Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1--c051eH4keh8C5-ijpCxWLRNzE.roa
File: 1--c051eH4keh8C5-ijpCxWLRNzE.roa (raw, json)
Hash identifier: 1nbbQiunU1ZXokkvIR68I5rBLWoj+c+Ae1VvGuemEco=
Subject key identifier: FB:E7:34:E7:57:87:E2:47:A1:F0:2E:7E:8A:3A:42:C5:62:D1:37:31
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019776EC7849A852ADE8859D3AD25150CB78
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1--c051eH4keh8C5-ijpCxWLRNzE.roa
Signing time: Mon 16 Jun 2025 04:08:18 +0000
ROA not before: Mon 16 Jun 2025 04:08:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214556
IP address blocks: 94.249.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ec:78:49:a8:52:ad:e8:85:9d:3a:d2:51:50:cb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 16 04:08:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbe734e75787e247a1f02e7e8a3a42c562d13731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:fe:40:ff:43:9c:40:c4:18:5c:3b:6a:33:
50:03:da:0a:53:7f:ab:07:38:bb:28:1c:ab:7b:a3:
05:e4:ef:f1:1b:31:06:08:74:f3:53:96:f8:d4:29:
16:27:ba:60:e6:1e:8d:5d:c8:c9:9b:d0:82:d4:50:
b5:41:6b:19:1b:f4:29:b4:59:b1:04:96:91:d1:ec:
58:a9:07:76:21:ee:2c:12:90:f0:a3:b5:b0:12:f3:
ee:0b:91:12:a5:99:ec:ed:f9:40:8c:30:1a:17:16:
80:4b:4b:03:09:da:89:e6:de:c0:e6:76:6d:72:83:
f1:5a:bb:98:02:f9:5e:e6:3c:81:b3:b3:fb:2c:01:
be:48:01:bb:88:bc:44:44:84:94:f1:f0:02:d6:ae:
c8:c4:23:3d:58:00:26:b2:76:39:0f:8c:cf:b4:73:
a2:00:8b:27:b3:f8:4f:eb:8b:3d:49:9b:a0:3d:a8:
3e:fa:f6:c6:ec:ac:d4:d3:cb:2b:40:fb:11:90:ac:
74:70:fa:ed:8c:25:80:53:07:bf:87:88:0b:93:17:
3f:3e:c3:cf:95:d0:cb:42:c1:cc:33:36:6f:a9:9b:
ab:c3:d7:5c:fe:0b:17:bf:1a:57:06:18:56:03:e3:
17:02:0f:e2:eb:08:b3:fe:ac:cd:05:37:ce:f8:b3:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E7:34:E7:57:87:E2:47:A1:F0:2E:7E:8A:3A:42:C5:62:D1:37:31
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1--c051eH4keh8C5-ijpCxWLRNzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:23:46:cc:2a:4c:ea:78:53:d7:71:5d:5b:80:3f:5f:00:ec:
3a:c8:a0:d8:de:96:ac:b2:a8:0a:e5:e0:4a:f9:ba:26:fb:55:
bc:cf:5c:2f:6c:4b:4e:b4:5f:a3:bc:f7:3c:e0:31:70:cd:bd:
5d:43:69:ad:c6:9b:e2:e3:72:2d:cd:47:c1:34:9a:94:89:d8:
10:53:77:c8:6a:ae:be:81:bb:55:62:b0:b7:99:1a:10:57:63:
4f:2d:ff:f1:fc:9b:2a:c2:b6:17:9c:01:26:f6:b4:e8:85:e0:
81:f3:85:4e:55:0b:fb:fa:de:60:06:8d:b1:fd:6f:69:ef:d3:
15:2e:c3:f6:90:b0:8e:ba:c7:62:47:a5:00:f3:13:ba:42:83:
30:84:a5:3c:77:38:d5:8d:64:78:70:56:de:df:ec:f3:41:c7:
2e:51:8a:5f:31:ff:6f:a6:29:1d:b4:2b:41:aa:88:4c:4f:ba:
01:2f:80:90:1c:3e:f2:1b:62:0f:b9:f9:02:94:f0:6c:fa:14:
52:4a:d0:75:77:38:61:cf:a6:be:c8:0a:7b:63:2b:b8:5d:a9:
9c:ce:c8:d6:95:a2:e0:d1:f6:51:67:95:be:ba:1a:ea:4e:16:
ac:90:cb:83:3a:6d:49:f7:b1:86:d5:ce:96:a3:e9:7f:ea:1b:
71:2b:d2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:16:18 2025 by rpki-client