Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Ii1lJUj6NBLiKdze-Nh49gVwWyw.roa
File: Ii1lJUj6NBLiKdze-Nh49gVwWyw.roa (raw, json)
Hash identifier: Pcnuyy8IQ/UewOusTxa+Gv+Y4DfEpnjSEZVTsZ6KwKc=
Subject key identifier: 22:2D:65:25:48:FA:34:12:E2:29:DC:DE:F8:D8:78:F6:05:70:5B:2C
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0197B11D62F834296FC90D0D18F052F80CBB
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Ii1lJUj6NBLiKdze-Nh49gVwWyw.roa
Signing time: Fri 27 Jun 2025 11:19:42 +0000
ROA not before: Fri 27 Jun 2025 11:19:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14061
IP address blocks: 124.198.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:1d:62:f8:34:29:6f:c9:0d:0d:18:f0:52:f8:0c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 27 11:19:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=222d652548fa3412e229dcdef8d878f605705b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:54:68:99:b0:f4:7a:61:47:5c:e3:1b:43:
d1:9d:7c:f1:4f:b3:7a:cb:30:be:ee:b1:6a:e0:7e:
96:7f:49:78:9b:c6:5b:c9:56:76:c2:78:ee:bc:6b:
6a:e5:ed:d9:ce:6e:f0:92:b0:23:3c:b7:23:03:50:
2b:bb:5e:1c:54:96:70:50:6f:76:5d:b6:82:3e:99:
f6:d1:52:2c:d4:a0:10:d2:c2:51:b1:cc:a6:d3:b4:
11:75:ba:52:7f:2a:0c:bd:b1:59:16:1c:4c:f3:7b:
0f:83:29:8f:de:8e:6f:1c:fd:d9:2e:90:0a:2d:35:
fd:0f:a4:15:51:d1:17:91:cf:0b:f4:d6:76:b0:6e:
d2:f6:8f:27:93:8f:ee:62:d2:15:65:4f:00:3b:7e:
56:5a:9d:ab:0d:2a:35:c7:68:a1:d9:95:89:20:ae:
bf:72:e1:75:70:09:54:11:b2:12:8f:cc:13:c6:35:
c9:d3:68:89:93:e7:a8:e3:ec:fe:66:a8:aa:99:aa:
2b:36:e0:28:d8:4e:b7:86:1c:fe:a0:20:7a:5a:72:
b4:48:3e:a3:2a:7b:ff:31:1d:5d:19:34:cd:59:97:
11:4a:6d:cd:4f:ac:8e:0d:90:15:b6:f3:23:88:89:
7c:d8:6b:37:24:f4:1f:9b:fc:a6:65:24:de:a6:15:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2D:65:25:48:FA:34:12:E2:29:DC:DE:F8:D8:78:F6:05:70:5B:2C
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Ii1lJUj6NBLiKdze-Nh49gVwWyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.198.144.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b2:7f:7e:b5:31:16:87:37:27:15:00:1a:c1:e9:0e:00:8b:
82:2c:2a:3d:1c:9c:0b:5a:58:03:07:7c:3b:47:7d:2a:c0:21:
43:19:9e:c2:5e:51:e4:50:32:a3:11:8c:8b:e5:56:3e:74:52:
2b:3f:de:06:ab:9b:02:62:3b:72:b8:94:cc:6c:73:5a:5c:fe:
2f:ef:00:63:b4:c0:0a:5a:1b:e2:fa:1f:2f:53:3b:6b:9e:bb:
7d:90:d0:f6:7f:59:76:a4:85:ba:8f:05:3a:5c:2b:51:a5:ba:
3c:30:ce:ae:31:ee:e2:ce:fc:ea:d0:1d:e9:06:92:17:4d:3b:
f1:63:22:22:2c:5a:bd:09:0c:bd:1e:cc:1e:79:36:12:07:35:
4d:80:e3:45:b5:82:1c:b6:d9:55:49:3e:c7:93:1c:e7:b0:dc:
ff:e3:43:35:41:f2:ac:85:1a:08:cc:b2:ad:b7:d8:9e:c2:bd:
8f:b1:57:b8:d5:45:08:d6:74:7b:82:ca:8b:9a:60:67:6f:42:
d3:7c:c7:be:5e:c5:f6:10:ed:c5:a7:d1:16:42:7f:63:4b:36:
d2:59:02:d3:27:e9:4f:85:b7:b7:02:e1:3c:f6:af:20:6f:4a:
d6:6c:8c:0b:ab:2c:26:a9:ba:90:d5:17:5f:af:cd:04:be:41:
af:6e:69:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZexHWL4NClvyQ0NGPBS+Ay7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjUwNjI3MTExOTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjJkNjUyNTQ4ZmEzNDEyZTIyOWRjZGVmOGQ4NzhmNjA1NzA1YjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfhUaJmw9HphR1zjG0PRnXzxT7N6
yzC+7rFq4H6Wf0l4m8ZbyVZ2wnjuvGtq5e3Zzm7wkrAjPLcjA1Aru14cVJZwUG92
XbaCPpn20VIs1KAQ0sJRscym07QRdbpSfyoMvbFZFhxM83sPgymP3o5vHP3ZLpAK
LTX9D6QVUdEXkc8L9NZ2sG7S9o8nk4/uYtIVZU8AO35WWp2rDSo1x2ih2ZWJIK6/
cuF1cAlUEbISj8wTxjXJ02iJk+eo4+z+ZqiqmaorNuAo2E63hhz+oCB6WnK0SD6j
Knv/MR1dGTTNWZcRSm3NT6yODZAVtvMjiIl82Gs3JPQfm/ymZSTephWNzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCItZSVI+jQS4inc3vjYePYFcFssMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvSWkxbEpVajZOQkxpS2R6ZS1OaDQ5Z1Z3V3l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAfMaQMA0G
CSqGSIb3DQEBCwUAA4IBAQB1sn9+tTEWhzcnFQAawekOAIuCLCo9HJwLWlgDB3w7
R30qwCFDGZ7CXlHkUDKjEYyL5VY+dFIrP94Gq5sCYjtyuJTMbHNaXP4v7wBjtMAK
Whvi+h8vUztrnrt9kND2f1l2pIW6jwU6XCtRpbo8MM6uMe7izvzq0B3pBpIXTTvx
YyIiLFq9CQy9HsweeTYSBzVNgONFtYIcttlVST7HkxznsNz/40M1QfKshRoIzLKt
t9iewr2PsVe41UUI1nR7gsqLmmBnb0LTfMe+XsX2EO3Fp9EWQn9jSzbSWQLTJ+lP
hbe3AuE89q8gb0rWbIwLqywmqbqQ1Rdfr80EvkGvbmmJ
-----END CERTIFICATE-----
Generated at Wed Jul 2 21:20:00 2025 by rpki-client