Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o2cc7lJCxcq2iUK_XC9eoTYOyVY.roa
File: o2cc7lJCxcq2iUK_XC9eoTYOyVY.roa (raw, json)
Hash identifier: zOcVemfOugitsdLSdYgJ02tE6vvxTPa/yhvUzdjl3P4=
Subject key identifier: A3:67:1C:EE:52:42:C5:CA:B6:89:42:BF:5C:2F:5E:A1:36:0E:C9:56
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0196C3E50DF5D856A75ECE47680E3A677CD7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o2cc7lJCxcq2iUK_XC9eoTYOyVY.roa
Signing time: Mon 12 May 2025 09:48:10 +0000
ROA not before: Mon 12 May 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43754
IP address blocks: 217.60.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:e5:0d:f5:d8:56:a7:5e:ce:47:68:0e:3a:67:7c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 12 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3671cee5242c5cab68942bf5c2f5ea1360ec956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:98:96:29:ac:9b:ef:50:49:67:a2:e2:a5:
92:5a:5f:85:3e:74:b5:30:67:90:07:65:e3:6d:ed:
61:aa:0d:e3:29:90:29:40:d8:90:7e:57:72:ca:99:
6a:87:8c:6a:f9:05:9b:09:63:99:23:2d:f7:82:14:
09:65:d9:b1:bf:77:30:a3:b0:f2:0b:b4:4b:6e:5a:
3e:41:71:3d:d0:fe:9e:e1:f1:df:92:f1:ea:31:6d:
4c:32:4b:71:cb:a9:74:77:61:fe:8f:89:48:2a:18:
85:d6:8e:64:58:20:38:8e:4e:8b:cc:cd:9d:54:d7:
33:d9:90:64:3f:54:91:db:52:4f:6a:89:1f:46:81:
35:b4:b9:af:87:98:36:09:52:f2:ab:24:17:48:9c:
ba:c1:60:d3:7d:88:6b:4b:38:b2:29:cc:4f:ad:75:
11:cd:ff:8a:90:8b:c3:71:6a:00:c0:77:6a:36:0d:
33:92:7a:25:52:c9:78:36:cd:da:6f:fe:af:7e:cf:
c9:8d:16:ed:4a:42:1e:33:59:3e:1a:47:e4:55:07:
79:29:53:5e:cd:51:11:6e:08:f2:78:84:2d:ce:bb:
19:ca:fb:88:2c:c9:8c:f1:41:57:56:4d:27:96:4e:
34:b5:c9:7f:a1:d9:fb:a3:12:1e:ad:51:1e:03:0d:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:67:1C:EE:52:42:C5:CA:B6:89:42:BF:5C:2F:5E:A1:36:0E:C9:56
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o2cc7lJCxcq2iUK_XC9eoTYOyVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.248.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b5:35:34:55:f3:73:24:50:96:28:b0:15:ac:66:2d:08:13:
29:2f:33:cf:07:76:ea:3f:f9:e1:31:29:cc:44:ed:6e:c8:ab:
45:21:f5:9b:a7:94:2b:04:f5:6b:74:70:f0:c8:52:2b:c6:a5:
f5:fb:8c:a1:d1:e8:5d:46:86:5c:24:11:d2:af:27:4a:54:4b:
3e:18:da:5d:a4:5f:ec:32:33:52:bf:9f:9d:6a:f1:3f:6f:34:
d8:30:24:8b:29:f3:60:fe:5e:8e:d3:77:98:b5:1d:5e:52:e0:
40:62:1c:3e:aa:02:90:87:cd:dc:77:8f:68:58:db:4e:28:29:
02:33:ee:bb:83:e0:fb:9c:d6:48:2f:0a:15:66:e7:cb:87:ed:
d1:34:13:c9:e0:cc:51:98:e9:38:6a:80:aa:ae:b8:68:17:e4:
33:c0:63:c0:85:44:20:d7:b0:e7:f7:18:84:2b:db:a5:ed:fa:
ef:41:27:c8:b4:4f:2e:b2:03:f1:3a:99:27:12:1b:eb:76:a8:
ac:c7:90:59:61:77:ad:48:4a:09:01:90:a7:98:07:d6:46:4e:
a2:16:37:08:c6:e2:e7:eb:68:25:ea:15:b9:3e:08:c8:76:b1:
bb:6c:65:e5:9b:25:29:ed:b9:3f:ff:7d:34:3c:ec:bb:69:63:
b4:09:0b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:37:30 2025 by rpki-client