Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/j23rxrd-Lsv5i-XlSgQQvzbmNH4.roa
File: j23rxrd-Lsv5i-XlSgQQvzbmNH4.roa (raw, json)
Hash identifier: AOwdW+Sra4IA2tk75pjPupKPHVlPdSlV6DBy+ee+RBw=
Subject key identifier: 8F:6D:EB:C6:B7:7E:2E:CB:F9:8B:E5:E5:4A:04:10:BF:36:E6:34:7E
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01977DC95C404F9EDF618CB2BEA7CDDD66EE
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/j23rxrd-Lsv5i-XlSgQQvzbmNH4.roa
Signing time: Tue 17 Jun 2025 12:07:17 +0000
ROA not before: Tue 17 Jun 2025 12:07:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 194.143.223.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:c9:5c:40:4f:9e:df:61:8c:b2:be:a7:cd:dd:66:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 17 12:07:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f6debc6b77e2ecbf98be5e54a0410bf36e6347e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a5:3b:24:55:02:70:72:4f:5c:bb:e4:3e:3e:
77:14:8e:fa:55:e2:37:f6:16:70:2f:7f:5f:8b:ed:
30:d6:3d:a5:54:4a:18:08:55:3a:bc:41:ff:01:c3:
05:54:29:c2:47:e4:78:44:f7:40:7b:7e:d6:f5:dc:
37:87:18:5d:f4:2c:54:c2:2a:e7:47:d5:d8:db:fb:
37:05:d9:aa:fa:99:d2:93:80:30:db:ac:5b:9d:df:
c0:83:a5:2a:ad:ca:13:97:a9:bd:7b:ac:ce:00:02:
57:d7:f1:a6:23:97:b2:6a:57:d5:14:39:cd:22:6d:
22:6e:9f:fb:5e:42:7b:f7:98:9e:f3:86:69:f7:ab:
ee:d8:ef:a2:9d:0a:f9:3f:ac:43:4f:ba:2e:bd:1e:
32:11:76:47:0e:e4:9a:57:4d:2f:f0:7a:cf:9a:7e:
71:60:5c:0a:ee:16:f7:4e:a1:09:a3:71:6b:4b:db:
8e:ca:ad:ad:0d:3f:41:e5:40:5c:12:8d:e9:77:47:
cf:4b:d5:15:1e:39:73:0d:0d:44:0b:fc:0e:24:90:
7c:94:f9:65:fb:99:c9:7c:83:de:ec:39:9e:cf:36:
e4:ae:4c:01:bd:25:fe:ab:e0:6d:c3:5c:e9:e7:a3:
9b:43:ef:2e:41:52:4b:e2:16:84:3f:a8:eb:7c:cc:
36:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6D:EB:C6:B7:7E:2E:CB:F9:8B:E5:E5:4A:04:10:BF:36:E6:34:7E
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/j23rxrd-Lsv5i-XlSgQQvzbmNH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.223.0/24
195.114.205.0/24
Signature Algorithm: sha256WithRSAEncryption
28:3c:2b:13:48:1a:48:c2:46:66:10:76:c8:93:6d:1b:b8:44:
ec:8a:b4:97:b5:ee:e0:06:ea:3f:93:1d:ee:11:45:86:1d:23:
01:6b:01:d6:3f:66:c4:21:f6:cf:e8:0c:7c:80:70:26:18:09:
a1:52:4e:a8:cc:4b:f2:2c:62:01:37:f2:c8:fa:30:03:4b:d3:
86:ab:b9:48:6e:ff:b2:1b:49:31:c7:46:3e:9d:20:07:56:6e:
04:d4:58:ff:d8:30:00:9b:a4:58:f2:1c:b1:61:9e:5b:70:e0:
8c:fb:05:fe:39:92:f7:c4:e6:90:f9:f7:b5:0f:b8:ee:b6:f1:
64:8d:0b:39:af:85:c7:14:a3:2f:56:41:cc:81:63:b1:ff:35:
89:43:8f:44:85:5e:84:c8:cf:44:cf:20:0e:a3:a3:77:1e:5f:
2e:09:80:c6:3f:60:2f:a4:af:f8:49:30:66:af:ea:de:e9:ef:
e1:c4:10:78:3e:d8:42:d6:a7:8b:f2:56:6b:71:9a:7f:27:52:
56:bd:15:b5:db:dd:c2:f2:83:73:7e:dc:ef:18:55:06:5f:d9:
c0:36:82:cf:96:b5:dd:41:fb:4b:63:e5:e6:12:92:d4:f4:0d:
91:85:15:f1:76:37:f3:e2:5c:c8:3a:e1:70:3a:aa:a0:47:57:
f9:6c:15:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:58:31 2025 by rpki-client