Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_-euoJHZXd2jUITWsTfEZCzyL4c.roa
File: _-euoJHZXd2jUITWsTfEZCzyL4c.roa (raw, json)
Hash identifier: na0JIfOfXC+SuSWeeEWsOPZm2teGL3E0t86FqqYqfNQ=
Subject key identifier: FF:E7:AE:A0:91:D9:5D:DD:A3:50:84:D6:B1:37:C4:64:2C:F2:2F:87
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019796755D6BED0D3FF4CF0A484A514D96F8
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_-euoJHZXd2jUITWsTfEZCzyL4c.roa
Signing time: Sun 22 Jun 2025 07:06:03 +0000
ROA not before: Sun 22 Jun 2025 07:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9318
IP address blocks: 176.57.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:96:75:5d:6b:ed:0d:3f:f4:cf:0a:48:4a:51:4d:96:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jun 22 07:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffe7aea091d95ddda35084d6b137c4642cf22f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:ba:ba:bb:90:cb:10:12:90:ae:46:5e:b9:
7f:29:43:c9:6d:78:9d:7f:db:5c:07:3b:22:49:11:
67:43:9e:93:d0:9e:1e:f0:23:4f:ef:91:3c:9c:85:
bd:38:44:72:8c:76:ae:9c:c1:9d:0e:50:27:77:1c:
5f:58:80:29:ea:62:8e:b9:4d:94:b3:ad:fa:2c:ec:
85:d4:bd:39:a7:75:f8:f6:92:27:d8:dc:b7:9c:10:
bd:77:7a:f2:e4:ee:02:df:e7:75:fa:49:03:db:ce:
28:ea:28:c4:0a:6c:90:bd:48:50:aa:69:53:ad:e7:
7b:dd:a0:ab:43:c1:64:ba:76:2a:8e:d2:12:a3:d2:
49:99:8d:09:15:23:93:5f:4a:66:e7:1a:a2:58:87:
25:4a:47:b4:37:b9:7c:3b:e5:13:06:ee:05:67:90:
8a:b2:04:d4:a9:49:9d:b6:8e:99:89:07:94:f5:57:
f6:9c:ff:d6:b6:d4:d5:78:8f:38:cc:dd:9e:f1:2a:
98:66:f6:25:c9:9f:8f:90:01:00:31:11:7b:5f:f9:
82:6f:fc:a9:7b:bd:69:17:66:dd:b0:ff:56:1e:b5:
ed:9b:bc:e3:c9:62:ce:87:02:c1:b5:46:2a:60:4b:
cf:ae:cc:96:87:ac:d2:fc:db:58:f4:bd:4d:3f:f3:
fc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E7:AE:A0:91:D9:5D:DD:A3:50:84:D6:B1:37:C4:64:2C:F2:2F:87
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/_-euoJHZXd2jUITWsTfEZCzyL4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.56.0/24
Signature Algorithm: sha256WithRSAEncryption
75:50:cf:df:8f:b5:c2:03:07:5a:25:b0:e8:b3:e9:62:78:b5:
94:1b:1e:2b:3b:ce:ac:36:73:07:d4:89:ce:ad:88:6f:07:3a:
c0:65:5b:61:7f:32:12:94:04:9f:b7:a3:f6:3d:69:d6:47:80:
d9:72:c1:65:95:a4:1f:2b:12:30:00:fa:81:9e:56:5f:fc:cb:
6d:9d:41:72:44:bf:b4:ae:41:80:3f:6a:88:1d:9c:29:34:6d:
b1:d2:a0:a0:2c:35:01:51:12:5f:26:6b:15:b5:1d:1d:3a:89:
e8:e1:98:8e:07:84:f0:67:c1:0d:f8:56:64:35:16:1e:5f:62:
e1:a7:fd:06:e8:74:6d:24:cf:65:0d:b4:bf:5f:60:a5:37:9a:
32:64:1e:63:6e:25:39:6d:9b:b3:a4:9f:c4:15:57:fa:72:5b:
90:c6:71:84:06:64:e6:37:4d:67:bd:86:f9:c3:8f:15:9e:03:
18:eb:c9:9b:41:57:17:9a:5c:92:45:b7:8f:cb:30:d8:b4:49:
73:94:e2:74:7b:59:de:5f:cf:f9:b8:99:a8:47:5f:9f:3e:76:
40:26:77:94:74:0d:47:73:7e:30:81:2d:ff:95:e2:c8:8e:ca:
a5:83:19:d9:f7:5b:b4:5d:85:80:5e:f0:7d:af:18:af:07:84:
f8:3d:31:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:52:50 2025 by rpki-client