Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1f1yulYvkKPs8smtiFE_ehn0CCk.roa
File: 1f1yulYvkKPs8smtiFE_ehn0CCk.roa (raw, json)
Hash identifier: Hk2f/eppwmrV2o0rka5mk/w5xamka8K89SBwsdZ/Z1g=
Subject key identifier: D5:FD:72:BA:56:2F:90:A3:EC:F2:C9:AD:88:51:3F:7A:19:F4:08:29
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 01978DBF25080768C7196B1AAB4E34D16EE0
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1f1yulYvkKPs8smtiFE_ehn0CCk.roa
Signing time: Fri 20 Jun 2025 14:30:03 +0000
ROA not before: Fri 20 Jun 2025 14:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42135
IP address blocks: 193.232.115.0/24 maxlen: 24
212.193.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8d:bf:25:08:07:68:c7:19:6b:1a:ab:4e:34:d1:6e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jun 20 14:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5fd72ba562f90a3ecf2c9ad88513f7a19f40829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:47:e7:b4:ff:8b:c5:9a:ce:ae:d6:aa:bf:09:
5f:5b:90:a8:01:d6:77:fe:06:d3:ff:e5:24:ee:21:
6b:1c:61:17:cd:e5:5d:a6:62:d9:cd:b9:e0:b1:82:
d9:a5:18:4f:e1:34:71:7c:d2:2a:54:51:61:f1:ea:
db:23:44:b8:bd:71:d4:96:66:01:d0:d2:d8:e5:50:
fa:e3:ee:21:f6:48:89:57:e6:44:e2:9b:31:4e:72:
18:91:a9:34:62:0f:92:be:1b:0e:66:51:4f:7b:87:
e1:8a:d2:5f:c8:54:d5:91:6c:9b:f2:0c:1a:7a:5a:
dd:fe:71:39:c2:8b:40:ef:69:be:f7:5d:e8:14:44:
88:dc:01:f2:11:55:98:b0:26:c0:9c:c3:a4:01:12:
72:a8:70:f7:0f:4f:ed:7f:da:35:0a:49:83:7b:50:
7b:8f:da:d5:6d:89:1d:a5:df:c2:36:d1:be:e7:63:
0e:2c:65:0e:69:f2:b5:4f:12:71:c7:d0:1f:69:e5:
ed:46:d7:10:84:03:4b:de:08:28:14:49:f0:71:45:
c9:76:c8:78:ac:e2:cb:16:ff:f0:c5:d1:3b:5b:53:
ea:9a:b8:6b:8d:e0:a5:7b:31:fc:79:44:2a:1b:cf:
b3:00:d0:b8:3e:fa:af:c8:a0:74:cc:dd:ed:fa:36:
76:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FD:72:BA:56:2F:90:A3:EC:F2:C9:AD:88:51:3F:7A:19:F4:08:29
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1f1yulYvkKPs8smtiFE_ehn0CCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.115.0/24
212.193.99.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:74:35:70:18:6e:a6:e9:59:3b:42:c9:aa:d2:96:26:78:f2:
dd:0d:c2:b3:f3:3f:e8:6b:2f:86:a6:f6:aa:a9:6a:2f:0a:fb:
48:6f:65:24:df:d5:e5:f0:b6:21:5a:b8:b9:41:68:2b:8a:8b:
25:54:13:62:a5:30:0f:85:cc:28:5d:97:a7:f5:a7:8a:79:ae:
1c:05:61:8d:8f:6f:3f:99:53:fb:1d:26:1d:e0:f1:05:31:4c:
8b:e5:0f:37:26:fe:79:62:29:9b:2f:1b:e1:e8:ce:d6:da:a0:
b9:e6:19:36:41:36:46:e6:eb:e0:1e:03:66:3a:31:85:81:ea:
c7:19:3b:1a:46:66:c4:64:d5:47:8d:db:5c:a3:5e:4f:78:eb:
bb:bf:00:d3:cc:f9:89:38:86:3d:87:47:2e:94:cf:10:a2:c8:
aa:06:2c:76:db:8f:4a:41:7d:ad:e4:67:9e:71:87:db:e6:15:
23:0a:e8:b4:dd:53:ee:ce:c6:39:8e:d8:21:86:c2:aa:5d:2d:
8a:2c:50:4b:7c:53:65:cc:51:82:3d:24:fa:cf:c0:6e:75:8c:
07:41:a4:ec:97:37:20:2c:b1:14:7c:89:fd:55:86:27:9d:e8:
0b:a3:45:8f:82:d9:e1:ce:4c:60:32:bf:7b:96:4f:55:20:90:
d7:98:05:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:15:53 2025 by rpki-client