Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/UDnOw3yx7p_S6g0u-gxFkiQH6Ow.roa
File: UDnOw3yx7p_S6g0u-gxFkiQH6Ow.roa (raw, json)
Hash identifier: pt8gQb/ZyizTIVjVAR2lPtfMoGj527YNLleTVGkzd88=
Subject key identifier: 50:39:CE:C3:7C:B1:EE:9F:D2:EA:0D:2E:FA:0C:45:92:24:07:E8:EC
Certificate issuer: /CN=468644b92f394caf3667bdb6af3e38699c54f315
Certificate serial: 019706BC04D66053DB6AF076CC46DA00786E
Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/UDnOw3yx7p_S6g0u-gxFkiQH6Ow.roa
Signing time: Sun 25 May 2025 09:17:54 +0000
ROA not before: Sun 25 May 2025 09:17:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216383
IP address blocks: 146.19.70.0/24 maxlen: 24
2a13:c4c0::/29 maxlen: 29
2a13:c4c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:06:bc:04:d6:60:53:db:6a:f0:76:cc:46:da:00:78:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315
Validity
Not Before: May 25 09:17:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5039cec37cb1ee9fd2ea0d2efa0c45922407e8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:35:4b:95:8d:79:6d:d4:7a:bf:36:03:d3:
5c:02:0d:db:ef:fa:dd:6a:98:86:3d:65:83:05:c8:
2a:80:d7:78:05:1c:17:ce:2e:70:fb:3a:9d:49:40:
94:fc:2d:41:c3:cb:9c:e8:c5:b8:2a:ef:1b:3e:a5:
76:98:6a:29:30:93:af:89:f4:7d:55:f4:dc:54:63:
a6:bc:41:02:12:3c:ec:6b:8b:3a:c4:1b:64:76:ba:
3a:a0:1a:ae:b3:c2:56:67:af:d5:c7:8c:a1:5d:ba:
3e:1e:a2:37:6c:2f:c7:ad:c0:0e:df:62:59:62:6d:
27:b7:32:a6:ef:7e:34:d4:01:e2:54:ef:d6:11:0a:
14:7d:22:e0:af:13:c4:39:82:78:16:77:02:c3:b0:
61:0e:78:7d:b4:a6:c5:de:dd:6d:48:c6:0b:15:90:
18:16:b1:d6:08:59:7c:0f:31:85:74:7f:2c:8f:0c:
d8:09:c8:62:07:ae:29:2e:dd:ee:04:ab:41:a9:61:
f9:8a:7e:fd:0e:42:52:3f:5a:f2:00:5b:e9:4c:66:
c0:f5:db:69:04:ce:2e:e4:73:8c:8c:1c:d2:a9:46:
a9:5f:8f:a7:1b:8b:e2:b9:4e:46:1f:85:53:4f:4b:
e0:de:8f:ff:5f:7b:e7:54:72:16:68:51:7b:5d:4f:
1b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:39:CE:C3:7C:B1:EE:9F:D2:EA:0D:2E:FA:0C:45:92:24:07:E8:EC
X509v3 Authority Key Identifier:
keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/UDnOw3yx7p_S6g0u-gxFkiQH6Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.70.0/24
IPv6:
2a13:c4c0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:af:15:11:d5:df:5b:42:bf:02:85:4d:48:3b:d7:73:bd:16:
67:17:17:f2:c8:c3:96:2b:03:15:9d:4f:31:4a:f3:ec:c6:fa:
6d:15:08:35:40:54:c2:2b:d0:28:c4:65:a9:68:30:11:d0:4f:
df:27:6d:35:5e:a4:a3:f5:d2:ed:53:fb:94:10:e7:79:5c:c9:
61:b3:73:a2:5b:43:3e:1b:90:53:27:60:2e:8a:b9:7a:91:05:
8c:5b:a3:e1:66:bb:96:e3:6c:4d:5b:23:d7:59:af:e6:f9:16:
16:ac:ac:11:94:68:a2:fe:00:db:f4:c9:86:c5:d8:32:5d:ae:
0e:8b:87:22:21:c5:45:43:39:9d:63:a5:0a:83:ee:75:ad:77:
2d:37:93:b7:35:3d:24:f4:f3:78:28:4d:52:97:a3:cf:03:53:
9b:71:8f:9a:2f:b4:45:06:f5:49:d7:db:86:22:a1:5c:7d:52:
d2:d0:b0:d5:42:e1:b0:e8:74:b7:b2:46:75:5c:ce:47:b8:0f:
81:f4:0f:a2:96:6c:5e:32:3d:0b:dd:cf:9d:08:b3:c9:7f:21:
7d:17:ea:42:e7:cd:d7:26:0d:1b:96:40:bf:98:9e:5c:67:81:
17:84:a8:5b:d7:30:2d:d4:24:5e:62:78:08:0d:c4:38:d8:28:
06:ff:36:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:40:23 2025 by rpki-client