Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/aizIqKjXfqxu2L9Do5SClHmuuHM.roa
File: aizIqKjXfqxu2L9Do5SClHmuuHM.roa (raw, json)
Hash identifier: VG8x//8NLvTPdp7pULF9tX4PLkvXpJw9Gy/1Yk1G5KI=
Subject key identifier: 6A:2C:C8:A8:A8:D7:7E:AC:6E:D8:BF:43:A3:94:82:94:79:AE:B8:73
Certificate issuer: /CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Certificate serial: 01979BFDAF48B469E69B4D667464959C7D6B
Authority key identifier: DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/aizIqKjXfqxu2L9Do5SClHmuuHM.roa
Signing time: Mon 23 Jun 2025 08:53:03 +0000
ROA not before: Mon 23 Jun 2025 08:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12966
IP address blocks: 193.227.216.0/21 maxlen: 21
193.227.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:fd:af:48:b4:69:e6:9b:4d:66:74:64:95:9c:7d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Validity
Not Before: Jun 23 08:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a2cc8a8a8d77eac6ed8bf43a394829479aeb873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:77:9f:37:ee:10:b5:26:87:59:bb:30:33:
6f:3f:e1:d4:8d:b3:8a:c8:3f:f3:72:00:4c:2a:fd:
2d:42:46:1a:70:fe:67:02:dd:4f:4c:b5:ac:97:b1:
f1:df:61:8a:9d:07:e3:54:2e:79:a7:73:b1:bc:bd:
07:b7:ec:66:78:28:ec:0f:c1:aa:3b:85:d9:9c:44:
a9:d4:6f:15:3a:96:af:c8:85:62:2a:25:7e:dc:77:
cb:69:65:48:be:c1:05:a4:15:c4:8a:25:82:cb:35:
79:26:12:4d:f7:63:b5:01:5a:15:0e:7a:15:4e:76:
8a:5c:e5:8f:ec:ba:98:6f:1d:49:15:8b:d0:58:bc:
6a:7f:78:5b:c7:84:5b:92:c0:98:85:02:82:ab:ee:
7f:db:a5:63:0b:b1:da:51:06:fd:e7:db:b4:63:75:
c7:9e:ea:80:d5:b5:9f:02:07:6d:6f:6b:4b:c6:33:
2b:23:eb:2e:28:0a:a5:60:35:42:bb:49:54:99:b1:
e7:62:8e:ef:0a:8b:fe:a6:bf:37:83:c5:93:12:9a:
12:88:2c:ee:e1:c9:f3:a4:22:20:37:ba:d9:dd:c2:
dd:4a:4b:ca:9c:cb:69:2f:94:10:74:45:ab:05:85:
35:f2:89:28:c7:47:7b:a9:16:86:f4:b0:76:de:73:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2C:C8:A8:A8:D7:7E:AC:6E:D8:BF:43:A3:94:82:94:79:AE:B8:73
X509v3 Authority Key Identifier:
keyid:DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/aizIqKjXfqxu2L9Do5SClHmuuHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.216.0/21
Signature Algorithm: sha256WithRSAEncryption
29:ea:d7:c1:53:34:83:26:61:ae:83:f3:45:90:44:d2:87:cb:
8f:41:f0:33:13:b0:16:ec:80:a3:5f:0d:60:f9:66:e2:47:06:
d8:58:89:bb:c0:64:2d:99:ac:3b:63:9b:43:0d:4d:df:d9:a2:
cc:75:50:7a:27:80:ee:a5:dd:99:86:12:fc:bd:e3:c7:39:50:
8c:7f:61:11:80:07:36:d1:58:a1:d3:33:e1:f7:99:59:82:7f:
75:c8:4c:97:48:a8:89:14:29:90:fc:80:c1:78:dc:4b:e9:7d:
b5:fd:a3:d3:d9:ed:46:fd:cb:57:1b:90:90:66:14:80:38:f8:
ce:43:78:20:c4:e7:8e:2b:36:fb:da:52:d2:e4:f8:20:43:c8:
e8:ad:47:c9:bd:12:cc:3a:44:0e:64:80:9c:86:2d:a8:0b:ae:
91:d2:27:81:8c:8a:69:27:28:db:4c:c0:49:89:47:ca:4b:33:
23:0d:7a:50:79:88:81:c6:c8:2b:a3:46:de:3f:28:f0:51:10:
c5:02:7a:a0:5b:4a:1c:5a:c3:20:a4:b3:f2:f9:df:97:56:cc:
a6:ef:40:a6:c7:2b:0d:65:4c:a3:51:12:89:6f:44:66:94:eb:
53:db:80:9f:e9:d6:70:34:04:79:70:4b:e2:c1:3e:2d:0d:ea:
ab:5d:97:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:05:30 2025 by rpki-client