Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/gr7Hsot6ZTb-tQFkDS-R02k4wEY.roa
File: gr7Hsot6ZTb-tQFkDS-R02k4wEY.roa (raw, json)
Hash identifier: 3DFfqHgyxVAmbOljghFjNoIvArcsBlSFgk7x4Ag96IY=
Subject key identifier: 82:BE:C7:B2:8B:7A:65:36:FE:B5:01:64:0D:2F:91:D3:69:38:C0:46
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01979B94660B781E178E9F521FCE52701213
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/gr7Hsot6ZTb-tQFkDS-R02k4wEY.roa
Signing time: Mon 23 Jun 2025 06:58:03 +0000
ROA not before: Mon 23 Jun 2025 06:58:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211484
IP address blocks: 194.143.206.0/24 maxlen: 24
195.114.201.0/24 maxlen: 24
213.220.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:94:66:0b:78:1e:17:8e:9f:52:1f:ce:52:70:12:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 23 06:58:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82bec7b28b7a6536feb501640d2f91d36938c046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:89:d2:35:16:6b:54:d7:ab:78:50:30:6c:
0e:34:ae:b6:ea:96:20:04:6d:14:b8:1f:84:91:c4:
bd:e0:5b:ad:a2:2b:24:ee:a2:93:34:59:08:eb:08:
74:8e:c8:94:08:22:ef:b6:4f:ac:59:bd:61:d5:c3:
c6:42:1f:11:34:c1:29:28:4b:1a:00:e8:fc:d8:3e:
4f:41:8e:cd:8d:ef:f3:04:e8:15:0a:d9:15:9a:30:
a1:eb:36:26:71:a3:cd:64:7d:5e:62:87:ce:24:81:
17:20:f7:b7:fa:97:d9:f9:b1:da:87:3b:9c:4a:68:
4c:41:6f:c8:a5:7a:12:46:1c:6b:cf:82:0b:52:38:
e7:fe:b0:46:e5:05:bf:4d:73:8c:1f:99:34:48:5b:
51:88:6e:3c:c4:91:74:7e:a0:92:c8:ce:57:77:7d:
9b:99:ae:eb:0f:ef:8a:f5:27:66:fe:6c:4d:cb:4f:
8a:4d:66:66:66:54:50:88:75:ac:0a:17:c6:37:9d:
6c:3b:50:68:d7:34:b5:bd:fd:80:fb:ff:86:53:21:
f2:40:b7:da:5d:76:5c:9a:5d:34:05:b9:25:4b:c5:
58:a0:30:7b:f1:3e:7b:ec:6c:e7:6a:0d:c1:98:c1:
0b:d1:38:27:48:e4:f8:29:74:1c:be:42:92:52:bf:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BE:C7:B2:8B:7A:65:36:FE:B5:01:64:0D:2F:91:D3:69:38:C0:46
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/gr7Hsot6ZTb-tQFkDS-R02k4wEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.206.0/24
195.114.201.0/24
213.220.3.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:fc:e6:65:40:3a:74:31:d0:b3:ee:6c:26:60:67:a6:2a:a8:
85:02:15:45:b1:f8:3c:62:92:6a:db:b1:7d:0d:0d:f5:4a:4c:
19:b9:f4:a0:42:42:99:d3:08:a0:14:13:42:83:38:40:ad:d5:
94:f6:f1:42:54:b8:43:23:89:c4:94:26:15:bb:3e:b1:5d:71:
eb:53:8e:5d:c8:00:9c:83:00:c3:f6:af:0c:83:48:82:0f:1b:
91:0a:2b:fc:ab:1b:79:09:fa:a5:80:a1:82:4b:c0:0a:84:b7:
60:4b:1c:45:99:9e:38:7c:93:ef:b1:aa:ee:71:0c:21:3f:d1:
fc:73:5a:44:de:2a:23:e6:74:94:f3:f4:97:6d:59:75:ff:ad:
8d:a9:af:aa:25:54:5b:74:9d:23:d6:2f:a1:35:2a:65:22:5e:
5b:6c:b8:90:db:87:0d:11:e2:55:2b:a1:5e:00:3b:5e:11:95:
25:dc:df:65:af:56:b8:1d:5e:d7:d1:70:7c:22:cd:68:4a:10:
64:b3:bf:18:28:4b:48:55:8b:64:73:99:6d:01:de:79:9e:0a:
85:f0:af:c1:83:0e:9f:0a:d4:ea:52:e6:3d:92:75:bb:64:36:
af:9e:8a:4d:2e:ea:91:dd:4f:c8:e4:21:56:a7:57:e7:79:c6:
00:46:22:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:07:49 2025 by rpki-client