Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ojJ9ocCRd1Z14PJ5zitQZPtTwvQ.roa
File: ojJ9ocCRd1Z14PJ5zitQZPtTwvQ.roa (raw, json)
Hash identifier: N/c8CsjJUquTdbvTHEsG7e5eZ+SI1kQPC6T2BjS2yfk=
Subject key identifier: A2:32:7D:A1:C0:91:77:56:75:E0:F2:79:CE:2B:50:64:FB:53:C2:F4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0197B1E324A6B191A208A7868E771D78BFB4
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ojJ9ocCRd1Z14PJ5zitQZPtTwvQ.roa
Signing time: Fri 27 Jun 2025 14:55:42 +0000
ROA not before: Fri 27 Jun 2025 14:55:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31574
IP address blocks: 193.181.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:e3:24:a6:b1:91:a2:08:a7:86:8e:77:1d:78:bf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 27 14:55:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2327da1c091775675e0f279ce2b5064fb53c2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:98:60:b5:d1:62:aa:b9:5e:d2:6d:de:b4:
17:be:cd:ca:31:8b:8c:1a:96:a6:29:6b:c4:79:30:
18:8e:5f:66:8d:d3:8f:f4:32:66:ed:06:15:30:e9:
ea:95:56:fa:c6:4b:24:35:97:66:cb:64:0a:2b:4d:
16:e7:b9:af:ec:8f:71:a4:a8:e3:06:ed:48:73:7b:
3d:77:d0:c3:ee:dc:a8:ee:83:71:1f:13:87:3b:10:
ef:ce:25:27:70:f1:78:da:52:09:1c:df:20:76:12:
f5:8e:13:be:ea:53:74:4d:1c:31:f0:f5:ce:a4:65:
6a:ea:1e:84:a4:cc:e3:bd:a0:39:38:c2:a7:dd:0a:
a7:8d:fd:dc:a0:25:56:41:a2:1c:7f:f8:09:c8:10:
39:af:49:5a:92:c6:39:d7:d6:77:d3:2f:34:3c:30:
30:2d:2d:54:91:7d:8c:55:fe:25:6e:17:f6:b6:a1:
20:7b:b7:86:66:98:83:86:65:d4:4f:74:39:58:a4:
db:83:d3:60:84:0a:2e:1a:35:e5:95:3b:5b:b3:87:
19:f5:ac:d1:a6:40:0c:ce:7f:0d:79:67:86:2e:1d:
00:44:93:1d:a7:34:23:ba:a2:cc:5c:6b:e8:56:42:
11:4b:8b:6c:f0:52:20:2e:31:a8:26:01:01:78:bf:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:32:7D:A1:C0:91:77:56:75:E0:F2:79:CE:2B:50:64:FB:53:C2:F4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ojJ9ocCRd1Z14PJ5zitQZPtTwvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.59.0/24
Signature Algorithm: sha256WithRSAEncryption
99:6f:c9:4b:af:09:53:fe:14:46:6e:ac:d6:2f:57:39:06:10:
4b:b1:ad:93:88:7b:44:14:b2:76:ce:63:84:db:0e:53:7c:a8:
18:18:1b:b4:10:b9:5b:12:ae:d2:d0:8e:47:11:4a:c0:e3:2b:
02:2d:70:9b:0d:a5:7b:40:7a:01:39:18:91:1e:bc:74:8e:54:
2b:31:13:1b:06:59:ce:38:0a:9a:01:5f:c6:48:a8:3f:8c:c3:
81:29:4f:80:06:8c:16:3c:8c:d9:08:ee:cb:eb:e2:23:e1:c5:
83:ce:d7:1f:84:24:56:3e:32:1f:89:12:fa:b9:e5:6a:03:43:
5b:0a:38:71:dc:71:4a:1b:28:d1:e1:5d:82:07:ec:7a:72:9f:
6b:3a:2c:e3:50:a2:fc:98:2c:cb:64:ec:bd:eb:9e:45:80:25:
29:1b:53:a9:36:5a:2c:47:d7:56:3a:c9:89:29:74:3b:d0:69:
59:0e:cd:a8:de:2c:40:e9:e3:1a:29:8b:77:d0:ad:3d:dd:0c:
67:de:00:10:28:52:60:4e:e4:05:27:2e:30:81:64:a3:6e:0a:
51:65:75:75:ac:35:4e:f4:ed:20:e1:1a:81:f5:04:4c:ba:8d:
81:c7:6b:d8:c5:f9:03:3f:04:ab:fd:3a:56:c8:d2:a8:af:90:
97:7b:a8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:34:59 2025 by rpki-client