Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/G5WWLoCilurJtT83Z6OKohBsBO4.roa
File: G5WWLoCilurJtT83Z6OKohBsBO4.roa (raw, json)
Hash identifier: yrvQGqXcqmotE0jktBW27N2NGwSBmRmPOC7tbdNT0K0=
Subject key identifier: 1B:95:96:2E:80:A2:96:EA:C9:B5:3F:37:67:A3:8A:A2:10:6C:04:EE
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01977EE7019F3D42284B7E0B44D252E773A3
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/G5WWLoCilurJtT83Z6OKohBsBO4.roa
Signing time: Tue 17 Jun 2025 17:19:17 +0000
ROA not before: Tue 17 Jun 2025 17:19:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 74.124.204.0/22 maxlen: 24
89.34.171.0/24 maxlen: 24
178.216.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:e7:01:9f:3d:42:28:4b:7e:0b:44:d2:52:e7:73:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jun 17 17:19:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b95962e80a296eac9b53f3767a38aa2106c04ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:4b:dd:f2:9c:b4:31:3a:6a:fc:ac:4b:b7:
3b:0d:b6:cb:ee:89:44:a7:d3:5a:d8:60:07:27:c4:
d7:0a:89:e3:d9:8d:36:73:7f:e5:1f:5d:ac:09:1a:
be:5b:5d:74:49:45:dd:69:87:fa:c3:d9:d9:a4:97:
00:15:b7:a6:36:59:d8:18:72:c0:fc:24:d7:40:8a:
86:22:15:87:be:4f:b5:92:b9:01:ce:13:1f:a4:e5:
30:45:8a:bc:6d:bf:f8:1e:57:8e:da:83:38:70:8e:
01:bb:5e:2b:c6:7d:4c:a9:a8:85:60:6e:83:7d:be:
f1:08:03:a5:9b:ec:ff:7d:6d:3f:5a:99:43:7a:79:
20:ae:2c:94:18:88:ce:53:a8:5f:d8:89:1f:fe:79:
fb:f3:c5:37:9a:dc:f3:6c:59:ba:54:d2:3f:f6:04:
c4:c3:d3:fb:d6:9c:5b:ba:df:a0:05:8a:69:63:02:
c8:b7:82:c6:ff:01:78:56:15:14:46:1e:1f:31:89:
71:7f:24:74:f3:30:28:32:1c:44:33:af:e9:c6:51:
1f:a0:76:5a:76:78:4a:9d:ab:41:2a:9c:4c:2d:28:
68:34:75:42:9b:7f:ef:05:05:53:13:40:83:1e:cf:
98:e3:0c:53:94:32:51:e2:88:41:94:e6:04:23:98:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:95:96:2E:80:A2:96:EA:C9:B5:3F:37:67:A3:8A:A2:10:6C:04:EE
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/G5WWLoCilurJtT83Z6OKohBsBO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.124.204.0/22
89.34.171.0/24
178.216.184.0/21
Signature Algorithm: sha256WithRSAEncryption
78:e4:56:47:27:8c:e7:89:8f:ee:8e:b5:61:f2:69:af:15:b3:
16:b4:50:34:f4:8c:c9:c1:58:fc:a3:52:25:ab:94:12:d6:e6:
05:9d:78:c5:2a:b9:70:2c:2b:87:fd:05:af:91:85:f9:d9:1d:
ef:16:75:b1:6e:dd:aa:37:f9:85:d2:31:a7:49:31:72:d1:02:
f1:a1:2f:b2:fe:63:b8:da:96:79:34:e2:13:16:20:38:18:76:
96:de:9b:e3:5b:75:aa:08:fb:96:ec:57:b9:3c:01:e4:8c:9f:
eb:43:45:58:7c:10:8b:3f:d9:8c:5b:b1:53:1b:58:07:c0:2f:
80:e9:09:06:a1:65:89:80:e3:05:e0:e6:53:fc:4e:a0:e3:a5:
60:be:45:a0:72:71:26:fc:8b:dc:98:5c:5a:6d:89:80:4f:13:
5f:1a:20:77:49:f3:8b:71:96:ec:cc:a1:de:b8:3b:39:04:39:
01:9c:f9:eb:c7:21:cf:5e:a4:1e:c7:7a:b5:5e:00:4f:75:4d:
96:d5:24:3b:b5:f2:27:a8:29:45:32:31:11:c8:5a:aa:69:21:
f3:20:a0:d0:c4:a1:20:9e:0f:df:59:ff:bd:72:bf:df:db:cd:
ae:67:c8:fa:ba:68:54:7c:47:14:76:63:a5:93:3c:03:24:a7:
b6:d3:6d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:47 2025 by rpki-client