Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Pv-j_xb12EoFL0KNBNjL6M9JeGE.roa
File: Pv-j_xb12EoFL0KNBNjL6M9JeGE.roa (raw, json)
Hash identifier: M4QfE5BRH6sL/kzaNewIcbpvUYFUCu0wLgQkXw6CEIw=
Subject key identifier: 3E:FF:A3:FF:16:F5:D8:4A:05:2F:42:8D:04:D8:CB:E8:CF:49:78:61
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0197ACBA08CBBD861402C2F7BB8398D6E68E
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Pv-j_xb12EoFL0KNBNjL6M9JeGE.roa
Signing time: Thu 26 Jun 2025 14:52:42 +0000
ROA not before: Thu 26 Jun 2025 14:52:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62005
IP address blocks: 171.22.182.0/24 maxlen: 24
171.22.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ac:ba:08:cb:bd:86:14:02:c2:f7:bb:83:98:d6:e6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jun 26 14:52:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3effa3ff16f5d84a052f428d04d8cbe8cf497861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:65:e5:27:a5:73:ac:d4:12:25:a0:9a:2d:
cd:b2:5f:92:a5:60:b5:dd:4f:0d:77:ee:28:c0:cb:
23:93:6d:f0:a3:09:84:d7:d0:cb:37:c8:e4:62:65:
60:88:e2:26:17:d5:4b:6a:c5:3d:27:05:43:b4:f5:
9a:92:23:25:e9:b1:07:d6:b3:9c:83:bd:f7:19:58:
a3:04:b3:bb:23:32:85:7b:24:35:29:69:3c:64:b2:
56:0b:46:1c:08:ba:29:2b:8e:b9:fc:cb:42:bc:6a:
f0:4f:8e:68:71:b9:03:c2:9d:f3:22:7e:86:aa:1e:
37:47:96:72:39:ac:4e:94:93:e1:42:8b:44:50:ee:
1c:e1:70:63:2f:ca:1f:45:b9:a8:30:95:05:61:75:
9b:ec:43:18:01:5e:ac:02:62:42:73:ed:b8:7e:a8:
4b:e7:7c:95:28:6f:91:e0:6a:7e:ef:08:ae:4a:e4:
03:b2:64:f9:bf:81:13:a0:2c:79:ab:5c:96:17:af:
d8:6a:eb:32:31:b4:55:4d:31:be:e3:2c:42:da:a7:
a8:77:52:80:6e:6a:6b:b1:5b:0e:37:94:b2:ca:b5:
81:55:ae:00:44:15:0f:f3:e8:e6:8e:d5:86:14:21:
b2:c9:af:82:08:e9:6f:54:22:f7:df:92:73:b5:7e:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FF:A3:FF:16:F5:D8:4A:05:2F:42:8D:04:D8:CB:E8:CF:49:78:61
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Pv-j_xb12EoFL0KNBNjL6M9JeGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.182.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:3d:c2:d8:69:1b:36:0f:13:e0:56:c0:d9:09:c9:da:36:4d:
5a:e1:57:3b:41:1b:c0:d5:c4:a6:7a:36:f6:4d:82:d4:c9:05:
bb:ae:3b:f0:3c:d7:d4:8b:3c:19:97:81:da:d4:30:e9:82:ee:
a4:23:bb:44:41:8f:e9:1a:65:c4:a5:ee:12:22:ca:0f:7c:93:
ed:69:4b:3d:32:d8:2a:a2:34:a1:ca:a2:b7:cf:0c:fd:bc:68:
3b:73:88:c1:de:c5:ef:08:e5:ba:74:e5:2c:b2:76:8d:3b:9f:
e8:04:47:a0:9c:fc:b7:e7:42:49:65:76:b6:30:34:88:54:06:
01:f5:6b:f1:e2:07:0b:4a:95:6f:bb:28:6f:72:b7:83:a4:90:
06:ff:7c:27:46:ab:8c:a9:12:6e:28:14:82:3e:16:d8:3f:06:
5d:47:2a:7d:c6:18:39:26:45:8c:9c:db:a0:7a:f2:68:8d:8c:
4c:f6:2d:5a:0c:80:b8:da:0c:eb:52:9f:4e:e0:a6:fb:52:f6:
21:b9:89:f6:45:ba:c0:5a:f0:20:38:a8:c1:c3:b0:4f:09:e5:
d5:ca:4e:98:ba:a7:a8:1d:97:76:93:24:7f:b7:89:bb:d1:54:
e7:0c:31:18:f8:00:07:ff:11:f2:84:1a:39:01:e0:8b:2b:51:
4b:6f:6f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:53:03 2025 by rpki-client