Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/aPO8bO2clWLS21EZQlESI-7wVLc.roa
File: aPO8bO2clWLS21EZQlESI-7wVLc.roa (raw, json)
Hash identifier: rSz4ITdo+EiO9fypHJWegkZR9JDiu5BYFVF3ikj1u3A=
Subject key identifier: 68:F3:BC:6C:ED:9C:95:62:D2:DB:51:19:42:51:12:23:EE:F0:54:B7
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 01978268D9F57F6CB71AEE0B2963D8E4106C
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/aPO8bO2clWLS21EZQlESI-7wVLc.roa
Signing time: Wed 18 Jun 2025 09:39:58 +0000
ROA not before: Wed 18 Jun 2025 09:39:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199077
IP address blocks: 46.21.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:68:d9:f5:7f:6c:b7:1a:ee:0b:29:63:d8:e4:10:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Jun 18 09:39:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68f3bc6ced9c9562d2db511942511223eef054b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:38:6b:0d:db:e4:04:a4:08:df:33:c2:b0:
fb:12:41:ce:4c:09:a8:d0:21:9d:27:67:33:90:67:
3c:e7:6b:04:2b:00:59:fd:a5:b0:2a:55:85:01:f1:
03:02:e5:37:db:8c:ba:ac:87:24:c6:e7:94:9c:06:
d6:4a:8d:fe:c8:05:8e:59:4a:00:ae:c1:72:af:3a:
47:47:8d:36:ec:13:25:72:31:6d:d3:b6:3b:69:30:
a0:3d:4e:a5:4a:8b:b8:9e:d7:f1:6b:de:c1:03:f5:
07:4c:da:f1:ee:b5:47:71:40:9c:f0:a5:aa:38:0a:
82:a8:ec:9a:2e:1e:49:8c:68:15:f0:c7:30:85:52:
78:ca:54:13:68:dc:74:bb:33:05:7b:7b:b8:85:ab:
10:01:33:af:0e:6a:fd:a3:96:ee:16:27:25:6b:e3:
7a:43:6a:d6:e3:45:2d:0a:56:6b:5c:b6:fa:ce:8b:
a3:0c:3c:fa:35:2e:bc:4e:49:39:3f:4e:fd:c3:08:
94:bb:d9:3f:3b:6d:a9:4d:7a:37:8e:60:5e:38:7e:
e9:9f:7c:63:fa:bd:fc:76:8d:a0:90:c0:e0:b8:0d:
c2:2b:35:c4:1f:98:e9:11:c6:16:b2:44:d0:f2:3b:
c8:33:9b:7a:82:0c:72:a2:90:b0:59:4e:53:e8:7d:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F3:BC:6C:ED:9C:95:62:D2:DB:51:19:42:51:12:23:EE:F0:54:B7
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/aPO8bO2clWLS21EZQlESI-7wVLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.22.0/24
Signature Algorithm: sha256WithRSAEncryption
32:10:4c:28:98:3f:2f:ae:c3:7e:ee:a6:2c:ef:03:b7:7b:c6:
be:7b:c6:73:d3:0c:75:1f:c0:5f:cf:94:80:24:ba:84:d0:c4:
f5:bf:0c:2a:3b:dc:1f:02:51:b6:7a:cb:f9:63:3e:b2:bb:f8:
19:4d:70:16:24:e2:7f:d2:f2:77:af:72:2a:b6:41:78:9f:b6:
60:5b:16:4d:05:00:cc:cb:1f:e7:36:35:0e:96:0d:15:cb:ac:
e4:34:f8:e3:d8:07:62:4d:63:70:b7:2b:1c:fc:ea:44:2e:70:
6c:de:2a:8f:5d:23:3c:f5:7c:33:81:02:e2:8e:bd:24:46:52:
16:87:49:32:00:d2:89:ec:d4:5c:42:80:e8:79:fa:4d:4f:97:
bb:69:26:42:57:19:65:d6:b2:be:2d:87:61:54:32:0a:e3:d2:
10:0d:99:01:31:72:04:73:cb:6f:b2:2d:35:45:ac:8f:6c:9c:
9e:91:7e:7a:b3:65:7e:93:a5:e8:fc:8c:cc:77:0f:3a:a4:46:
82:d8:82:62:21:86:59:4a:73:aa:8c:f4:8c:c5:e3:41:b9:4f:
12:59:bb:52:7f:44:2e:d0:6c:93:a5:65:70:fc:32:b2:ee:67:
4c:bd:5d:20:ff:95:67:82:05:7f:86:95:1e:e2:86:68:24:a1:
34:c4:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:35:54 2025 by rpki-client