Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/CJKrvfEV4R_0NA2HlWLn1iaa5nI.roa
File: CJKrvfEV4R_0NA2HlWLn1iaa5nI.roa (raw, json)
Hash identifier: E29tOWrPsjSif11h8zQtcjAftAPpTUltP2Sbayy6/Is=
Subject key identifier: 08:92:AB:BD:F1:15:E1:1F:F4:34:0D:87:95:62:E7:D6:26:9A:E6:72
Certificate issuer: /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial: 0197C642E64A0A4F0958AC5C71761527A7B5
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/CJKrvfEV4R_0NA2HlWLn1iaa5nI.roa
Signing time: Tue 01 Jul 2025 13:52:42 +0000
ROA not before: Tue 01 Jul 2025 13:52:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211325
IP address blocks: 92.61.180.0/22 maxlen: 22
2a13:f480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:42:e6:4a:0a:4f:09:58:ac:5c:71:76:15:27:a7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Validity
Not Before: Jul 1 13:52:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0892abbdf115e11ff4340d879562e7d6269ae672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:56:e2:39:fe:8b:5d:f8:dd:fb:c2:45:40:31:
6f:1c:06:7f:7d:46:77:6a:91:00:0d:b3:3e:d9:fc:
1a:bf:a4:7a:19:fe:ab:6c:4b:67:a4:8d:29:6e:0a:
14:e2:06:19:e4:cf:8c:cb:44:6c:3b:39:a3:9c:4f:
8d:79:18:6b:da:47:91:c7:7f:03:1b:09:4a:86:9b:
e4:cb:7b:0b:c2:d5:a6:00:5d:15:19:28:e3:b0:2f:
22:46:f9:21:e2:1c:60:c2:86:23:96:38:45:ef:3c:
ef:fd:8c:48:bc:a8:38:e3:c3:da:ef:2b:7d:3f:67:
31:ba:89:b7:22:19:57:ac:d0:a2:64:da:c2:48:67:
ae:7d:72:00:2f:f2:c8:4b:68:cd:62:d1:39:79:2a:
15:c9:e0:95:bc:7c:66:0c:98:a3:01:b1:6f:b6:69:
92:de:5e:92:58:ab:72:fc:75:e0:4a:d0:4f:07:31:
eb:5d:83:bd:3e:a7:e9:95:0c:a5:f7:d3:b7:38:97:
90:a9:f2:5c:d8:a2:19:f2:89:07:23:19:87:ab:d0:
5e:d1:3c:5b:d8:13:48:e2:41:06:74:16:bf:ad:c2:
8d:bf:50:e8:a6:ab:84:41:48:18:3b:11:c2:0c:f0:
c4:44:d8:3b:ef:9a:aa:57:49:d8:4a:2e:4b:4b:e4:
e6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:92:AB:BD:F1:15:E1:1F:F4:34:0D:87:95:62:E7:D6:26:9A:E6:72
X509v3 Authority Key Identifier:
keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/CJKrvfEV4R_0NA2HlWLn1iaa5nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.180.0/22
IPv6:
2a13:f480::/29
Signature Algorithm: sha256WithRSAEncryption
32:c2:77:16:34:37:7f:7d:e7:6f:1a:5a:86:3b:54:df:9f:d8:
33:2a:c7:bb:18:92:72:a7:11:de:f1:75:93:ec:1d:48:cc:f2:
51:69:00:a3:17:c9:65:49:36:c7:ba:c3:86:a6:5e:a0:7a:93:
44:c9:1f:cd:ca:34:9e:e9:7a:ac:78:b6:05:31:06:52:19:ec:
51:e5:df:2b:45:e0:e6:36:be:66:51:cf:c5:90:c6:ba:53:e8:
d1:02:a9:94:99:39:e4:9c:bf:08:bf:02:f2:a7:14:2c:f5:9c:
b4:36:73:30:11:e6:85:49:bd:c9:a6:f3:f8:03:05:74:46:ba:
51:2e:b4:af:01:59:24:e9:fc:33:ac:f5:3c:b2:62:1b:2a:1d:
d5:71:1c:7c:5e:bf:62:1f:7a:44:b8:e5:a3:b6:d5:6a:1c:1e:
94:7c:20:e8:05:84:30:b8:72:2b:e5:c9:06:0e:9d:5e:85:de:
f9:00:b0:15:25:14:41:44:dc:1d:86:ea:a2:77:11:8c:2a:cd:
c4:0e:38:5e:98:07:54:d3:92:f8:d0:0e:4c:11:dc:10:4a:32:
0e:6b:93:6b:4e:ee:81:7e:86:80:11:a9:2a:e9:a0:53:e8:b6:
b3:9f:cc:0d:fe:c8:c6:1b:0c:c5:f5:b5:4e:01:30:90:70:99:
81:d8:5f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:44:05 2025 by rpki-client