Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/23TgW8ntI2ILy6aYdWnPiFZ1lCo.roa
File: 23TgW8ntI2ILy6aYdWnPiFZ1lCo.roa (raw, json)
Hash identifier: ACzq+LL9O6HN/eK/FdnwVUcZqfW7/FnPBpBtuHyB5Tc=
Subject key identifier: DB:74:E0:5B:C9:ED:23:62:0B:CB:A6:98:75:69:CF:88:56:75:94:2A
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 01976D247F0019A9464EFA4855F1D43878EF
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/23TgW8ntI2ILy6aYdWnPiFZ1lCo.roa
Signing time: Sat 14 Jun 2025 06:33:17 +0000
ROA not before: Sat 14 Jun 2025 06:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207480
IP address blocks: 2a01:e901:162::/48 maxlen: 48
2a01:e901:172::/48 maxlen: 48
2a01:e901:182::/48 maxlen: 48
2a01:e901:192::/48 maxlen: 48
2a01:e901:1a2::/48 maxlen: 48
2a01:e901:1b2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:24:7f:00:19:a9:46:4e:fa:48:55:f1:d4:38:78:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Jun 14 06:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db74e05bc9ed23620bcba6987569cf885675942a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:30:8d:54:4f:1d:7a:ac:9c:17:e5:fb:b2:
ef:98:79:d4:c1:20:16:f7:1b:1d:43:0b:4b:bb:73:
64:91:33:0b:0e:c4:25:19:82:27:db:0f:bf:cf:1b:
6b:6a:31:1d:3f:9f:1c:8e:fc:d0:c2:78:65:4f:b5:
97:02:7f:09:2a:69:5e:89:af:28:da:08:d1:9e:f5:
d4:23:b7:cb:12:28:ef:22:33:ea:10:18:c5:7e:da:
6b:49:4c:37:9f:7d:ec:2c:d9:af:f6:c4:f8:fd:f7:
db:e1:49:0b:dd:73:78:21:ab:19:cd:b9:7e:b6:36:
1b:1c:40:b8:c3:a5:fc:ab:cf:be:bf:09:f4:bb:a7:
4b:2c:0f:5d:63:98:14:69:06:51:d5:f6:cf:27:32:
b5:6c:8b:61:16:c1:85:fd:b2:47:e7:68:35:00:a0:
34:a2:9c:f9:ad:f2:c3:c2:3d:11:92:f7:63:64:75:
7c:8a:f4:80:37:4e:4b:a9:38:cd:82:70:ee:cb:ca:
2f:5d:3f:a0:f0:23:7b:2f:ca:70:c3:92:53:af:e8:
68:92:45:16:5a:b2:b6:65:9d:06:37:59:ac:3f:11:
bc:9c:16:24:59:8c:71:53:cc:86:42:ec:24:60:b5:
c0:e3:b5:29:fd:9b:b6:6b:0c:1d:74:53:cf:18:77:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:74:E0:5B:C9:ED:23:62:0B:CB:A6:98:75:69:CF:88:56:75:94:2A
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/23TgW8ntI2ILy6aYdWnPiFZ1lCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:162::/48
2a01:e901:172::/48
2a01:e901:182::/48
2a01:e901:192::/48
2a01:e901:1a2::/48
2a01:e901:1b2::/48
Signature Algorithm: sha256WithRSAEncryption
63:2b:d8:90:68:b6:03:62:56:b6:84:23:75:9c:5b:3f:cc:6c:
fc:29:3a:7a:80:03:e8:f0:3c:6e:bc:92:b9:0a:df:c4:e4:0a:
57:46:0a:6a:d2:a1:7b:a1:84:c0:97:86:da:fc:ae:6f:84:91:
97:52:bd:8c:a9:ca:58:89:89:e5:22:84:ab:db:3b:2e:05:43:
1f:a2:ac:9e:a7:2e:a0:ab:50:08:20:76:f0:76:a3:81:bf:a1:
d3:e3:af:d9:f5:be:19:83:7f:f0:8d:af:53:60:c9:f5:49:cc:
cb:0e:06:69:e4:bb:1d:66:da:ef:21:cc:a0:84:c9:86:b4:98:
20:cc:38:ce:9f:ce:89:31:54:e4:2b:01:7b:1d:1f:8a:09:f4:
07:52:6b:e5:1a:aa:07:cb:27:14:08:67:00:7b:d0:4f:7d:cc:
66:d7:c6:d9:1f:8f:e0:52:1f:11:88:37:d4:a6:83:ed:4e:b5:
e3:17:1f:49:4f:54:7f:ca:dd:b3:ad:2d:d8:21:4c:96:07:96:
58:0f:ab:99:66:40:8e:5d:bd:b1:d4:ef:f2:90:ab:f0:e5:75:
0f:49:cc:76:ab:de:32:c9:6d:aa:0a:0e:9d:fb:88:24:42:ea:
f6:5f:4f:c3:62:58:cf:ce:ea:6f:cb:7f:50:6e:0f:9e:4a:80:
f4:31:f6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:15:28 2025 by rpki-client