Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/sIaFicGSLfWywofV-flOlj4BbEs.roa
File: sIaFicGSLfWywofV-flOlj4BbEs.roa (raw, json)
Hash identifier: T3ig9ILGk20fQZ8i8xMsdIL3W6kPVu5G2DRrIA6L3QI=
Subject key identifier: B0:86:85:89:C1:92:2D:F5:B2:C2:87:D5:F9:F9:4E:96:3E:01:6C:4B
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01989A983B57782EF2D09A76191C8D8DBDBF
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/sIaFicGSLfWywofV-flOlj4BbEs.roa
Signing time: Mon 11 Aug 2025 19:25:24 +0000
ROA not before: Mon 11 Aug 2025 19:25:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 213.209.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9a:98:3b:57:78:2e:f2:d0:9a:76:19:1c:8d:8d:bd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 11 19:25:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0868589c1922df5b2c287d5f9f94e963e016c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e2:0e:4e:6a:e6:44:6a:67:3c:e6:d1:1a:63:
04:9e:30:6b:6d:30:a1:02:12:24:45:a1:d3:ad:91:
e6:34:f3:f7:ed:31:37:cb:38:f5:bb:6b:ab:98:11:
d7:14:5d:90:4e:fa:da:d6:36:d6:2d:84:2c:8a:fd:
76:54:fc:47:f2:2a:c3:14:d7:c7:ee:1b:88:bd:3d:
7d:1f:d3:96:6a:71:e7:f8:40:cb:39:4e:ee:c8:43:
89:be:80:b9:ab:aa:b4:ad:eb:1d:fa:be:c9:37:17:
7b:0c:3c:8f:bd:f3:57:ba:71:98:6b:d4:7f:da:48:
ce:99:98:a4:24:72:fd:4f:9b:0c:dd:c8:8a:b5:0a:
96:54:38:74:36:e5:31:ec:05:78:d0:aa:6e:9b:f1:
ad:27:f6:4f:d8:f7:90:57:7e:0c:89:a6:8f:9d:9f:
a3:39:a7:18:27:d7:83:9e:a9:7a:74:34:eb:12:83:
07:61:97:48:88:b5:d0:21:11:4c:6c:18:72:76:37:
78:69:39:83:ab:2f:d1:0d:24:5f:8c:42:02:61:13:
61:d2:10:3b:7a:72:45:e0:60:1a:96:35:13:0e:63:
c4:35:28:23:73:07:4c:0d:13:50:73:57:e1:70:ee:
6c:7b:18:ec:7a:14:57:7b:a9:22:fa:89:f3:40:8b:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:86:85:89:C1:92:2D:F5:B2:C2:87:D5:F9:F9:4E:96:3E:01:6C:4B
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/sIaFicGSLfWywofV-flOlj4BbEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.136.0/24
Signature Algorithm: sha256WithRSAEncryption
17:9f:a4:a5:81:5f:4b:33:cd:1c:65:ae:6f:5f:e1:99:19:95:
15:dd:dd:7f:76:4d:70:f4:24:89:d6:a1:35:80:a3:5e:bc:a2:
f9:af:dc:df:1a:79:a1:d0:ee:6d:07:02:12:4d:12:06:ca:40:
85:7f:b2:41:0f:5c:df:0f:0c:5f:50:15:d3:44:e2:de:d9:7b:
14:e3:30:47:7f:c0:38:6c:96:3a:f3:14:85:a1:80:12:bd:06:
c0:5e:ac:d7:19:00:9c:8e:f0:60:86:1e:93:8a:c3:3b:37:df:
6f:05:f9:5b:a5:db:50:3d:58:9c:7b:2d:f9:2b:c6:a1:5e:e6:
b3:1f:8a:ab:2e:4a:3c:aa:79:e7:ae:f1:d7:22:7d:92:b2:4e:
cc:a5:27:cf:40:50:c1:37:63:4f:96:2e:f3:8c:af:d2:01:0b:
47:86:6d:ed:c8:39:0c:bf:64:5b:85:91:a5:08:32:de:f7:4e:
a5:b0:4d:87:14:4f:42:a1:9f:93:65:fc:3c:2b:8f:94:cd:36:
47:9a:03:c6:24:62:1f:99:15:0c:b2:6e:7b:1b:6d:5f:b3:08:
fe:43:c6:01:a3:79:66:e6:1c:e0:20:30:74:3f:c0:46:6a:f4:
9c:65:ab:e2:f5:0d:10:af:1f:a4:ea:dd:19:c6:e3:ea:0b:53:
d7:2d:0e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:48:43 2025 by rpki-client