Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/POEM5awQqnF9pX7JYcnF1elwzs8.roa
File: POEM5awQqnF9pX7JYcnF1elwzs8.roa (raw, json)
Hash identifier: 49nS3lcR4hsEaPE+EDv7isyh73K9kstaToRtFPQqZA0=
Subject key identifier: 3C:E1:0C:E5:AC:10:AA:71:7D:A5:7E:C9:61:C9:C5:D5:E9:70:CE:CF
Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial: 0197B2A7FAC726BA3A025CCAA1D9CABBEDB8
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/POEM5awQqnF9pX7JYcnF1elwzs8.roa
Signing time: Fri 27 Jun 2025 18:30:42 +0000
ROA not before: Fri 27 Jun 2025 18:30:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 46.16.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b2:a7:fa:c7:26:ba:3a:02:5c:ca:a1:d9:ca:bb:ed:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Validity
Not Before: Jun 27 18:30:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ce10ce5ac10aa717da57ec961c9c5d5e970cecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a2:8c:d3:86:23:4f:8a:90:91:f9:73:33:51:
81:8f:6a:c4:48:87:b0:13:fe:cf:01:62:79:51:85:
1e:6a:48:7e:ad:ba:ab:c0:43:50:ad:91:a5:00:9d:
43:24:af:fc:3e:0e:f4:8b:7b:6e:dc:8e:22:e5:4d:
17:16:84:cb:f6:7d:67:da:4e:cc:44:93:cf:31:12:
3a:3f:18:92:57:f6:1d:bb:f3:9f:3e:c8:39:ce:6d:
c9:ad:66:0f:68:49:47:63:35:24:4e:cd:c9:9f:6b:
86:15:6a:d5:ce:ac:ab:13:f1:4e:42:ee:8f:10:4b:
dd:19:c5:65:2c:42:2e:fe:cb:f3:38:41:5b:bd:db:
44:82:21:2f:43:b7:e6:a5:23:6f:02:db:1b:a1:bb:
b4:44:49:26:c4:30:c1:fd:1e:26:7a:bb:8f:27:2d:
74:79:f1:2b:19:d6:df:bd:58:a9:16:65:e8:17:3f:
d5:6c:1a:71:cf:06:75:0c:81:40:dd:3e:bc:f0:14:
d8:df:fa:0c:03:32:88:97:cf:8f:8b:0d:8e:c4:77:
6f:3d:85:fa:e7:97:5e:c4:6e:6f:38:ca:ea:e8:ea:
bc:e9:af:70:25:3e:53:4c:38:05:16:ff:2a:95:10:
19:9a:8d:a7:86:9b:b8:d9:0f:f3:4b:d5:5f:16:ec:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E1:0C:E5:AC:10:AA:71:7D:A5:7E:C9:61:C9:C5:D5:E9:70:CE:CF
X509v3 Authority Key Identifier:
keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/POEM5awQqnF9pX7JYcnF1elwzs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.162.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2b:9f:b8:4f:e6:52:99:90:81:ca:33:70:d9:e3:36:8b:7a:
b8:65:0a:89:be:f4:22:2c:5c:f3:31:90:ef:26:d4:06:f7:7f:
6e:ee:fc:94:a4:f7:74:d2:19:16:c5:ed:b0:c5:86:26:f4:4f:
e7:58:c3:b9:51:42:77:b9:58:8a:0b:3e:ef:fb:1a:91:af:41:
5f:41:32:b8:4b:21:b1:31:47:be:23:d0:d8:26:bf:3c:6d:0d:
33:70:a0:8c:9d:ba:3c:dc:2c:21:1d:75:20:b1:eb:4c:ce:6f:
d4:ac:1c:74:7f:c2:79:ee:12:ee:28:10:84:7c:1a:6b:d3:a6:
15:95:52:5c:a2:2c:a2:d0:30:79:32:64:1c:85:65:c1:50:9e:
98:93:60:f6:0f:f2:1a:0a:0b:df:79:f5:b2:04:4a:56:6f:cd:
90:5c:42:5f:cc:ff:5a:d2:8c:fb:62:25:8f:c6:90:7d:62:cc:
47:29:0f:51:e1:1d:d0:fd:29:59:0b:9f:9e:a8:1f:92:c9:50:
e7:08:5f:eb:ab:b5:68:33:21:97:ed:ec:f9:3b:36:a4:81:8a:
17:a2:09:25:3a:e5:a8:fc:78:77:b6:32:96:77:a0:36:84:f4:
c9:5a:2e:9c:ab:f2:e2:10:4b:39:cd:29:24:8b:d3:bd:b6:e2:
51:9a:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:52:32 2025 by rpki-client