Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/SHNEUOB-tmCuler25OnE-7d4RKI.roa
File: SHNEUOB-tmCuler25OnE-7d4RKI.roa (raw, json)
Hash identifier: XKq8o0m566WX2AVhb80rl5yUodqaYeMM1rdYd3E/iD0=
Subject key identifier: 48:73:44:50:E0:7E:B6:60:AE:95:EA:F6:E4:E9:C4:FB:B7:78:44:A2
Certificate issuer: /CN=78decead419807747c92ace69448113ff0928b85
Certificate serial: 019736C96822E9197E94BBEDD302993612CB
Authority key identifier: 78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/SHNEUOB-tmCuler25OnE-7d4RKI.roa
Signing time: Tue 03 Jun 2025 17:14:18 +0000
ROA not before: Tue 03 Jun 2025 17:14:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204666
IP address blocks: 91.224.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:c9:68:22:e9:19:7e:94:bb:ed:d3:02:99:36:12:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78decead419807747c92ace69448113ff0928b85
Validity
Not Before: Jun 3 17:14:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48734450e07eb660ae95eaf6e4e9c4fbb77844a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:06:73:4a:11:47:d3:52:25:ed:fe:8b:94:
c4:7d:12:69:5a:10:86:dc:c4:b1:c7:0b:b2:06:40:
e2:9a:44:fd:c7:18:d6:e2:89:8a:a6:17:34:e2:a3:
19:ce:94:a5:70:40:f8:91:9e:ad:2b:37:da:d2:93:
c6:42:d2:b8:3f:e5:5d:cc:17:1f:79:64:2a:eb:c5:
e9:98:38:ce:c6:15:a8:1b:ac:82:10:42:d1:30:6e:
6f:99:50:9d:e9:0f:9e:d6:88:55:2b:e9:8b:9c:b1:
97:5a:f0:f4:42:e7:d7:4b:6b:89:41:0a:23:73:5b:
90:87:5c:c5:98:84:50:6f:23:77:dc:06:c0:65:3f:
eb:50:9c:6d:6e:8c:78:b5:e3:a2:4a:f4:c7:ed:a1:
be:69:f6:9f:15:e5:73:97:39:85:e0:ee:9b:76:38:
af:03:8e:2b:e0:ba:2f:a7:b9:cc:73:50:0e:d8:8c:
c9:bb:cf:ea:73:08:47:53:41:e7:a1:e0:e1:1b:6e:
31:3c:fc:de:9a:ff:57:e7:1a:7f:14:e2:82:37:84:
a4:2d:1f:61:2d:2d:e4:c3:e1:8f:53:5a:b8:d9:b4:
49:d8:c2:26:34:7e:c3:7d:d5:c3:af:73:f5:b8:12:
70:98:f3:50:7a:a4:5b:33:eb:0d:3f:ef:3a:5a:a8:
04:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:73:44:50:E0:7E:B6:60:AE:95:EA:F6:E4:E9:C4:FB:B7:78:44:A2
X509v3 Authority Key Identifier:
keyid:78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/SHNEUOB-tmCuler25OnE-7d4RKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.90.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:63:51:ce:e0:09:63:c8:fd:18:25:fb:11:d7:2a:95:34:42:
23:06:e5:60:7e:a8:45:fe:aa:ef:e9:7b:d5:67:17:6f:78:34:
0b:41:b0:f9:dc:ff:1f:a3:68:4c:51:99:58:c2:e4:c9:66:c4:
b0:20:32:77:c5:b4:ff:84:d7:1f:f6:66:9d:4c:48:45:f2:07:
bd:6f:55:1b:d2:48:44:88:d4:f9:03:54:09:05:2b:63:6d:6e:
d5:d0:52:73:f5:8c:e3:ce:27:fa:5b:5a:72:55:02:dc:d0:51:
83:8d:5d:42:98:c5:ef:80:36:fa:47:a7:0f:c9:f4:7d:f7:8a:
ef:6d:32:11:f1:04:6b:4d:be:81:69:08:ca:1d:fb:06:c4:84:
2b:7c:1d:50:90:0c:aa:d9:73:92:37:08:7c:6b:78:5c:45:4a:
28:66:ec:a3:bb:11:03:6a:a9:14:2e:18:dd:00:a7:2d:3e:15:
c7:3a:da:5d:0b:04:0f:e9:5b:3b:a1:40:55:3d:a3:df:da:0c:
3e:ae:07:84:53:fe:c4:e3:31:b1:9c:e4:c8:a6:cc:13:fc:0e:
8a:45:ac:44:cd:ba:61:cf:c7:a3:b9:a8:f7:38:c4:9f:2a:40:
65:a4:10:44:e5:90:ef:56:c4:c8:e3:5b:73:2b:69:a9:68:47:
cd:eb:7c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:35:40 2025 by rpki-client