Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EqdqonzW4VOl9olmw6P9LCokf_Q.roa
File: EqdqonzW4VOl9olmw6P9LCokf_Q.roa (raw, json)
Hash identifier: kzqeydEJ9X2JvtCv653YZdrHjynHl9tuPML94ZtsY/8=
Subject key identifier: 12:A7:6A:A2:7C:D6:E1:53:A5:F6:89:66:C3:A3:FD:2C:2A:24:7F:F4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019783C335A935605DE76AF1354342176D22
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EqdqonzW4VOl9olmw6P9LCokf_Q.roa
Signing time: Wed 18 Jun 2025 15:58:17 +0000
ROA not before: Wed 18 Jun 2025 15:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 45.128.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:c3:35:a9:35:60:5d:e7:6a:f1:35:43:42:17:6d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 18 15:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12a76aa27cd6e153a5f68966c3a3fd2c2a247ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:f6:58:95:0f:5f:65:55:a7:10:c7:73:1f:
fb:22:5d:5e:2c:73:6b:48:13:34:39:e7:fa:a3:31:
74:7c:0e:04:6b:51:f7:6f:aa:db:df:88:9c:ed:a6:
1f:3e:e3:3c:58:d4:5b:cc:be:48:e2:d9:42:cb:53:
5a:40:26:6a:f1:e3:51:bd:04:e8:49:b9:7f:ae:d5:
2f:06:87:8d:38:4b:3d:08:2e:2d:4a:99:f7:f7:c2:
97:42:06:b0:53:84:b9:dc:85:88:b0:db:af:75:4d:
da:1e:87:33:7f:22:7f:a9:f7:25:f6:9f:fb:66:5d:
44:2b:42:56:7a:b1:1f:aa:12:2b:4c:04:c0:ac:7f:
46:a8:a5:aa:d6:04:fb:25:c9:ed:97:63:c2:8d:90:
ca:e5:32:f2:7f:c1:59:24:23:01:28:5a:dc:57:58:
11:d4:bb:76:3b:9b:f7:b4:8d:0c:c1:3c:5f:7c:4e:
5f:3f:56:c5:0a:e5:65:b4:fa:21:36:8c:2a:ec:95:
27:40:d1:53:e6:8d:c3:6d:92:e6:dc:47:ac:e2:33:
d7:94:fd:3b:23:66:79:0e:1e:c5:1a:1d:ad:b1:54:
ab:ed:80:c9:cb:fb:9d:14:c2:86:7c:69:88:16:9b:
19:a8:51:24:c3:37:c3:0a:35:e6:2c:a6:0a:af:cb:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A7:6A:A2:7C:D6:E1:53:A5:F6:89:66:C3:A3:FD:2C:2A:24:7F:F4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EqdqonzW4VOl9olmw6P9LCokf_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.78.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f3:45:85:2b:ef:9b:e2:63:5b:60:ea:45:f8:a7:a8:03:7b:
6e:62:af:8f:c0:36:14:9d:fd:b5:13:33:68:02:28:a0:61:e3:
5f:81:77:30:52:5a:92:87:b3:d2:dc:03:88:3d:bf:95:99:40:
a3:a8:b1:a0:c7:af:e6:b1:40:33:f0:80:7a:62:e6:ea:b5:5d:
6b:9f:1b:8f:88:af:43:e3:c7:cf:14:a8:84:76:ea:c5:dd:40:
19:a7:56:7b:e6:22:a1:47:48:35:20:d3:ec:2a:d2:86:44:f9:
83:ad:53:35:70:db:75:b0:ed:2d:1d:dd:c0:2d:46:df:db:b2:
ca:57:f1:30:8a:25:83:a5:37:f6:7f:d4:86:e0:8d:4f:e5:d6:
ae:59:86:ad:c0:04:47:14:35:b5:29:fb:45:74:8a:c0:24:fc:
ff:8d:64:8a:92:20:c7:2c:6f:a1:d6:8f:7f:6b:6f:8c:30:7f:
6c:41:48:3d:9c:c0:42:61:3a:71:c8:35:76:ba:b4:6e:9b:7b:
a8:9f:ac:80:2b:24:ac:e5:2b:e0:5b:4b:94:58:9f:93:f8:e1:
b8:c2:f5:25:86:aa:9d:d6:19:7f:09:02:19:29:f4:ef:54:80:
a8:30:59:34:1c:2f:37:25:81:3d:c1:43:d4:26:a7:26:dd:14:
81:3a:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:27:58 2025 by rpki-client