Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Z2dSkQ6PASRngm_2ArTJe9mzGwQ.roa
File: Z2dSkQ6PASRngm_2ArTJe9mzGwQ.roa (raw, json)
Hash identifier: 2dzsM88NRUyjmGplJFA3j8lI1oArTGFKZ1kC35f7j6Y=
Subject key identifier: 67:67:52:91:0E:8F:01:24:67:82:6F:F6:02:B4:C9:7B:D9:B3:1B:04
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0197545F8E1F6BFA6471972E45DE91B4C86F
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Z2dSkQ6PASRngm_2ArTJe9mzGwQ.roa
Signing time: Mon 09 Jun 2025 11:07:17 +0000
ROA not before: Mon 09 Jun 2025 11:07:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202736
IP address blocks: 152.89.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:5f:8e:1f:6b:fa:64:71:97:2e:45:de:91:b4:c8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jun 9 11:07:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=676752910e8f012467826ff602b4c97bd9b31b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:4f:0a:02:71:81:77:b6:61:96:ac:bc:f4:
13:12:dd:9f:08:c8:1d:84:7b:17:a8:5e:4b:c6:ef:
ad:22:8b:12:47:fb:2b:15:67:6e:8c:27:9d:e7:ca:
ac:86:5f:9c:53:63:8d:47:74:8f:d3:e1:d4:6f:6b:
15:da:72:70:4c:1a:e7:f2:a5:99:0f:06:bc:3b:8e:
e9:b2:bf:2e:7a:8e:74:98:d4:29:d3:9d:ab:ee:82:
bd:f8:a2:d3:c6:74:ad:db:d8:30:cc:1f:fb:fe:06:
6e:65:11:2a:23:5c:6e:58:23:4c:90:4f:f3:bb:c9:
20:13:ad:fe:20:14:c0:38:f0:f7:c0:51:1e:cb:19:
6a:45:7b:e8:5c:db:c5:78:ea:76:9e:11:e9:24:57:
90:a5:e4:d6:36:bf:7e:a8:e6:5f:7d:48:94:61:85:
43:7c:ee:10:0b:b2:92:ae:ab:ac:f5:4c:ec:47:26:
6e:ca:52:a9:f0:e1:d3:1c:80:35:25:4d:6a:ea:93:
3a:22:3b:ea:e2:99:53:26:08:8e:c0:c9:11:5b:42:
38:29:a7:b7:a2:bb:6c:59:16:37:6c:8e:6c:1a:70:
75:2c:b4:fd:8b:6a:72:d3:da:1c:76:c7:bf:2d:4f:
25:75:87:e4:c7:9b:de:d0:d2:2b:93:15:99:3f:2c:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:67:52:91:0E:8F:01:24:67:82:6F:F6:02:B4:C9:7B:D9:B3:1B:04
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/Z2dSkQ6PASRngm_2ArTJe9mzGwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.86.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7f:cb:95:91:8e:a0:d2:23:a5:0a:9b:dc:9b:13:7c:af:5a:
ca:9d:cd:c8:02:6c:be:14:81:c0:ad:3f:1d:d5:10:0e:4c:65:
ed:a9:0e:f7:bf:4a:d6:0b:c8:b5:c3:0c:6b:61:f9:fe:56:11:
e4:9e:3f:88:59:aa:cb:ed:d0:b9:ba:86:68:7c:9c:8c:a1:08:
83:d2:82:12:b5:d5:b6:87:ba:86:ac:01:46:7d:72:6a:50:a6:
c5:51:3c:9a:98:94:de:6f:21:0c:bc:90:40:18:01:66:2b:fb:
dd:0b:db:75:e9:0a:e7:7d:bf:98:9f:11:fa:e8:83:8a:4e:30:
37:af:96:94:95:5e:10:c6:07:be:c1:a1:84:e5:3e:5c:4a:64:
3a:80:4a:17:fc:2a:a9:b9:f6:41:00:1a:67:d8:21:be:d6:66:
a6:0a:ec:8d:bb:32:60:03:88:27:42:f4:52:2d:7a:b8:ff:12:
b6:e3:ec:2d:e8:d5:52:5f:c9:71:8e:ac:46:c1:23:09:92:44:
7d:7f:8f:58:7e:72:3a:92:58:25:5b:bf:80:4c:2b:0c:d2:f7:
54:51:ff:66:7d:90:ff:43:99:c3:8a:44:0c:76:c9:cf:82:1b:
27:6d:7f:b3:a6:be:5c:87:ad:0c:5f:29:6d:04:d0:50:5c:e3:
43:08:0c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:19:19 2025 by rpki-client