Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/bbObKOeu6H0tOgWKFFpKvP9AQ5Y.roa
File: bbObKOeu6H0tOgWKFFpKvP9AQ5Y.roa (raw, json)
Hash identifier: 46+pO6LmE1DlkXffkxBwf62bOZBzvEVVCFmRWPQeevU=
Subject key identifier: 6D:B3:9B:28:E7:AE:E8:7D:2D:3A:05:8A:14:5A:4A:BC:FF:40:43:96
Certificate issuer: /CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Certificate serial: 01977D97EBC52756EF244C534726933350AA
Authority key identifier: A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/bbObKOeu6H0tOgWKFFpKvP9AQ5Y.roa
Signing time: Tue 17 Jun 2025 11:13:17 +0000
ROA not before: Tue 17 Jun 2025 11:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61438
IP address blocks: 194.110.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:97:eb:c5:27:56:ef:24:4c:53:47:26:93:33:50:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Validity
Not Before: Jun 17 11:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6db39b28e7aee87d2d3a058a145a4abcff404396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:30:09:5c:2a:e7:b5:9e:a6:e7:c3:ca:86:bb:
16:b5:6b:dc:a3:1d:5b:23:4d:8b:1b:a9:72:92:a9:
65:b4:11:48:12:19:c5:04:ed:59:7d:a7:6a:44:61:
99:68:45:64:cd:9e:aa:0e:e7:3a:a9:f5:a9:a7:80:
1a:e7:48:eb:d1:f6:10:d8:7a:b2:1c:41:8d:56:15:
f1:43:37:3d:5a:08:79:6c:35:b4:41:fd:6b:92:c8:
0b:df:b7:3d:cc:6b:c8:f2:80:44:46:a7:c8:d3:3c:
8b:5a:43:ca:86:f2:e6:10:bc:b5:41:1e:d6:13:7a:
7f:fa:1c:6d:9b:e4:4e:2c:58:92:19:11:37:77:1a:
42:7b:a2:c3:45:70:e9:d9:a9:1c:5a:f2:81:a7:4c:
37:93:01:8e:aa:d5:57:2c:e4:dc:83:9a:f6:48:07:
90:d5:23:b8:9b:6e:bd:39:cd:c5:04:6a:5e:15:26:
ab:01:9c:68:d5:d8:c7:59:b2:d5:0b:de:3a:c8:40:
d0:ed:68:c1:a4:51:7d:c6:8d:b5:26:85:d3:89:1c:
d2:4b:a5:02:62:b6:4a:4f:99:9d:5a:bc:4e:82:bd:
3c:20:ae:e4:57:b4:27:9d:39:3b:58:d3:4e:c6:ee:
47:49:26:14:d2:4e:d2:4c:93:70:ef:81:78:86:0f:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B3:9B:28:E7:AE:E8:7D:2D:3A:05:8A:14:5A:4A:BC:FF:40:43:96
X509v3 Authority Key Identifier:
keyid:A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/bbObKOeu6H0tOgWKFFpKvP9AQ5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d9:13:bc:9b:0d:2b:0c:95:70:c2:6e:12:5a:13:96:5b:61:
06:d0:fe:ee:a3:df:69:ea:ef:5a:43:20:bc:cf:87:61:9c:f4:
34:df:10:9a:6e:97:52:a8:b6:38:04:2b:e7:77:21:19:54:ae:
18:e9:6f:82:f1:ca:44:84:76:7b:38:86:33:11:8a:54:1d:eb:
b5:27:00:aa:52:cf:df:53:55:79:92:34:2f:6a:3e:bf:69:39:
81:89:51:8e:eb:31:b2:6f:44:d3:88:46:7c:1f:c4:ee:27:95:
df:27:23:cd:de:bc:49:98:4e:b2:b0:7e:48:a5:29:30:49:bb:
fa:52:76:ab:5c:99:2d:1f:7b:c7:80:7c:fb:53:49:b3:64:e0:
a6:13:4c:7d:49:ad:98:07:38:ec:c0:34:66:95:55:29:a1:d4:
3c:0f:50:fd:ce:d5:08:ea:65:81:05:a3:fb:3a:93:99:fd:44:
25:f9:d6:66:28:bb:35:ed:07:12:c9:97:28:d4:cb:bb:81:84:
b2:10:6d:fe:05:95:4e:f3:1c:5d:33:3f:fc:44:dd:b6:e3:98:
b2:e5:e4:9e:b6:d5:0a:19:2f:fa:43:cc:57:af:d5:d0:d3:80:
51:a2:ee:d7:52:e1:ec:69:29:25:78:1d:5e:ed:3b:b8:05:d9:
fe:9c:d1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:03:41 2025 by rpki-client