Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hGkNhp1AkVsGjoDW6jpJLSJ4uzQ.roa
File: hGkNhp1AkVsGjoDW6jpJLSJ4uzQ.roa (raw, json)
Hash identifier: 5imOhO5p58OVeOy1EP2agYXt3HGnqQVTzFUVBA4UEXg=
Subject key identifier: 84:69:0D:86:9D:40:91:5B:06:8E:80:D6:EA:3A:49:2D:22:78:BB:34
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0197795DC5EC0EDE22DE65AC525C03F474A1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hGkNhp1AkVsGjoDW6jpJLSJ4uzQ.roa
Signing time: Mon 16 Jun 2025 15:31:18 +0000
ROA not before: Mon 16 Jun 2025 15:31:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39900
IP address blocks: 193.124.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:5d:c5:ec:0e:de:22:de:65:ac:52:5c:03:f4:74:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 16 15:31:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84690d869d40915b068e80d6ea3a492d2278bb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:0e:f7:61:12:0e:41:03:f1:c4:ce:ae:e5:
1a:85:42:15:ea:87:7c:e5:d5:d0:15:42:e6:58:29:
c4:1e:83:6a:7d:fb:e3:9a:98:7d:f7:f6:52:73:6c:
4d:01:0b:37:eb:8d:7e:62:d1:db:1f:b1:ba:e3:76:
4c:2c:0c:9c:0f:ba:8a:c2:46:8a:ce:5d:ba:ce:a8:
da:fc:60:ae:d3:4a:f7:fd:44:a7:58:d1:77:5e:ce:
73:7a:ba:5e:ab:04:bf:f7:8b:c1:b6:b5:46:ef:1a:
fd:35:1e:84:07:52:e1:37:67:25:f3:06:e3:d8:fb:
43:9c:b6:3e:ed:04:d9:a1:7d:70:24:30:ba:ef:2b:
83:23:4b:3f:5d:72:39:e7:f8:84:2f:37:6c:28:54:
ff:ec:f9:fb:67:e4:1f:ca:c7:d1:9e:5f:ee:a8:77:
c0:45:91:ff:e2:56:ce:e9:7c:e6:c1:d0:56:12:1f:
99:70:71:97:77:f6:05:c1:db:88:d9:8b:34:cd:10:
ba:05:f8:b9:30:42:24:87:11:44:7b:8e:36:7f:80:
6e:f6:28:16:dd:d2:23:5c:91:39:d3:4a:98:55:79:
b5:ab:dc:7d:e4:b8:47:e2:09:ce:a4:d2:c0:4f:91:
35:c6:b8:22:3d:f7:c9:c0:2c:1b:71:06:57:b1:f2:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:69:0D:86:9D:40:91:5B:06:8E:80:D6:EA:3A:49:2D:22:78:BB:34
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hGkNhp1AkVsGjoDW6jpJLSJ4uzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.254.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f2:85:d3:82:75:52:0c:0c:08:b5:f9:f2:2a:dc:38:4b:0d:
50:01:37:6f:cc:a6:92:2d:7f:da:20:e2:a5:55:82:50:cb:fe:
17:af:9f:49:39:93:84:43:b7:20:33:e5:c4:2d:80:3f:f7:f7:
24:c3:f4:e6:af:d2:6d:3d:b2:e0:52:ee:9b:08:45:bc:cc:1d:
a4:5d:da:3b:bd:a1:c5:ea:86:e3:34:9b:ac:1a:9d:14:a1:bc:
51:6d:39:47:53:96:c0:29:fe:f8:ee:5b:cd:69:3a:0c:2f:bd:
71:86:3b:02:df:55:f3:b9:98:ca:61:63:b5:55:8f:9e:ce:19:
88:71:d2:69:0e:f1:a1:92:db:ca:e8:71:dc:76:e9:2e:27:17:
ff:59:ea:ed:73:d9:11:3a:1c:a5:61:ff:92:33:84:f2:63:19:
48:19:4f:82:0e:89:78:23:99:37:7e:fa:2a:71:9c:83:6a:e9:
8a:60:ba:a0:56:de:a0:0b:c8:d8:f1:75:59:2f:0d:6c:30:df:
dc:a4:e9:43:0e:08:9d:80:28:71:80:5d:dd:aa:ac:f1:6c:33:
65:ea:70:f7:8c:f7:31:04:63:89:7d:60:5c:48:ab:f2:c2:e1:
01:50:7a:b5:05:19:26:35:21:1c:c7:4f:44:45:8d:24:92:a4:
8e:dd:b3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:00:22 2025 by rpki-client