Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/3OrX-Bx_5Y7rOdWC35EMVBiLsiM.roa
File: 3OrX-Bx_5Y7rOdWC35EMVBiLsiM.roa (raw, json)
Hash identifier: Hcg3Yc6y08nDt8RGm5cjhZE+4ENH1m8OZY89OLwGe7s=
Subject key identifier: DC:EA:D7:F8:1C:7F:E5:8E:EB:39:D5:82:DF:91:0C:54:18:8B:B2:23
Certificate issuer: /CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
Certificate serial: 01971C40128B60ED455D2DA20FD203AA0AFD
Authority key identifier: 61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/3OrX-Bx_5Y7rOdWC35EMVBiLsiM.roa
Signing time: Thu 29 May 2025 13:34:10 +0000
ROA not before: Thu 29 May 2025 13:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13308
IP address blocks: 195.42.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:40:12:8b:60:ed:45:5d:2d:a2:0f:d2:03:aa:0a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
Validity
Not Before: May 29 13:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcead7f81c7fe58eeb39d582df910c54188bb223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:f7:a4:e0:9c:f8:44:36:bd:e4:f3:a3:c7:
4e:27:e9:56:6c:97:76:8e:db:6d:db:08:9a:4b:40:
6c:07:6e:9b:ff:35:f1:8c:55:57:94:80:26:35:ac:
67:73:52:7e:57:b1:81:48:b1:8c:ba:07:76:9c:dd:
8c:8f:fd:e1:f9:da:f9:fb:41:76:3e:29:8e:7c:4c:
32:be:9d:aa:56:ec:10:13:25:81:b4:64:07:7e:56:
f2:0d:bb:f6:8b:ab:6c:95:ab:7b:e0:3b:20:61:73:
af:35:5d:a2:82:5c:f0:a0:f0:6a:e4:96:73:c5:99:
c5:2e:07:52:ba:da:5f:51:ea:c4:62:de:5e:26:26:
b6:08:44:b3:cb:13:15:e1:88:6b:03:40:fc:c5:89:
2c:32:4a:0e:ee:be:0e:20:bd:b2:a0:7d:9f:e8:5a:
ba:c8:d3:f5:03:92:ab:12:53:4e:c7:5c:16:02:d4:
18:aa:b7:8a:6f:15:79:d0:ce:11:23:a2:42:33:fc:
45:1e:49:16:b2:81:b0:26:f0:81:1b:b9:20:a9:3f:
89:fa:94:3a:67:f1:ea:39:e8:35:74:15:7b:5f:d4:
4a:eb:5d:a9:07:e1:82:01:e7:c6:41:1a:a0:63:b3:
15:d0:5b:cd:bd:4a:b7:07:25:aa:ab:d8:5b:2d:c9:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EA:D7:F8:1C:7F:E5:8E:EB:39:D5:82:DF:91:0C:54:18:8B:B2:23
X509v3 Authority Key Identifier:
keyid:61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/3OrX-Bx_5Y7rOdWC35EMVBiLsiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.42.110.0/23
Signature Algorithm: sha256WithRSAEncryption
04:db:a9:4d:21:d5:ad:0d:43:ba:05:57:f5:3d:e9:28:11:23:
59:1a:23:88:cd:86:df:1c:27:40:c5:7e:04:3e:d5:08:c8:30:
3e:3e:5e:db:2a:71:92:f9:a5:13:2b:4a:1a:d7:ca:21:25:d6:
6a:07:a7:de:6f:f9:61:d9:bd:1a:80:77:dc:47:75:4e:46:93:
e0:9e:6c:42:06:dc:57:3e:fd:98:0f:aa:c4:e4:fd:85:1f:35:
42:31:6c:bf:b2:5d:cc:1d:a4:ad:e8:f4:cd:58:a8:c9:63:2b:
58:5f:a5:aa:80:62:73:c2:df:73:f1:17:7c:c7:62:fa:c7:5d:
de:52:24:a1:7b:e1:c2:57:96:41:6c:1c:6c:5e:a2:7c:14:50:
62:f4:e2:e2:bc:e4:6b:30:73:9f:ac:0b:2a:bb:a8:cd:33:9a:
5f:81:fc:05:cf:e2:b9:a2:8d:1a:5a:15:e3:97:3a:47:fe:96:
53:d2:e4:df:ac:0e:b4:bc:8b:a1:e5:d6:34:1d:ec:8f:eb:e5:
49:8d:d2:59:a2:b0:3d:33:66:04:5d:d9:07:86:0e:a5:1c:77:
b9:85:08:e8:ca:7a:e2:07:e8:bb:27:91:90:64:ea:ec:9b:ae:
4c:f8:d8:f2:00:5a:5e:3a:bf:19:f3:3c:30:7c:d4:b4:54:e6:
1d:68:af:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:15:06 2025 by rpki-client