Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/Gc7bIWg_002hRPQXdkZu34Nt1hk.roa
File: Gc7bIWg_002hRPQXdkZu34Nt1hk.roa (raw, json)
Hash identifier: rYe2LH24NobxlRDRXW8nW9SeQn4FShUkG8Kt27Qhtsg=
Subject key identifier: 19:CE:DB:21:68:3F:D3:4D:A1:44:F4:17:76:46:6E:DF:83:6D:D6:19
Certificate issuer: /CN=f335ed66ac01d79175ce4d78f672a1fe47203780
Certificate serial: 0198BD86CA569C5B3FFFA06956C539068687
Authority key identifier: F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/Gc7bIWg_002hRPQXdkZu34Nt1hk.roa
Signing time: Mon 18 Aug 2025 14:13:04 +0000
ROA not before: Mon 18 Aug 2025 14:13:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43350
IP address blocks: 167.150.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bd:86:ca:56:9c:5b:3f:ff:a0:69:56:c5:39:06:86:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f335ed66ac01d79175ce4d78f672a1fe47203780
Validity
Not Before: Aug 18 14:13:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19cedb21683fd34da144f41776466edf836dd619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:a9:85:05:32:8e:3f:58:e2:b6:5b:8c:ca:
3d:a5:ce:27:ac:06:43:47:a2:ab:f7:ac:fb:7a:fa:
2c:cf:07:59:4d:8e:46:a8:78:ed:c0:be:a8:22:f5:
8e:1f:46:42:91:f1:29:53:97:38:35:21:d8:ee:cd:
fd:1f:c4:07:c0:57:06:f4:c6:d4:6d:33:6b:81:70:
a2:33:71:2b:19:ed:fe:d1:7e:f8:6e:4c:23:cb:a7:
1a:35:e1:b6:1b:25:99:94:b2:90:53:c7:c5:b7:aa:
1c:b3:a1:34:a5:1a:4a:a3:fe:c8:16:67:3e:78:f5:
72:bc:22:05:e9:65:3c:d1:32:8c:cd:6e:ce:4a:5c:
06:f2:35:34:5b:04:20:ec:cc:b0:8f:f1:93:19:34:
95:aa:ce:26:7d:c1:c3:84:24:ea:d1:38:cc:04:17:
bf:07:5d:4b:66:25:56:4e:b8:d3:be:3a:64:5a:ac:
d5:39:f6:ad:01:65:db:62:60:b7:81:c5:44:c0:e0:
b2:8c:0b:3a:de:5b:f0:75:48:bf:77:e9:4c:43:e8:
b3:c1:eb:2b:64:6e:9d:15:67:2b:67:66:2c:7a:29:
d1:ee:0f:9b:99:05:11:7e:bb:1c:a4:be:4b:27:49:
ac:98:22:23:61:01:fa:b3:a7:2a:78:26:ca:1c:9a:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CE:DB:21:68:3F:D3:4D:A1:44:F4:17:76:46:6E:DF:83:6D:D6:19
X509v3 Authority Key Identifier:
keyid:F3:35:ED:66:AC:01:D7:91:75:CE:4D:78:F6:72:A1:FE:47:20:37:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zXtZqwB15F1zk149nKh_kcgN4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/Gc7bIWg_002hRPQXdkZu34Nt1hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/798889-29d4-4f53-a041-50acbaeec7ca/1/8zXtZqwB15F1zk149nKh_kcgN4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.150.21.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ab:23:49:b0:98:5d:8b:8f:69:fc:f0:b1:33:90:f8:96:67:
e2:18:53:d7:33:a7:c3:57:21:31:0d:6e:61:89:ec:6a:02:35:
cc:3b:32:4a:c0:5d:d8:cb:d7:7f:e3:69:63:0b:51:11:6f:db:
7b:e4:a0:c0:ec:a2:35:40:fc:42:11:f3:af:3d:3f:98:ca:d2:
de:1d:31:dd:71:f6:fe:e1:f6:1e:6f:af:26:38:29:37:5b:be:
5f:b1:36:bb:ba:65:29:33:41:e0:88:c7:b6:ea:6e:fd:16:07:
50:f7:30:47:87:4e:09:79:a3:35:13:30:3e:dc:27:52:bb:ac:
ac:eb:22:33:62:3f:ef:3c:0b:20:f3:82:ae:fa:f9:75:af:f5:
3a:5b:91:47:cc:6b:55:4c:72:53:f9:f1:dc:71:d9:de:f3:e3:
5b:3c:1d:61:75:b6:e1:54:b4:0e:a9:48:60:e1:d0:d0:0b:62:
02:82:25:e5:57:0e:75:3a:fd:5c:02:32:eb:0c:57:bf:a7:3b:
23:39:a2:6a:84:92:ff:9a:a3:aa:46:2d:dd:cc:1c:da:5b:23:
a8:e8:7f:c4:cb:97:0b:53:59:19:2e:b3:58:14:c7:b3:36:45:
82:0f:00:86:8f:92:bd:12:85:6d:76:db:02:76:bf:e6:89:1c:
30:87:a4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:43 2025 by rpki-client