Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/1-iaMGqOGDTfsptPZeicjHn71QUo.roa
File: 1-iaMGqOGDTfsptPZeicjHn71QUo.roa (raw, json)
Hash identifier: 2s7EHYWZQ9Rhs5vjESBZQJAFQSchcccurTuwLHKrfW8=
Subject key identifier: FA:26:8C:1A:A3:86:0D:37:EC:A6:D3:D9:7A:27:23:1E:7E:F5:41:4A
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 0197ABC598045A3AA7AD8BAB1C8D1FC55E5A
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/1-iaMGqOGDTfsptPZeicjHn71QUo.roa
Signing time: Thu 26 Jun 2025 10:25:42 +0000
ROA not before: Thu 26 Jun 2025 10:25:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62381
IP address blocks: 185.37.80.0/22 maxlen: 24
185.37.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:c5:98:04:5a:3a:a7:ad:8b:ab:1c:8d:1f:c5:5e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Jun 26 10:25:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa268c1aa3860d37eca6d3d97a27231e7ef5414a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:d4:e6:2d:62:a9:aa:ff:09:6b:c0:4d:3d:
61:b2:00:38:99:ac:c5:65:1c:ed:d9:23:77:83:44:
3f:92:7c:ed:aa:30:19:47:38:a5:95:55:e1:02:d7:
d2:36:f1:46:77:e9:bb:82:94:d6:26:99:1b:91:8c:
e0:cc:2b:33:b0:94:56:08:ed:4f:5e:cf:af:f2:c6:
24:5d:82:81:0f:90:9f:99:c1:51:2f:a5:3b:23:d6:
32:ad:a0:65:b1:9f:bf:ba:e2:19:a0:49:f9:a0:61:
93:8d:cd:a9:76:8f:6d:91:2c:30:50:bd:7f:19:a0:
22:1a:80:86:35:27:f8:fe:5d:f5:a1:8c:57:74:32:
30:35:85:e0:c9:9a:e0:0f:0e:84:65:d2:10:9d:4a:
97:dd:45:e6:ce:71:98:67:2a:a6:7d:1c:ac:94:93:
79:c1:a2:b0:4e:19:34:6e:4b:b0:e3:b0:82:0e:05:
77:41:a0:2a:d4:7e:5a:e8:e4:34:93:77:46:ca:72:
8c:54:f2:f0:50:3f:b1:d6:4b:5c:cc:fc:b2:a8:93:
9e:8a:6d:2e:9d:71:cc:7b:95:c3:65:35:13:39:10:
40:16:92:f1:18:1f:4c:69:d4:a6:9f:6f:35:1c:a8:
ac:2a:3f:5f:c5:98:98:0d:1b:dd:e7:44:c3:66:fe:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:26:8C:1A:A3:86:0D:37:EC:A6:D3:D9:7A:27:23:1E:7E:F5:41:4A
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/1-iaMGqOGDTfsptPZeicjHn71QUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:83:ae:aa:38:24:8c:8e:c5:56:d4:c1:69:88:81:9a:ec:72:
3d:6f:9d:f4:9e:3d:7b:b6:49:cd:1c:89:9c:cc:b2:bf:d7:36:
66:af:80:e3:23:71:4d:ca:80:9d:e7:b2:35:3b:e6:71:1d:ad:
18:f0:20:8d:1a:53:5e:24:cb:b4:1e:38:af:3e:10:fb:45:40:
f5:4e:83:90:0c:08:8a:c9:d4:bb:a3:9d:47:dc:20:47:92:93:
77:1c:c6:3a:0a:4f:5f:e1:58:2d:0f:01:83:c7:34:39:2d:62:
e5:c6:c5:c1:9d:5c:82:98:a7:9c:90:9c:cb:3e:87:e5:64:fb:
e0:62:66:b4:c5:93:c3:fe:3e:3c:08:d4:dd:e6:e5:3f:21:64:
d2:47:e9:36:5a:92:57:8f:31:61:af:da:82:53:ef:17:2a:3a:
02:50:68:39:69:88:69:a9:9d:d5:13:9d:53:37:30:c4:ef:42:
1d:fc:8c:f9:f7:9b:35:f0:b3:9c:b3:6e:cc:2a:84:5a:04:86:
f4:fa:db:c4:70:15:33:9c:1b:0a:2a:c2:40:2d:0f:8e:32:6a:
f9:d5:35:9c:99:8e:07:5e:e7:ce:38:58:bb:e6:ba:d1:01:c9:
de:cf:53:90:c7:6d:14:4b:42:8c:96:fa:a4:96:a0:21:52:15:
4f:4b:43:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:25:33 2025 by rpki-client