Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/u_wPBIiXc_OTIZyBhOMSB4SslB0.roa
File: u_wPBIiXc_OTIZyBhOMSB4SslB0.roa (raw, json)
Hash identifier: doKh8mIYB1DQXFeiZxVG+rCnoxxO1HaOvP3g0w04mP0=
Subject key identifier: BB:FC:0F:04:88:97:73:F3:93:21:9C:81:84:E3:12:07:84:AC:94:1D
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 019782CB19D79CB3B6CE03BF8F33A282B6A0
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/u_wPBIiXc_OTIZyBhOMSB4SslB0.roa
Signing time: Wed 18 Jun 2025 11:27:17 +0000
ROA not before: Wed 18 Jun 2025 11:27:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55154
IP address blocks: 178.17.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:cb:19:d7:9c:b3:b6:ce:03:bf:8f:33:a2:82:b6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Jun 18 11:27:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbfc0f04889773f393219c8184e3120784ac941d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:86:aa:c3:80:a1:6a:4c:bd:9a:94:2c:6f:
20:3c:c4:e4:c2:fa:ae:04:18:40:bd:c3:6f:64:ae:
ad:a3:f4:ce:c3:be:60:69:97:f1:54:a3:99:73:dd:
ca:a3:88:c0:e2:b3:f1:07:c4:eb:5b:45:bf:1d:20:
6e:e8:f9:cf:f0:9b:c7:d5:dd:88:ed:80:81:40:2f:
7f:96:f5:40:6b:c4:3b:fa:44:8a:d6:44:99:15:16:
f4:2d:b5:a1:8d:c6:0e:64:89:81:a0:c2:28:6b:73:
9d:34:3a:8b:5b:e8:ac:14:de:d8:9c:63:91:21:bf:
73:2b:66:39:c2:bd:14:ae:f4:04:f7:d2:d0:0a:6f:
ff:c5:76:7c:33:1b:0b:ab:00:8e:4b:76:02:32:9a:
d6:5e:39:36:79:8f:d4:b1:72:97:9f:aa:e5:cd:7a:
34:9b:c7:d7:d2:48:16:44:96:93:17:1c:27:ad:00:
1f:93:5b:a4:9e:f6:c0:d3:31:42:9b:92:e3:60:b2:
69:fc:5b:f8:5e:61:86:22:61:db:87:f1:68:fb:da:
bd:ab:6c:21:e8:5d:c0:e8:7e:67:cb:5c:69:3d:72:
30:b3:86:c9:4a:71:03:5d:f8:59:f1:c2:bb:f3:2a:
66:60:45:83:4a:56:46:f4:07:43:11:c5:2c:da:32:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:0F:04:88:97:73:F3:93:21:9C:81:84:E3:12:07:84:AC:94:1D
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/u_wPBIiXc_OTIZyBhOMSB4SslB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.48.0/20
Signature Algorithm: sha256WithRSAEncryption
38:e1:82:36:47:cf:e0:cd:1f:56:e7:53:3f:ae:46:56:57:d5:
7d:67:22:18:1f:1e:98:f2:71:dd:b6:cd:b5:7c:e7:4e:3a:4f:
b6:c2:39:dc:40:00:1a:ab:0c:7c:23:55:f7:1a:5e:3b:81:a1:
b1:53:25:e3:60:7a:07:52:54:e0:33:0f:11:c4:93:7f:0e:49:
f6:35:e1:60:1e:e1:d8:ea:8c:48:20:f4:e4:12:be:1e:4a:18:
b5:f3:da:59:89:fc:cb:2a:7d:d1:15:8d:4b:58:8d:3c:ce:ea:
74:74:b1:81:6c:22:36:44:bb:d5:5f:b7:ce:7e:c7:53:3d:7d:
67:1d:c0:7a:a2:68:01:88:7a:66:cf:41:7c:98:a6:4b:91:c8:
28:61:4c:16:b0:86:cd:11:2c:d5:d4:11:c0:7e:46:03:ce:fa:
7e:53:0f:9b:60:e8:90:0e:f5:e2:89:74:77:de:59:63:aa:3d:
a9:a5:db:c7:c8:f7:dc:2e:fe:09:41:72:a5:b8:da:a9:92:e3:
92:0c:86:d9:82:f0:99:b1:a3:3f:52:15:fc:c7:f2:32:5e:55:
26:ed:70:d9:d1:66:15:ad:ea:b5:6f:c0:34:4e:a6:3b:c3:4b:
47:c7:d8:7d:f4:44:34:08:b8:b6:91:d5:58:f3:1c:e3:e5:9b:
c4:f0:15:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:49:32 2025 by rpki-client