Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/3rbnDYFhdBckEotfuadd533z59A.roa
File: 3rbnDYFhdBckEotfuadd533z59A.roa (raw, json)
Hash identifier: ax/QAEo9x6wJqdZmMwU9VRLc1EBYBU51K7GtG1XG70c=
Subject key identifier: DE:B6:E7:0D:81:61:74:17:24:12:8B:5F:B9:A7:5D:E7:7D:F3:E7:D0
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 0197A8713325005869AC49DD1B7805091C1D
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/3rbnDYFhdBckEotfuadd533z59A.roa
Signing time: Wed 25 Jun 2025 18:54:40 +0000
ROA not before: Wed 25 Jun 2025 18:54:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215242
IP address blocks: 185.7.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a8:71:33:25:00:58:69:ac:49:dd:1b:78:05:09:1c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Jun 25 18:54:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=deb6e70d8161741724128b5fb9a75de77df3e7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d9:f3:00:05:b1:6b:3a:a4:16:54:40:b7:6a:
ca:84:5a:42:39:6c:7e:75:3e:f9:d7:be:9b:a7:19:
9a:87:3f:74:b1:f4:cc:68:14:61:8f:f3:97:e3:11:
39:86:a4:04:9d:23:aa:84:20:81:df:8d:5b:f1:ca:
df:54:2a:7b:3f:4b:1b:6c:04:d1:44:37:9c:93:87:
a6:bb:33:e5:d5:a4:05:dd:ae:2b:aa:4a:a4:a9:68:
4e:6d:f3:4d:c9:48:1b:d9:43:75:ac:58:92:b5:3c:
51:08:f7:ab:e3:e7:46:a6:e3:1b:fe:76:5c:f5:1d:
ae:c0:13:58:a5:be:32:8c:52:aa:df:53:0c:f6:f3:
82:f7:db:c8:31:82:e3:84:4b:4d:52:88:f5:52:cc:
05:fe:20:52:7b:81:b8:fe:90:07:b4:b5:09:07:ae:
7f:ef:a4:a7:e2:11:42:d5:03:22:85:2a:2d:90:88:
33:0d:48:98:80:c9:f0:f6:53:5a:28:7b:fd:3c:ff:
2e:31:e8:49:e1:e3:fa:f8:1c:6f:89:13:c4:72:98:
ba:b9:cc:65:f5:c7:e4:37:0f:06:3c:dc:5d:95:9e:
8e:98:9e:54:de:ce:f8:0c:b4:d4:ed:eb:71:18:52:
00:02:1c:9f:3e:d7:c2:db:8e:84:e1:0c:d7:27:4d:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B6:E7:0D:81:61:74:17:24:12:8B:5F:B9:A7:5D:E7:7D:F3:E7:D0
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/3rbnDYFhdBckEotfuadd533z59A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7c:a6:83:3b:8d:39:c6:67:b9:35:7b:43:bf:b1:d8:9e:bc:
fa:90:5d:85:01:a3:27:01:cc:c0:6a:1b:ff:e6:ee:2a:90:8a:
7e:f5:58:53:9a:09:b7:5c:89:4b:cf:80:51:f6:4f:22:22:28:
91:b3:ad:61:50:d9:b2:4a:e8:1d:64:bd:6f:c8:2c:36:2e:38:
2b:5f:06:4b:40:9b:13:ce:14:2b:57:92:82:5a:26:27:64:19:
92:56:c9:6f:f1:62:b3:8b:8d:a9:65:22:b2:1d:6c:66:5c:cc:
89:5b:67:1c:13:bb:df:27:ea:21:e4:1a:fc:7f:46:9e:11:76:
f9:e3:c6:bd:b0:bd:ba:75:33:21:c2:7e:9e:c2:0c:f1:a5:3e:
e8:57:3a:90:f3:e8:b5:08:73:db:91:ab:cb:5d:a2:22:e2:9b:
5c:c3:f9:24:3e:eb:1e:55:3a:30:f0:16:4a:90:60:3a:28:91:
ba:dc:9f:8b:59:9a:e7:93:97:bb:d0:d9:45:b9:73:07:53:31:
a9:14:c0:c7:68:6c:7e:25:1a:28:3a:39:0c:5e:3a:11:8f:6c:
c1:b1:18:1a:9a:3f:e0:a0:74:96:48:8e:f1:c2:03:7e:93:fa:
2e:89:7c:06:92:37:d2:bd:b7:f1:29:f4:af:f1:7d:e7:83:ba:
60:0f:86:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:20:39 2025 by rpki-client