Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/2j3kAJC1aDvfwJPuGUvb554m29Y.roa
File: 2j3kAJC1aDvfwJPuGUvb554m29Y.roa (raw, json)
Hash identifier: Hr+M1o8+SSmf7r+qXis6TOXIjRUjTFBSHGU0mpn3FN4=
Subject key identifier: DA:3D:E4:00:90:B5:68:3B:DF:C0:93:EE:19:4B:DB:E7:9E:26:DB:D6
Certificate issuer: /CN=4f32d40a53bb60b86759e6ec0a5207300b41af70
Certificate serial: 0197A6F36C665C841AEEED5FD93798DF8705
Authority key identifier: 4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/2j3kAJC1aDvfwJPuGUvb554m29Y.roa
Signing time: Wed 25 Jun 2025 11:57:40 +0000
ROA not before: Wed 25 Jun 2025 11:57:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205179
IP address blocks: 185.50.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:f3:6c:66:5c:84:1a:ee:ed:5f:d9:37:98:df:87:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32d40a53bb60b86759e6ec0a5207300b41af70
Validity
Not Before: Jun 25 11:57:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da3de40090b5683bdfc093ee194bdbe79e26dbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:29:38:35:5c:d9:5d:2e:45:66:66:db:46:56:
1e:05:c2:8e:f7:67:d7:b0:7a:d3:39:5b:db:82:74:
3e:86:11:4f:94:9b:ae:50:01:1a:74:17:86:3f:ff:
fa:dc:cd:11:89:f2:46:2e:f3:e6:93:c9:a8:02:5f:
33:16:b5:5c:af:68:a8:80:b2:84:13:1d:01:23:02:
77:e2:30:0a:e5:2c:9f:b1:46:fe:02:2a:9f:8a:ba:
b5:98:b7:99:f4:92:80:a7:8d:65:4e:04:05:e6:fd:
ed:ec:dd:42:02:64:51:50:7d:57:55:eb:45:39:95:
0e:98:1b:2b:d5:78:d5:f3:0a:1f:6c:cf:c6:c1:66:
8f:bb:fa:76:2d:ce:4f:69:e9:15:45:76:72:78:3b:
34:99:e4:18:e0:7b:bd:77:9c:67:7f:21:95:a5:a2:
8c:19:49:ea:8d:02:07:b4:06:41:ed:a7:99:4a:a7:
86:0d:8e:39:82:d5:cd:eb:11:2a:a3:2b:d3:83:e2:
34:35:5c:50:d9:5e:61:13:e7:ce:72:2f:14:d2:0a:
df:5f:72:88:97:cb:18:b1:71:72:88:07:ba:94:ad:
76:92:c2:50:52:3c:ef:a6:95:d8:d2:80:ca:a0:64:
4d:f6:20:a4:94:96:83:ea:64:10:b0:1b:27:ee:e5:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3D:E4:00:90:B5:68:3B:DF:C0:93:EE:19:4B:DB:E7:9E:26:DB:D6
X509v3 Authority Key Identifier:
keyid:4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/2j3kAJC1aDvfwJPuGUvb554m29Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.179.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:22:a7:ac:67:5c:9e:0f:4e:b4:23:26:47:0c:2e:8e:ba:c1:
88:01:93:b0:3e:93:45:90:2a:18:c3:93:f2:ba:b5:84:26:3d:
90:2f:15:dc:e0:b1:1f:7e:59:48:5b:31:83:b2:39:4e:a2:a0:
80:05:7d:2e:a1:da:49:73:9c:9a:b9:02:ee:93:92:cf:f9:36:
29:5e:10:f9:32:5a:42:8e:e5:df:67:93:88:f4:72:0e:bc:a9:
61:e5:65:60:92:79:25:94:bc:23:30:bb:84:d7:36:27:e0:7d:
99:d5:04:7e:7b:9c:a5:22:8c:73:0f:ec:3b:d7:77:78:ab:b9:
b2:62:57:43:cc:38:0d:1d:e7:77:cc:52:ec:a0:57:45:ae:21:
64:93:73:77:24:5f:f8:02:35:e2:29:62:62:11:22:e7:78:00:
2a:4b:c1:84:bd:53:93:51:92:69:b8:5e:08:c6:3c:03:68:71:
f6:1d:b3:ae:7a:19:d0:b7:00:e6:f1:ef:b6:b6:03:c2:4e:36:
2a:81:63:be:33:30:13:61:cd:d2:bc:01:9f:f2:55:f6:88:c7:
52:67:02:5b:3f:4c:c2:3a:02:3e:d3:be:8e:62:81:f1:f5:fe:
73:9b:7b:12:a1:dd:8a:20:69:f5:d1:8b:29:35:86:75:fc:aa:
65:bd:7b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:19:11 2025 by rpki-client