Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Oe_5pzA9yQNPhm-RJVr_JLJ83Zg.roa
File: Oe_5pzA9yQNPhm-RJVr_JLJ83Zg.roa (raw, json)
Hash identifier: 49lb3X9yH60GlSMGqQ6vz8hoZiCLdHBjD+D3Ih9KVTI=
Subject key identifier: 39:EF:F9:A7:30:3D:C9:03:4F:86:6F:91:25:5A:FF:24:B2:7C:DD:98
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0197135F7EB31FC50505D6593E55AC4DF0FD
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Oe_5pzA9yQNPhm-RJVr_JLJ83Zg.roa
Signing time: Tue 27 May 2025 20:11:54 +0000
ROA not before: Tue 27 May 2025 20:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202325
IP address blocks: 78.128.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:13:5f:7e:b3:1f:c5:05:05:d6:59:3e:55:ac:4d:f0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: May 27 20:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39eff9a7303dc9034f866f91255aff24b27cdd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:13:f1:12:ad:a8:fb:fd:f5:c9:76:b8:18:5d:
89:61:40:e4:8d:c5:76:09:2a:d1:f7:b0:27:f5:b6:
63:e4:65:20:81:bc:df:81:b5:3a:d9:c2:e7:b6:a1:
52:d2:ae:07:6e:05:6b:f4:77:de:2b:12:f5:2b:ff:
d8:4d:7a:c1:cb:af:32:ae:ce:28:73:82:39:31:7b:
ad:32:d7:0c:05:f2:4a:c5:c6:7b:59:5d:e6:fc:3a:
2f:81:e8:4e:b4:56:9b:71:dd:4e:c4:21:46:64:df:
bb:b7:ae:c8:56:9a:5f:70:ab:d8:c0:14:43:29:3d:
8c:bf:2d:0f:d3:01:66:b9:77:d0:be:74:12:d3:14:
4f:d9:2c:4f:12:1a:aa:73:f3:45:3b:50:9a:2f:1b:
59:97:0b:3c:8b:22:0f:af:44:a2:fd:96:4d:51:ea:
63:7d:08:5d:d5:8a:fb:fe:18:f9:a8:c6:af:d0:69:
ed:56:73:8b:74:98:60:f3:09:9c:ee:cb:de:b6:34:
ca:11:21:94:6e:a1:35:ee:b1:57:f6:c7:a0:ec:29:
52:c6:e6:26:43:78:7f:f3:15:18:f4:ce:2f:ff:38:
a8:ce:d9:99:dd:e3:f9:be:6f:e4:18:64:6a:e9:c6:
03:16:cf:04:90:80:2b:29:78:06:d3:50:d0:24:37:
3d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EF:F9:A7:30:3D:C9:03:4F:86:6F:91:25:5A:FF:24:B2:7C:DD:98
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Oe_5pzA9yQNPhm-RJVr_JLJ83Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.112.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:28:51:57:10:1d:3c:58:2e:fd:29:48:be:58:fe:1b:b1:8f:
7d:06:ca:68:a1:b9:33:3b:58:35:df:20:f6:31:a0:ad:8e:48:
aa:15:3e:91:d1:d8:1c:08:15:37:ce:91:2e:33:56:0b:5a:4a:
eb:b9:a3:0d:93:d9:c4:70:67:52:1b:61:0f:a7:56:d6:78:c2:
8e:f4:8b:02:1d:61:91:2c:90:3e:85:cf:9d:3b:f0:b3:68:f3:
9d:55:46:59:81:c3:97:3f:9e:36:60:00:0b:fa:54:ce:f1:6a:
e8:ec:b1:8a:64:d4:af:cb:81:81:f6:c3:0a:98:d5:1e:90:4e:
33:fd:6d:45:58:d0:5b:33:03:67:b0:53:ce:f5:27:ca:f3:3e:
dc:34:0d:98:aa:07:bf:b5:4a:5c:f5:24:57:c7:44:c6:26:67:
0a:7f:dd:75:25:88:40:94:cb:c2:db:9e:f6:0c:d1:6f:c0:d2:
56:f6:87:7c:ea:30:61:bd:d7:e9:54:ef:9b:cc:28:a2:79:53:
19:99:09:8d:c0:d3:a4:79:1a:fd:b4:4a:07:5a:15:14:b0:c8:
67:d7:80:d0:9f:62:3c:05:85:1d:de:8d:01:84:de:c3:e3:b9:
45:17:30:7d:60:fc:2f:d8:c7:ed:29:e5:25:29:cf:df:c8:f4:
57:67:89:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:49:02 2025 by rpki-client