Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/mG03TI89CS1wkpxNP5LA0Qc9zZA.roa
File: mG03TI89CS1wkpxNP5LA0Qc9zZA.roa (raw, json)
Hash identifier: dZ9GrZnw+b6kclHrDHVmCQL+rFnPH1pCc5b1b7oJEpM=
Subject key identifier: 98:6D:37:4C:8F:3D:09:2D:70:92:9C:4D:3F:92:C0:D1:07:3D:CD:90
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019736F5581F2583B9AEA0C68AA55806E983
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/mG03TI89CS1wkpxNP5LA0Qc9zZA.roa
Signing time: Tue 03 Jun 2025 18:02:17 +0000
ROA not before: Tue 03 Jun 2025 18:02:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198953
IP address blocks: 176.101.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:f5:58:1f:25:83:b9:ae:a0:c6:8a:a5:58:06:e9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jun 3 18:02:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=986d374c8f3d092d70929c4d3f92c0d1073dcd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:35:63:f1:18:8d:ef:a2:43:8f:93:2a:06:ab:
bd:3c:a5:e2:3a:15:59:7e:f4:f7:92:c3:22:af:09:
73:5c:52:74:b0:b6:0a:16:46:36:5e:5d:98:cb:8d:
1a:01:36:9d:4b:be:5f:b7:e3:3d:00:93:8d:78:e9:
2f:5f:48:57:26:3a:23:65:d5:9b:37:1d:f9:1b:e3:
4b:bb:a6:3b:57:49:df:32:71:09:d2:ba:14:a2:f4:
bd:bb:4e:fa:ec:d0:32:87:f0:0e:3e:d7:5e:a1:45:
6d:3a:5c:e4:c9:81:28:93:c5:fe:fa:69:9c:63:42:
49:64:11:44:03:59:f6:01:74:b0:b0:52:ba:0a:0d:
f4:c2:28:31:2b:f6:a4:33:4e:07:66:17:ed:38:9e:
23:b6:03:f1:94:e5:5c:4f:a6:fc:08:f9:91:54:a9:
27:1f:7e:4a:77:d4:4d:99:86:e2:d1:f9:5a:ec:91:
ba:c3:d7:8a:7b:42:9f:e8:7b:02:59:85:f4:8c:cb:
f7:fa:e6:4d:01:23:85:71:f9:c8:cd:95:b6:bf:a1:
7d:13:1c:3a:06:e7:48:3a:6f:a3:7b:b2:6f:d4:ca:
91:19:02:e5:b1:19:65:86:b4:c3:85:7b:f0:4c:2f:
51:30:13:86:4d:62:32:74:fd:81:ab:c3:32:79:6b:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6D:37:4C:8F:3D:09:2D:70:92:9C:4D:3F:92:C0:D1:07:3D:CD:90
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/mG03TI89CS1wkpxNP5LA0Qc9zZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.56.0/24
Signature Algorithm: sha256WithRSAEncryption
06:42:1d:c5:6f:ec:ec:ad:d0:b8:39:f7:ec:d2:a9:c4:43:1d:
69:6e:8a:c4:a8:78:fe:d5:50:c3:69:37:ba:32:c5:4d:18:39:
f3:75:5b:7b:df:8c:6c:d0:05:7a:5e:ca:a5:f1:90:6a:85:07:
2e:61:5f:e9:7c:2f:03:cc:4a:b0:cf:06:3b:40:8e:fa:24:e6:
e8:90:cb:31:1c:2d:81:90:f9:9d:51:3c:0e:cf:cf:7a:f5:2e:
1a:0b:d0:6b:b2:4d:c9:41:1e:47:ae:f8:7a:4a:a8:83:8e:99:
f1:a8:34:99:95:cd:c2:a1:cc:1c:68:ae:42:1d:e9:3f:3c:0e:
cd:8b:4f:5f:4a:67:13:0d:3b:f1:e8:d2:59:71:12:b2:09:29:
32:43:07:02:32:84:89:5a:96:24:4b:07:1f:42:21:8e:b3:64:
fd:c3:c2:b0:7a:3e:73:cd:4e:ce:af:22:67:05:c8:cf:9d:77:
64:01:3d:f1:7d:b6:29:e6:9b:a6:aa:0e:74:69:6f:9d:b8:23:
1a:0f:bc:d9:ce:d4:bf:82:08:7f:9c:14:47:7a:38:ba:2a:5c:
8e:53:00:49:0e:4c:65:42:b5:1c:7d:53:aa:13:81:59:76:33:
52:bf:fa:b0:e9:ba:c2:e3:e8:b0:d4:8a:14:32:38:8b:cd:4e:
e5:b9:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:23:08 2025 by rpki-client