Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/9rPnc621PCZSzvwMRaLBWF8yQec.roa
File: 9rPnc621PCZSzvwMRaLBWF8yQec.roa (raw, json)
Hash identifier: aB0fVKMxCD/z6BkZVG11TiYmDJy+6wMvki78RDMmYco=
Subject key identifier: F6:B3:E7:73:AD:B5:3C:26:52:CE:FC:0C:45:A2:C1:58:5F:32:41:E7
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01979D3F099FC932E7D688FABBE9DBCC4ED2
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/9rPnc621PCZSzvwMRaLBWF8yQec.roa
Signing time: Mon 23 Jun 2025 14:44:03 +0000
ROA not before: Mon 23 Jun 2025 14:44:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205229
IP address blocks: 185.49.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:3f:09:9f:c9:32:e7:d6:88:fa:bb:e9:db:cc:4e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jun 23 14:44:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6b3e773adb53c2652cefc0c45a2c1585f3241e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a3:fa:2b:71:2a:f7:68:97:c4:6f:8b:ed:c8:
db:d9:a2:c7:0b:7b:24:38:4d:4a:a1:65:1a:88:99:
db:ea:43:d4:aa:4b:14:65:f8:7a:f4:10:98:0d:ff:
b8:86:a0:9f:0a:05:7c:b4:6e:dd:82:7f:48:4e:8d:
b4:28:7f:41:fc:21:5f:eb:48:10:82:84:5a:5a:36:
6b:a8:ea:e1:2d:0c:3a:21:0e:72:60:78:e9:b4:ab:
a0:63:46:bb:93:ed:ac:fc:98:74:d0:26:e5:6c:56:
4c:37:dc:98:53:0b:15:bf:47:d5:a2:71:f2:53:bd:
9b:16:48:87:60:24:0e:65:7a:71:3e:94:3a:23:1a:
61:1f:a6:80:b8:48:9a:b3:6b:11:9c:8d:8b:87:b8:
e0:c1:e5:6e:e9:a9:20:40:7b:55:c0:3d:b7:b7:97:
5c:9c:32:89:d0:9c:a8:00:4d:c4:01:77:2a:88:41:
c9:00:fa:b7:fe:58:32:e9:1e:6e:c7:a3:0c:35:5a:
e4:19:36:bd:36:9b:22:be:6e:08:68:2e:45:fa:65:
7a:01:4c:ce:61:3e:ad:c3:8e:01:36:c3:32:f2:a1:
e8:1e:50:c2:3d:95:9e:be:23:3f:91:8e:d3:69:bc:
62:80:9d:3f:10:1e:c5:22:0e:dc:56:36:b3:c6:3b:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B3:E7:73:AD:B5:3C:26:52:CE:FC:0C:45:A2:C1:58:5F:32:41:E7
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/9rPnc621PCZSzvwMRaLBWF8yQec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.104.0/24
Signature Algorithm: sha256WithRSAEncryption
94:eb:9b:67:f6:43:2d:74:1d:df:52:db:79:e6:fd:20:b3:1f:
7e:73:ac:0e:55:da:c6:8d:20:fe:12:68:a1:84:1e:b9:6d:53:
1f:af:70:a5:a1:ad:f3:62:88:ec:5d:d9:d4:44:67:5c:63:c7:
c4:77:08:0f:09:4d:a0:47:85:dc:79:0c:e1:2a:e2:b2:ae:c2:
40:c4:99:bc:fb:0e:e9:68:0d:9a:e9:90:30:d4:08:8c:21:74:
04:fb:f1:7f:0a:f4:d6:63:71:a4:a7:e1:dc:0f:80:4d:4d:e2:
09:7f:7a:09:25:75:55:9f:19:d1:67:7f:56:dc:1d:4d:fb:f0:
b5:93:5b:de:46:86:ba:45:22:d7:ff:ca:7b:bb:a4:e8:5a:ee:
ef:b9:ab:b3:7f:3f:af:35:bb:63:4c:68:17:47:4a:cb:64:94:
19:11:69:05:96:95:fe:ea:14:69:2b:4a:e8:0a:60:e0:a7:a9:
16:d4:6e:c7:d0:d9:b5:be:71:66:e8:7d:71:9a:67:33:07:41:
9d:e7:c8:b2:e1:69:4b:69:78:85:c9:61:14:da:3b:9c:b8:7a:
b9:1a:3b:db:b4:5f:d7:d0:8c:37:63:3e:71:6f:30:04:78:fb:
ef:c7:e5:35:e6:2e:0a:c4:dd:8a:26:14:9e:cb:64:74:e4:06:
5b:02:7d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:06:13 2025 by rpki-client