Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/M4I4vx1xHRyGLzdFv0m3WqQ7kbc.roa
File: M4I4vx1xHRyGLzdFv0m3WqQ7kbc.roa (raw, json)
Hash identifier: 2EMSvLZ8cjOngMWy3qqLP47J5l90EJ/AMLuHP59YgVk=
Subject key identifier: 33:82:38:BF:1D:71:1D:1C:86:2F:37:45:BF:49:B7:5A:A4:3B:91:B7
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 01977E26BF913C8CA3492225E7F6574949F7
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/M4I4vx1xHRyGLzdFv0m3WqQ7kbc.roa
Signing time: Tue 17 Jun 2025 13:49:17 +0000
ROA not before: Tue 17 Jun 2025 13:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60248
IP address blocks: 130.193.77.0/24 maxlen: 24
194.56.148.0/24 maxlen: 24
195.110.38.0/24 maxlen: 24
195.110.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:26:bf:91:3c:8c:a3:49:22:25:e7:f6:57:49:49:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jun 17 13:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=338238bf1d711d1c862f3745bf49b75aa43b91b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:fc:23:e9:04:3a:00:26:ff:35:3c:fc:e6:
01:63:7c:29:49:23:62:d1:ff:3a:f3:31:70:c7:64:
f3:cc:dc:80:a0:6e:a8:6a:0c:70:00:54:39:f0:b9:
85:18:5d:05:fc:53:37:45:b3:b1:cb:8b:47:08:67:
e3:a1:42:a3:b5:a8:43:a9:32:77:07:e7:cf:d5:1a:
9f:8e:b3:7b:05:46:78:56:65:4e:47:9e:87:7d:43:
66:e0:04:db:23:47:c5:3a:18:6f:63:c6:ad:70:30:
86:c9:80:b7:cc:0d:ce:3a:1b:0b:1b:cd:79:37:21:
5d:df:37:9b:80:8c:6b:fd:fc:54:e3:23:12:b0:9c:
3a:aa:e5:db:b9:e7:92:2c:3a:00:4a:c5:bb:aa:5e:
ba:36:30:0e:92:96:f6:40:9e:a6:b7:14:8b:8d:70:
c9:6e:dc:0c:06:79:1f:d4:89:db:88:20:6b:7e:07:
00:08:bb:03:9d:17:64:a8:fb:1c:fc:48:00:15:70:
93:49:84:96:20:32:fc:fe:96:36:1e:1f:de:55:ba:
45:e5:c6:da:20:e6:61:fe:dc:87:89:63:ff:02:68:
2a:e4:ef:75:da:0b:8b:db:d5:1a:75:d2:8e:a1:a6:
d3:5c:39:46:31:68:55:47:88:25:e8:e7:35:08:2f:
8b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:82:38:BF:1D:71:1D:1C:86:2F:37:45:BF:49:B7:5A:A4:3B:91:B7
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/M4I4vx1xHRyGLzdFv0m3WqQ7kbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.77.0/24
194.56.148.0/24
195.110.38.0/23
Signature Algorithm: sha256WithRSAEncryption
56:90:03:cb:1a:e4:a9:d0:53:df:71:3b:b4:c8:54:a2:d6:56:
3d:5e:f9:cc:d3:12:02:15:60:15:a8:e5:15:15:84:c0:55:a7:
85:22:4a:a1:09:07:16:c9:c8:72:4d:b8:c4:3a:c9:c7:14:d2:
df:64:28:98:24:ff:ff:45:b6:03:6a:45:72:2a:ca:15:f9:6f:
77:7f:01:57:b7:59:a8:4a:24:d2:dd:f6:b2:93:97:07:c0:c7:
ad:8a:48:75:d3:66:4f:f7:57:59:55:bf:11:b1:16:98:a8:cf:
04:f5:5e:8a:67:e9:e0:cb:38:49:ba:f6:7a:d9:67:b8:32:b7:
66:84:3e:7a:3f:42:9b:b9:59:50:49:4d:c3:c0:01:4e:67:fa:
16:c9:0a:39:05:2d:96:61:42:8b:0e:1c:b5:6e:78:40:27:10:
6d:87:76:8b:82:5e:13:a8:34:a3:02:d1:1a:30:55:66:c8:01:
e0:28:5b:fd:b8:3a:a4:78:a5:f6:20:46:d7:be:bc:9a:c3:1d:
15:fc:f6:50:1b:b8:f1:d7:91:a3:8d:98:0b:70:f1:f7:60:e0:
e6:de:94:43:1a:a0:d1:05:7f:a3:62:40:7c:81:40:8f:16:e2:
df:d8:33:15:3f:1d:35:d2:90:6d:78:b1:57:ee:ca:c0:91:3d:
26:78:7b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:59:31 2025 by rpki-client