Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/uTpH5OwzcZTfOpu8X57ZjeWWBJs.roa
File: uTpH5OwzcZTfOpu8X57ZjeWWBJs.roa (raw, json)
Hash identifier: 6nsDviQDF/u+HfsVoAuFYxI3/pTqIdYdXhGDj3wFL8g=
Subject key identifier: B9:3A:47:E4:EC:33:71:94:DF:3A:9B:BC:5F:9E:D9:8D:E5:96:04:9B
Certificate issuer: /CN=67cc77931dbb0e9e229c7217652b76aef4002721
Certificate serial: 0196EDBED144CD6AC1A42A3B3C7F4EBEC259
Authority key identifier: 67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/uTpH5OwzcZTfOpu8X57ZjeWWBJs.roa
Signing time: Tue 20 May 2025 12:50:27 +0000
ROA not before: Tue 20 May 2025 12:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38991
IP address blocks: 195.14.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:be:d1:44:cd:6a:c1:a4:2a:3b:3c:7f:4e:be:c2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cc77931dbb0e9e229c7217652b76aef4002721
Validity
Not Before: May 20 12:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b93a47e4ec337194df3a9bbc5f9ed98de596049b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:5e:38:62:8f:fc:a3:89:df:bf:3a:63:bf:
36:8c:c1:0e:e4:a1:d9:d7:77:a5:b5:f5:07:55:ae:
c7:a8:e0:d9:fb:b3:c3:63:8b:9d:59:27:cd:d9:db:
7a:77:0f:f8:83:20:2c:cf:48:c8:69:43:ff:0e:f7:
fa:a0:4c:9e:d3:15:64:a0:f7:f6:33:5a:4c:88:ff:
60:d4:b8:3f:5b:8b:17:d5:72:05:fd:88:43:e1:d6:
fb:8f:30:0c:b9:49:1e:29:31:d7:1a:1c:c3:3b:e4:
3b:2e:52:28:9f:be:87:89:57:4e:ed:a5:28:a5:4f:
fb:17:12:c7:a0:70:eb:88:f1:0f:86:13:73:a4:13:
ba:86:a8:ce:b2:ec:3d:d2:e3:c5:de:bb:10:37:a6:
9f:c7:c5:9d:51:21:24:55:1f:ed:04:91:fb:70:cd:
54:da:75:02:64:48:75:2b:37:82:06:58:3f:02:f0:
58:a3:03:4e:f6:7a:b9:f1:3b:8d:0d:2a:e6:8e:b7:
79:36:70:84:90:5f:0b:6e:99:e4:2c:14:ab:ce:fe:
3a:16:04:df:03:f1:3b:de:ba:92:d3:bc:3c:c1:00:
e0:c1:26:dd:ae:68:53:99:39:4f:7f:46:49:b8:5f:
16:d8:e3:07:b4:8f:1d:96:2f:37:9d:ea:06:f5:be:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3A:47:E4:EC:33:71:94:DF:3A:9B:BC:5F:9E:D9:8D:E5:96:04:9B
X509v3 Authority Key Identifier:
keyid:67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/uTpH5OwzcZTfOpu8X57ZjeWWBJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.3.0/24
Signature Algorithm: sha256WithRSAEncryption
33:db:d5:b3:30:6a:b5:a0:65:4c:70:40:a6:24:8e:0c:c7:39:
b2:d6:df:44:6a:e6:60:f2:19:27:9e:fb:f7:93:73:3e:18:69:
71:10:08:ce:4c:75:59:d4:d4:83:4a:ee:af:e7:e7:dd:86:ec:
8e:cd:a6:6d:83:37:bb:6e:6f:af:ed:34:57:04:ff:67:62:73:
5c:73:4e:fb:4a:7a:dc:67:55:a0:8b:27:da:5b:00:83:dd:8c:
f3:eb:fc:ba:e0:90:5c:f2:25:bb:95:a4:ef:e0:a3:a9:fb:7b:
be:2e:bb:90:fc:dd:e9:34:5a:b3:ce:a3:59:00:0b:92:09:85:
de:65:96:f2:8a:0e:d5:5f:80:06:88:74:34:ae:67:a9:fc:df:
89:cf:f0:02:7e:ac:d7:d1:3f:30:63:cc:f6:b3:80:a9:bf:ee:
bc:2f:72:65:c3:27:f1:c0:49:b8:8b:02:e7:32:4f:d5:ad:07:
58:53:23:14:7d:63:3c:96:0f:d4:65:1a:ab:70:18:92:b6:f5:
d3:07:89:d8:80:0d:c5:ee:b5:46:e7:9d:91:9a:43:41:49:a4:
fd:e5:45:0e:1e:00:cb:d2:80:0c:29:78:a6:97:60:79:54:12:
e3:26:1b:c2:de:3f:75:fc:0f:0a:90:a2:98:35:c1:b1:e9:8c:
97:47:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:17:17 2025 by rpki-client