Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/dWEbMjaLU3aUXNyJ1vBeLmObyYY.roa
File: dWEbMjaLU3aUXNyJ1vBeLmObyYY.roa (raw, json)
Hash identifier: XYLS96k5QjcmvPO6+gN1adTzVReS6mK/09xNzzxTkQ0=
Subject key identifier: 75:61:1B:32:36:8B:53:76:94:5C:DC:89:D6:F0:5E:2E:63:9B:C9:86
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0197641DB4723E3FC367A69688A19F5EA49C
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/dWEbMjaLU3aUXNyJ1vBeLmObyYY.roa
Signing time: Thu 12 Jun 2025 12:29:17 +0000
ROA not before: Thu 12 Jun 2025 12:29:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:1d:b4:72:3e:3f:c3:67:a6:96:88:a1:9f:5e:a4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jun 12 12:29:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75611b32368b5376945cdc89d6f05e2e639bc986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:15:4f:fb:e1:9d:31:b2:23:62:83:e3:bf:
84:a2:50:5a:dd:74:88:36:73:39:7e:ca:79:7c:f3:
42:21:5c:be:85:47:e5:d9:0f:e6:08:a2:e8:0a:72:
c6:9c:e5:b5:72:1c:fa:cf:e8:5e:d0:4e:1b:83:99:
79:c3:c5:60:af:16:93:ae:85:0a:21:05:e3:9e:c4:
cd:fc:01:3a:cc:4c:d1:0c:14:d5:7b:6e:34:a2:04:
04:e1:18:1c:ed:a9:26:7a:d3:d3:ea:04:80:4c:01:
b5:57:b0:f8:e3:c2:e7:f3:ae:5c:d1:4e:61:9f:37:
e0:6c:b9:6e:95:79:9c:61:bc:0a:6e:a4:39:e0:c0:
4b:db:86:33:bc:64:d3:1c:92:97:8d:9d:74:ab:21:
37:ff:28:25:38:37:4d:29:38:36:d0:8b:41:60:a5:
80:1a:9d:23:8a:c0:17:b7:f6:bc:a0:cb:18:43:c2:
88:b1:d1:31:3e:bf:2a:36:b5:1f:b3:c7:21:d4:d3:
bc:95:86:d7:8b:25:60:90:12:4a:e0:50:2b:98:87:
c4:d9:8c:60:84:1f:ce:96:b4:27:3b:09:49:83:1a:
1f:d0:80:5f:e2:2c:64:ae:6b:69:7d:bd:b0:bf:9f:
83:59:ce:d3:9c:79:c0:56:de:59:b1:67:5c:a1:03:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:61:1B:32:36:8B:53:76:94:5C:DC:89:D6:F0:5E:2E:63:9B:C9:86
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/dWEbMjaLU3aUXNyJ1vBeLmObyYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
Signature Algorithm: sha256WithRSAEncryption
56:7e:ae:76:a4:04:4c:11:c9:3d:90:4a:41:c5:b1:08:f0:2f:
c7:7c:a3:f0:2b:ea:d8:98:d1:7d:b1:75:4f:51:1c:e2:3f:86:
e1:11:bf:ce:ab:36:4a:9a:ac:8b:e9:3e:a6:c8:25:86:75:70:
ab:8e:3e:e5:1e:7a:9f:9e:02:05:95:fc:b5:74:53:ff:e9:fe:
24:71:33:7c:10:82:f3:d9:bd:fe:c7:79:29:e0:d3:02:b6:d2:
dc:73:74:7f:1f:18:da:3a:ec:f2:dd:da:8d:e4:14:ff:5f:d4:
ab:2e:1c:89:80:a5:4e:af:fb:01:5f:de:cd:02:6e:6d:9e:29:
83:65:fc:0c:ad:89:9d:0b:fa:dd:45:18:76:ad:f8:dd:3e:90:
eb:46:83:37:05:ab:21:6e:d4:c1:6c:3e:c4:32:8c:26:a5:bb:
ac:79:c1:33:e6:07:8f:78:10:88:da:5b:b5:c4:02:c8:95:66:
f3:26:6c:f2:43:b6:83:17:44:bf:52:43:49:88:a4:05:78:e0:
fb:71:ff:ab:71:a0:ca:81:e6:38:e3:6a:14:c1:19:e7:00:dc:
a2:a0:e1:70:b9:26:1b:85:f7:1d:ea:0b:7d:97:d8:da:3a:05:
6a:c3:0b:9a:80:d4:01:39:d2:76:fb:c4:b7:96:02:20:f1:ab:
4f:ac:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:23:48 2025 by rpki-client