Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/DWHdsFsQlnFJcyPewoXT0lDFpvE.roa
File: DWHdsFsQlnFJcyPewoXT0lDFpvE.roa (raw, json)
Hash identifier: V6x8BrWgOBTucNWB1MpK3cn6rjM3I3+oPKM+8Z7R5vA=
Subject key identifier: 0D:61:DD:B0:5B:10:96:71:49:73:23:DE:C2:85:D3:D2:50:C5:A6:F1
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 01977D0919305BA9AC63A76557A8A326A91F
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/DWHdsFsQlnFJcyPewoXT0lDFpvE.roa
Signing time: Tue 17 Jun 2025 08:37:17 +0000
ROA not before: Tue 17 Jun 2025 08:37:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8254
IP address blocks: 94.131.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:09:19:30:5b:a9:ac:63:a7:65:57:a8:a3:26:a9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jun 17 08:37:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d61ddb05b109671497323dec285d3d250c5a6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:4b:38:b2:77:dd:82:92:e7:75:dd:51:d4:
82:13:13:d4:dc:9e:be:dd:63:58:d4:b7:e6:85:6a:
7c:58:bf:a7:5a:23:ce:e7:8f:21:b1:e0:d2:c5:13:
18:b7:77:19:b4:3c:9d:7e:8c:c9:61:d8:13:60:03:
03:39:91:85:78:00:10:0f:91:de:cb:70:47:3c:8d:
5b:f4:89:7c:4a:00:80:2a:65:70:1e:bd:52:6b:e7:
86:f7:27:f3:41:b1:29:3c:00:da:12:92:df:5a:da:
06:47:d4:f6:a2:c9:5e:24:fa:f3:21:e7:1f:67:87:
2f:49:21:c2:7f:c7:3f:52:bd:5e:69:24:59:7b:b9:
b5:be:16:23:b4:fa:75:02:84:32:73:26:22:8a:54:
89:ca:50:cf:fc:92:d6:d8:28:a4:29:5f:bb:aa:01:
35:8e:bc:9f:44:50:de:1b:2a:79:fc:b7:14:db:6f:
19:6f:a0:4d:1d:5e:92:c8:8a:59:6f:d9:95:34:4d:
40:a4:cf:3a:28:39:5f:ad:b3:c6:28:bf:a2:2b:7f:
1a:2a:8e:58:96:43:97:87:cc:b5:85:a0:f2:61:74:
ad:3c:09:d7:ab:2d:a3:51:de:14:11:d2:c6:5a:a0:
4a:b4:c9:79:b7:ab:f1:aa:1c:74:67:25:b5:94:dd:
8c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:61:DD:B0:5B:10:96:71:49:73:23:DE:C2:85:D3:D2:50:C5:A6:F1
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/DWHdsFsQlnFJcyPewoXT0lDFpvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.16.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:08:fd:49:24:d0:9c:38:d9:83:5a:9e:b4:30:f0:70:20:a4:
b6:f8:fc:78:f0:3c:c8:6d:fb:fb:04:87:50:22:c1:02:b3:5c:
c7:dd:1f:08:12:55:cf:bb:5a:1f:cb:ae:0c:52:4a:67:34:77:
60:55:bc:f0:fb:33:9e:59:bb:0a:a8:39:15:89:c2:bf:13:da:
99:c6:ad:d3:25:d9:df:fc:48:4c:85:73:fb:76:bb:e9:5c:4b:
ec:52:32:dd:28:1f:cf:99:53:53:41:c5:8a:39:fe:28:25:a8:
fd:f5:d7:9c:c3:f6:77:a3:ce:09:ef:6d:e4:bf:07:45:b4:74:
1b:00:0a:ab:f2:73:e3:88:b9:13:ba:56:bc:6b:94:78:d6:28:
a1:d4:d3:11:6b:b2:cf:50:7c:d1:d4:5d:a8:fe:97:ab:ef:47:
2c:dc:cb:cb:85:5b:9f:ab:40:7a:46:e2:3c:72:63:41:2f:64:
68:8a:a9:98:c6:f0:14:59:2b:64:b9:1c:b9:d7:69:a6:f7:33:
49:b8:f2:c9:06:fd:da:ad:00:67:35:7f:9a:13:f6:0a:66:0e:
62:a9:69:df:7f:87:40:96:d0:2b:f1:dd:12:71:8f:0e:e8:fa:
bf:d0:02:75:53:87:4b:66:c7:f7:bb:f1:c3:73:e0:98:39:99:
8f:cc:56:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:27:05 2025 by rpki-client