 08:01:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62610
IP address blocks: 193.8.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:20:36:3d:80:1b:ba:bf:64:28:ca:cf:8f:d2:6e:94:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 30 08:01:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d79bfce2ffce0e4bbf0da40202bc281b76cac32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:92:97:2b:6f:85:6b:4a:60:78:cf:7d:cb:
17:07:b1:a7:89:44:af:95:3f:a8:9c:ed:15:ea:70:
6e:bb:22:8b:07:75:10:f5:58:cc:a0:89:5e:97:26:
9b:f2:b9:e3:9f:c0:2f:8f:5d:f5:8a:6e:da:07:76:
42:d9:13:51:53:02:b2:33:8b:2b:91:02:58:c3:83:
18:ff:b2:32:0e:a3:bb:2f:8c:0c:63:77:d1:95:fc:
b5:68:33:1f:80:50:da:0c:f7:2a:35:3f:aa:a6:3c:
6b:c4:22:bb:18:fa:40:b9:89:89:c0:b9:fc:02:d3:
25:9d:28:11:d8:6f:0a:45:f1:c8:17:11:63:92:db:
de:4a:8b:fd:30:23:0a:ed:b1:a8:20:6c:13:2b:a6:
13:97:2c:56:59:fc:b3:99:12:4e:08:1e:b2:8a:2c:
8c:6f:35:99:0d:ee:fa:40:ef:06:e7:b6:0e:b2:8b:
18:9e:34:50:5e:8b:57:30:ec:52:67:bf:22:44:f9:
84:32:77:5e:a0:3d:8f:e4:f3:19:88:17:30:f4:52:
eb:85:d8:2f:9e:ba:49:cf:1c:98:d4:29:8a:8c:78:
cb:17:8b:b9:55:9c:cd:85:fa:5a:7d:67:ec:34:2c:
f3:4b:17:b9:3a:b8:d4:c4:d5:cf:0f:c4:2e:98:7c:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:79:BF:CE:2F:FC:E0:E4:BB:F0:DA:40:20:2B:C2:81:B7:6C:AC:32
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PXm_zi_84OS78NpAICvCgbdsrDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.113.0/24
Signature Algorithm: sha256WithRSAEncryption
40:97:c8:5a:f1:ff:18:90:76:50:2d:99:02:0d:a9:d3:d5:53:
af:48:5e:2e:35:a3:30:17:82:72:b0:a4:3d:3e:77:31:98:98:
8f:86:fa:77:4d:b5:c0:a3:29:63:7f:1d:02:f1:8a:95:7e:a9:
4f:05:a6:ed:4c:57:1e:3e:19:0b:d3:83:cf:44:d5:9a:8d:80:
72:88:9e:eb:55:ab:2f:0d:f8:a5:69:5e:6a:7a:2c:6a:60:d6:
77:4d:eb:c5:88:e5:ef:0f:45:7c:64:0c:a6:bc:4d:c6:14:e9:
ce:0b:b0:75:76:3f:da:6a:62:6e:38:99:31:3c:59:43:06:87:
b0:4f:97:64:8f:fe:be:f4:00:b7:79:ba:b3:af:93:65:ac:88:
95:61:56:b3:d7:7d:22:61:cc:7b:32:32:0c:76:69:6a:eb:02:
32:b1:1e:45:66:56:7a:41:a6:dc:41:3f:bd:08:39:85:17:81:
a6:96:42:17:09:e7:8c:ac:6c:19:e3:68:9f:2f:16:17:50:13:
f2:31:c6:f5:1b:48:10:de:6c:fe:08:83:d5:e6:8d:39:09:90:
06:66:fe:4a:d4:ad:13:b5:d8:d7:48:63:a6:b6:52:00:25:2c:
72:8d:54:87:6e:75:1f:0a:22:5c:0c:58:7e:05:20:6b:60:a5:
06:81:00:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:04:55 2025 by rpki-client