Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/vbRc4ZhRV1k4d1dX3l10LP0mzGk.roa
File: vbRc4ZhRV1k4d1dX3l10LP0mzGk.roa (raw, json)
Hash identifier: YQeo8wdHJXObNNl1+pafBMrUYC0XtdN/sbIQwRl/hu4=
Subject key identifier: BD:B4:5C:E1:98:51:57:59:38:77:57:57:DE:5D:74:2C:FD:26:CC:69
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 01975DA3AF23076C1828EC3974ED28F19007
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/vbRc4ZhRV1k4d1dX3l10LP0mzGk.roa
Signing time: Wed 11 Jun 2025 06:18:17 +0000
ROA not before: Wed 11 Jun 2025 06:18:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 193.24.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:a3:af:23:07:6c:18:28:ec:39:74:ed:28:f1:90:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Jun 11 06:18:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdb45ce19851575938775757de5d742cfd26cc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:b7:8d:c2:04:7e:e7:79:f1:f9:75:da:fa:
e5:fe:a6:ce:f1:8c:c8:fd:34:a6:b5:06:d8:ac:00:
13:b4:ce:61:33:b7:62:f5:92:53:99:94:f1:93:e1:
00:2f:83:2a:37:cd:e9:9f:5a:17:12:3d:a5:e5:85:
21:5b:1a:44:8a:a2:69:34:9f:c8:66:07:28:5b:7d:
7b:a1:17:4d:0f:17:09:a4:88:71:cd:74:42:f4:73:
bf:2f:06:0b:25:72:d9:9e:7f:3a:0f:5d:bb:ce:89:
c6:91:d5:d2:d0:65:e9:5f:cb:8b:bd:cd:0d:0e:74:
54:3c:ed:03:fd:43:55:ed:13:2b:b8:35:fa:e0:2d:
73:b6:99:63:4c:78:38:bd:30:3a:84:4a:ab:a9:f7:
1a:ea:3f:74:0d:0e:cb:24:d6:5d:c0:50:20:71:e9:
c2:fe:f5:31:1a:77:f0:ae:63:9b:d9:fe:5c:94:f9:
f9:18:9a:5f:c9:af:87:9f:f1:5a:94:aa:fd:5d:83:
e4:a4:11:3b:34:f7:7b:51:62:7c:6f:97:38:b7:39:
7b:86:51:2f:cd:ca:1d:f2:28:c9:55:14:97:43:65:
f0:a8:44:b6:f8:46:4a:38:8b:da:3f:7a:d0:47:ec:
67:ca:02:ec:78:df:ea:62:a9:32:dd:28:ea:75:c7:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B4:5C:E1:98:51:57:59:38:77:57:57:DE:5D:74:2C:FD:26:CC:69
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/vbRc4ZhRV1k4d1dX3l10LP0mzGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.121.0/24
Signature Algorithm: sha256WithRSAEncryption
13:3a:fb:f5:af:79:2e:79:89:a0:45:c8:8f:69:82:a0:88:ae:
fd:03:93:82:ae:b9:9b:52:b5:e2:3a:15:bf:bb:63:c4:d4:74:
49:c9:63:59:ac:2d:ee:9d:05:7c:c5:0d:ed:8f:a9:63:b6:81:
6b:77:da:be:f5:71:dd:93:18:64:d1:a4:54:7c:13:31:14:3d:
dc:87:7e:0c:1e:56:25:02:53:b8:30:f0:31:96:70:f4:46:de:
9c:dd:70:ca:06:ee:8b:1c:2a:42:bb:a3:2e:4a:40:c9:d3:bb:
9f:9a:eb:c2:a8:4e:17:9f:5f:04:f1:dc:b0:1d:8d:31:ba:15:
3d:3b:52:22:bc:c5:f9:2c:9d:d1:26:fd:48:0f:73:6d:1c:8a:
30:e7:4e:c8:31:71:f2:c5:94:d9:cc:a8:33:8c:ed:2c:2b:55:
a8:70:eb:e3:ff:54:a6:9e:5a:0b:65:92:8f:04:62:87:87:13:
3e:77:6e:72:1c:b8:a6:42:23:fd:aa:d7:f6:0e:48:79:ce:4f:
3c:08:0b:51:65:a4:90:51:9b:d9:d5:d8:13:e2:c7:6a:ef:71:
e6:59:f4:34:38:d3:c9:9b:7d:0f:44:fa:5c:62:3d:b5:8b:1e:
ed:53:81:85:ac:e1:92:0f:c9:44:38:2b:25:78:65:9d:14:03:
e8:05:13:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:46:15 2025 by rpki-client