Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1Crec_VRUpySYCBcnh1EC9jPyek.roa
File: 1Crec_VRUpySYCBcnh1EC9jPyek.roa (raw, json)
Hash identifier: 2GWLYBj2MNa4BS4IaXiZguFNzV3/jE/N+C9qBg/p9Bg=
Subject key identifier: D4:2A:DE:73:F5:51:52:9C:92:60:20:5C:9E:1D:44:0B:D8:CF:C9:E9
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01977D2CCEF9F8B28B180BD3EABBB2A2A25F
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1Crec_VRUpySYCBcnh1EC9jPyek.roa
Signing time: Tue 17 Jun 2025 09:16:17 +0000
ROA not before: Tue 17 Jun 2025 09:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 194.67.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:2c:ce:f9:f8:b2:8b:18:0b:d3:ea:bb:b2:a2:a2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 17 09:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d42ade73f551529c9260205c9e1d440bd8cfc9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:55:1d:35:97:7f:74:96:10:e6:3e:0a:65:
96:17:20:40:ab:4e:a2:7c:40:5a:dd:3e:38:02:78:
6d:31:1e:54:b1:0a:03:63:e0:5a:ee:ca:83:d2:0d:
62:ef:e3:8c:6f:cd:67:6c:d8:12:e8:45:20:45:2b:
ca:00:34:61:7a:e0:a8:28:c2:31:8a:23:1d:c0:2d:
78:ea:57:be:f4:44:5b:ed:22:53:26:a2:4a:48:8e:
46:3e:01:9f:1c:b9:7c:c7:17:59:a8:cb:45:0a:a8:
b5:bd:85:e1:b2:68:c7:bd:82:a6:33:41:fb:1e:5f:
70:ac:eb:e3:e8:0e:e7:8b:5f:2d:8f:49:ad:f8:6d:
d6:aa:21:5f:88:20:f5:7a:82:df:2b:08:be:95:76:
51:d2:70:4a:85:00:c0:34:e8:04:ab:4a:39:83:6b:
7d:cf:50:d3:28:60:2e:c1:71:bc:c5:b5:62:77:f7:
2d:69:d3:bd:eb:a9:40:91:13:a0:f7:88:b6:5c:7f:
36:5b:ee:00:c3:fe:c5:60:67:60:b6:d7:92:5f:9d:
e8:6b:b8:8c:b5:39:62:47:1c:a7:09:ce:60:86:77:
e2:bd:ec:81:31:fe:a2:a8:5d:ce:4e:4b:90:38:69:
64:7f:3c:b2:6d:ab:a4:9d:af:c5:92:07:80:1c:25:
c7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2A:DE:73:F5:51:52:9C:92:60:20:5C:9E:1D:44:0B:D8:CF:C9:E9
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/1Crec_VRUpySYCBcnh1EC9jPyek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.193.0/24
Signature Algorithm: sha256WithRSAEncryption
77:44:ae:db:cf:92:15:9f:5c:2c:19:4d:a4:a9:2c:5d:52:62:
45:2c:93:94:e1:66:d3:75:a1:a0:d9:0e:b7:02:1c:fb:b8:29:
c4:dd:ba:d0:3c:23:f8:ec:2f:aa:91:7e:33:c0:95:ba:86:e8:
02:23:8b:20:aa:9b:d7:2c:91:2b:14:7c:c5:4c:20:95:6b:53:
25:ab:03:f3:00:28:39:55:9e:c3:97:f0:a1:f3:16:d9:6f:52:
67:91:a1:46:a6:c4:d8:e8:fb:57:d5:d1:85:3b:d7:b3:b6:ce:
b0:47:72:ce:28:99:13:00:93:ab:1b:15:6c:06:fa:44:7c:2c:
a6:f5:ed:62:f7:f6:f2:b3:07:ea:b4:81:c0:f9:ba:7e:98:0d:
8b:d7:b7:fb:e5:97:37:2a:46:6d:45:e5:f5:79:12:24:81:05:
69:6f:40:36:91:7d:11:67:20:7d:43:00:f9:19:44:3d:83:08:
9c:7a:a2:c5:aa:71:6c:52:df:bf:01:4a:7f:f5:56:09:12:e9:
66:9e:6a:79:95:00:65:17:c0:a5:29:3a:a9:3a:f2:47:d4:72:
14:71:b3:d6:99:6a:2b:e9:99:33:8c:f4:dc:1d:5b:49:79:56:
34:ad:07:7d:b5:b9:4e:1e:3f:e8:3a:ad:71:7d:93:a1:ab:d9:
36:23:59:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:26:38 2025 by rpki-client