Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/KbAXI0IOYcoOoPw6y-cV2m9E-80.roa
File: KbAXI0IOYcoOoPw6y-cV2m9E-80.roa (raw, json)
Hash identifier: fg8NGhzJOz2sVJmIvJ56BcLnWke4SMR50yZCF5BMuLU=
Subject key identifier: 29:B0:17:23:42:0E:61:CA:0E:A0:FC:3A:CB:E7:15:DA:6F:44:FB:CD
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01977D61E85733C7EA8AFA1821B1ACDD82AD
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/KbAXI0IOYcoOoPw6y-cV2m9E-80.roa
Signing time: Tue 17 Jun 2025 10:14:17 +0000
ROA not before: Tue 17 Jun 2025 10:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214648
IP address blocks: 195.178.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:61:e8:57:33:c7:ea:8a:fa:18:21:b1:ac:dd:82:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 17 10:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29b01723420e61ca0ea0fc3acbe715da6f44fbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:8b:f0:4b:1b:02:86:bc:99:27:73:28:99:
2b:19:85:a2:e5:2b:e0:a5:87:87:d1:0c:f3:91:2b:
73:7d:89:c6:39:58:51:c2:da:72:4a:2c:56:ed:bc:
2e:b3:52:06:aa:25:08:b4:59:49:87:15:03:31:5e:
a8:02:97:d3:d6:24:93:f7:41:1c:dd:6f:e2:08:ee:
46:e6:04:15:f3:ee:90:d8:fc:7c:68:85:4c:b4:f7:
65:56:fc:cd:0a:c1:de:4d:76:20:06:7e:11:8a:93:
7f:6b:8a:8f:73:9f:2b:2f:a7:9d:c0:b0:67:e4:0a:
af:4b:02:61:e5:87:1b:c9:c3:24:e7:af:ee:9f:29:
e9:8d:0f:01:88:64:ed:6c:fe:68:4c:08:45:e0:59:
57:c3:a6:73:87:e6:26:76:77:bb:9c:62:b3:e8:b7:
c6:eb:f1:8a:77:08:99:a3:ba:7d:a6:2d:4f:a8:1a:
1d:dc:69:36:69:33:15:27:5a:2d:02:7d:95:6a:f1:
23:6c:bc:5d:87:d8:26:79:8f:88:fb:9a:1f:fa:30:
d5:f8:db:44:dd:8a:41:1f:fd:33:0d:09:f0:7d:2a:
bf:f1:53:db:94:42:cc:0f:a8:d9:13:59:b4:b4:92:
cb:ec:77:91:df:f3:f2:fe:5d:ac:85:3a:ef:6f:59:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B0:17:23:42:0E:61:CA:0E:A0:FC:3A:CB:E7:15:DA:6F:44:FB:CD
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/KbAXI0IOYcoOoPw6y-cV2m9E-80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.128.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:e6:f4:2d:56:29:86:29:d4:5d:a9:3a:3d:42:39:77:d2:3f:
4c:57:f2:2e:f3:24:7d:1e:3a:9a:d4:09:60:ec:6c:6d:bc:34:
7c:d2:05:25:62:d0:f3:11:35:b7:6a:33:a2:2a:88:c9:cc:38:
3b:c6:c1:3a:0a:81:45:4e:b4:82:88:07:2a:e6:fa:97:47:05:
1d:33:04:d6:ad:3b:81:4c:28:b6:a1:72:ab:8b:ca:3b:85:60:
82:b2:0e:77:64:c6:1a:60:8e:6e:66:e2:8c:0e:82:33:d9:13:
71:cb:04:35:1c:ac:3e:8f:69:8a:e6:e4:d8:3c:db:2c:0a:6e:
76:d3:3c:50:4a:d8:bf:e2:c5:ef:8d:07:bf:d3:83:52:c5:ae:
05:a6:db:cf:ac:d4:23:42:8f:10:58:0b:12:90:0f:56:61:23:
28:4a:cb:f6:34:3f:6a:96:f7:36:bf:a4:3b:af:1a:ff:03:4f:
08:d8:54:4e:a9:26:85:f7:e9:30:6c:ae:59:70:0c:74:2c:57:
28:0e:ec:32:01:26:b0:ba:4e:b0:42:19:77:53:ba:f1:88:45:
f5:06:2d:8c:fa:89:82:fd:69:8d:84:7a:88:13:8d:51:81:62:
37:b3:1d:17:b5:99:cd:0f:bb:eb:e6:4d:e5:13:69:08:15:ff:
56:af:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:26:03 2025 by rpki-client