Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/3B48XSzrqRQbODZNf87x_kjUhNo.roa
File: 3B48XSzrqRQbODZNf87x_kjUhNo.roa (raw, json)
Hash identifier: y14T24Ofee6GJVa1mI4/7qxhdq0jl8KEydSAoin8Qhg=
Subject key identifier: DC:1E:3C:5D:2C:EB:A9:14:1B:38:36:4D:7F:CE:F1:FE:48:D4:84:DA
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0197F442D0DD93237B938588C1F84C171F41
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/3B48XSzrqRQbODZNf87x_kjUhNo.roa
Signing time: Thu 10 Jul 2025 12:15:08 +0000
ROA not before: Thu 10 Jul 2025 12:15:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215042
IP address blocks: 95.164.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:42:d0:dd:93:23:7b:93:85:88:c1:f8:4c:17:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 10 12:15:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc1e3c5d2ceba9141b38364d7fcef1fe48d484da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:f6:02:0c:bc:ba:c2:7f:49:75:2b:24:ea:
89:a1:57:b3:c3:f7:55:8d:f8:e4:40:a0:f9:9e:0d:
ac:8c:82:45:3a:1b:c3:9e:a1:43:10:17:dc:62:89:
17:2c:34:ce:4d:42:13:6f:5d:35:6d:d3:de:29:9e:
be:d1:a9:17:21:35:53:f8:60:44:c0:85:dd:c4:5c:
7c:77:3d:ef:ae:4a:79:f8:2e:58:d9:0e:d3:e7:a3:
11:e8:c4:13:66:ba:34:35:20:c1:27:2e:2f:cd:28:
a2:19:16:3f:09:01:f2:e5:ef:b6:8f:b9:23:01:26:
aa:e4:5d:32:71:01:32:de:a5:cc:fc:93:c2:92:6a:
82:95:65:3b:af:68:dc:f8:07:60:27:ed:05:cd:02:
59:d2:19:dd:1f:6b:85:0f:79:e5:59:bc:74:09:68:
5e:6b:3c:52:9c:e4:c2:7c:e1:33:11:40:52:02:25:
d0:b2:b9:a7:d1:b7:27:ca:e1:86:6d:78:66:53:86:
1e:c0:b9:44:13:be:2b:f5:dd:2e:92:c1:20:40:a0:
ad:ca:74:1a:d1:1e:2d:5b:bd:19:53:9f:38:8e:f1:
1d:1a:da:75:e5:86:89:11:31:3c:d8:df:d1:9e:92:
02:4c:de:5f:9c:fd:67:21:85:28:05:6d:c8:9e:ee:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1E:3C:5D:2C:EB:A9:14:1B:38:36:4D:7F:CE:F1:FE:48:D4:84:DA
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/3B48XSzrqRQbODZNf87x_kjUhNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.14.0/24
Signature Algorithm: sha256WithRSAEncryption
58:54:4c:b3:48:fb:5d:0d:27:ce:65:50:4b:7b:9e:f7:f1:e6:
ca:16:c9:06:2a:a6:6b:ad:02:4f:f6:92:a0:01:4c:dd:4f:ff:
f7:84:f4:24:da:46:b6:f1:ce:4c:f2:05:ee:86:0c:1c:8f:8f:
52:df:ba:92:cb:7f:4e:50:51:81:ea:eb:5e:0a:88:38:cc:31:
a0:51:41:17:5a:dd:d6:76:d7:00:29:a2:ec:2e:f3:fd:69:4b:
94:21:01:e2:7b:c1:98:0d:1b:9b:39:40:9e:fa:2f:5f:1b:e4:
c1:ad:39:f3:0a:f9:46:c2:f2:84:aa:f8:e5:17:c9:5f:48:cf:
be:3d:f0:4b:d5:6c:35:35:ff:a9:d8:8c:7f:bb:4a:cb:4a:66:
a6:b9:33:0c:f1:a5:be:91:c1:58:0b:dc:e2:63:b5:23:eb:b8:
50:c4:36:64:0b:d0:43:c0:4b:a3:6c:1c:7c:a0:b6:70:bf:2c:
fb:b2:7b:32:80:a7:5d:51:a2:b6:98:6f:f0:22:43:33:36:e3:
0a:34:ad:b7:ec:34:0e:3e:3e:2d:2b:cd:8a:40:0b:4c:f0:d7:
ad:25:96:7a:ca:8f:09:04:cf:15:c4:83:01:d3:d0:4e:12:b8:
42:5d:a8:00:50:8e:bd:57:8b:13:ed:c6:af:36:54:01:92:01:
a0:aa:7b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 21:04:30 2025 by rpki-client