Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/GJcAO8ZW0YLa6GNosUeBi0U2jxI.roa
File: GJcAO8ZW0YLa6GNosUeBi0U2jxI.roa (raw, json)
Hash identifier: RqPPhP5l8bodsbKY5+6GnktvsLzySouKP0ZwLfF6Qu0=
Subject key identifier: 18:97:00:3B:C6:56:D1:82:DA:E8:63:68:B1:47:81:8B:45:36:8F:12
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0197EAF3B1E1D4063DB622EA59D965552A8D
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/GJcAO8ZW0YLa6GNosUeBi0U2jxI.roa
Signing time: Tue 08 Jul 2025 16:52:08 +0000
ROA not before: Tue 08 Jul 2025 16:52:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 178.239.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ea:f3:b1:e1:d4:06:3d:b6:22:ea:59:d9:65:55:2a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 8 16:52:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1897003bc656d182dae86368b147818b45368f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e3:8c:d9:64:a8:b9:7a:0a:a5:e9:ce:b3:7b:
b2:59:36:30:4e:c8:78:e3:6d:70:d6:73:7d:20:a1:
a0:6f:68:82:d4:6c:40:3d:8d:30:e2:f3:ad:a6:64:
ce:c2:c6:98:4c:87:bc:3b:cd:2f:47:5d:97:f8:16:
23:5c:c2:9f:de:da:c8:ff:cc:03:b1:f5:1a:93:10:
dd:be:30:47:22:ee:db:56:8e:d0:a7:fa:eb:5e:4d:
15:ed:d8:10:47:c5:f7:42:d0:29:e0:56:54:0d:62:
3a:95:8c:be:02:12:f2:ba:e1:3c:b8:fa:0e:ab:56:
f3:ed:b0:61:77:b8:5d:2e:0d:2b:77:71:af:24:18:
52:a0:11:b8:76:99:e3:ec:85:5b:34:0c:01:c7:8b:
78:01:ed:06:a6:e6:f7:e3:5e:15:0c:c1:ae:9d:f9:
c0:ae:0c:67:90:ee:c5:85:24:3e:0d:5f:c3:84:0d:
fc:e7:2b:70:c5:41:96:14:ac:ee:ec:9b:dc:b2:0a:
44:bf:20:80:4a:a7:53:a9:7a:6e:03:98:43:6d:a5:
8a:b0:01:63:6e:d7:fd:82:95:67:0e:ab:1f:5a:55:
5e:c4:6f:d3:cc:3e:dd:cc:87:df:43:83:47:35:0c:
0c:96:4a:6b:0c:6e:85:c5:8e:75:28:4f:90:57:ff:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:97:00:3B:C6:56:D1:82:DA:E8:63:68:B1:47:81:8B:45:36:8F:12
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/GJcAO8ZW0YLa6GNosUeBi0U2jxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.115.0/24
Signature Algorithm: sha256WithRSAEncryption
78:16:48:9a:c5:4d:1c:48:1e:3e:02:a1:9b:12:d6:41:bc:b7:
08:54:c2:09:c5:af:e8:d3:09:97:d4:75:1d:05:93:cd:3d:ec:
63:88:04:01:cd:7a:6d:65:6b:8a:0c:3b:6d:51:49:e2:91:94:
cc:bb:23:6b:63:6e:1a:0a:35:22:c6:09:4e:4e:b1:c8:45:ff:
ea:9b:bd:72:9a:92:7b:7f:87:43:e3:30:b6:cc:99:6b:7e:aa:
ad:b6:3f:6c:65:68:dc:72:c2:15:de:f6:65:d7:11:73:4d:e5:
9b:a3:d7:95:ef:14:e2:e4:b3:f1:8f:e8:38:9d:10:b4:1d:0f:
8e:2c:d6:40:ad:82:1a:b1:c7:20:e0:d4:a4:cb:d1:33:1f:eb:
a5:7c:75:7f:79:84:06:1a:5b:7c:5b:f5:e3:a6:d9:81:c8:0f:
c6:d4:71:40:35:c2:a8:c5:cd:82:eb:de:f6:14:bd:9b:b3:c7:
31:4a:bd:0b:3a:63:72:b5:e8:72:68:9c:26:33:cc:71:df:ba:
ee:ec:69:13:56:79:05:1b:58:45:ca:db:56:ef:f6:e4:f8:3c:
08:07:e6:0c:30:77:3a:b0:e5:16:11:e0:59:a3:3b:f3:03:b0:
78:e4:6a:34:79:53:24:27:ab:8c:50:9f:a1:27:53:1c:40:2d:
60:36:c3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:29:21 2025 by rpki-client