Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/jjSMkguCrtN8dke8B6BypY8W9bE.roa
File: jjSMkguCrtN8dke8B6BypY8W9bE.roa (raw, json)
Hash identifier: FKDJSDKH8RGck3prDQ6XfAn1r+nBQFd0Ov1wTU/64lk=
Subject key identifier: 8E:34:8C:92:0B:82:AE:D3:7C:76:47:BC:07:A0:72:A5:8F:16:F5:B1
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 0197D9644D11BA708942ADB99E36747E3998
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/jjSMkguCrtN8dke8B6BypY8W9bE.roa
Signing time: Sat 05 Jul 2025 07:01:58 +0000
ROA not before: Sat 05 Jul 2025 07:01:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 185.23.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:64:4d:11:ba:70:89:42:ad:b9:9e:36:74:7e:39:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Jul 5 07:01:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e348c920b82aed37c7647bc07a072a58f16f5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:8b:a1:b8:a6:05:41:9f:4a:e0:19:89:64:
e0:3a:47:75:14:a0:f3:cb:0e:8a:fc:8c:a7:0d:4d:
35:8a:66:d0:e9:4d:2b:94:77:8e:77:13:61:c2:d1:
a3:b2:be:9b:c8:54:73:9e:88:61:52:2c:11:f4:35:
98:fc:aa:ff:d8:85:58:2d:be:8d:ea:52:7e:74:14:
04:7b:63:45:a7:5e:46:79:a1:6c:70:e0:2d:fb:c5:
fe:33:3c:75:e6:e8:40:d4:1d:c9:97:fd:9b:90:38:
4a:df:a9:dd:9d:7a:c0:62:97:37:b6:69:f0:0a:e8:
d6:8f:a9:5c:f7:8a:fc:5e:6c:28:0a:2d:b4:1e:ad:
e2:3b:f3:ee:27:7b:78:f3:be:d0:b7:be:68:c2:cb:
bc:d4:7a:b7:4d:27:ba:68:9b:53:f1:c0:d2:0b:25:
f9:7c:e7:f2:36:b4:5a:ed:6b:2e:a3:53:82:2d:76:
28:75:de:26:b2:e4:9a:8f:f2:e5:ce:6f:27:4c:da:
ee:d1:df:9c:49:ae:84:f3:2a:5d:5d:07:be:ee:e6:
5d:f5:e3:d3:0d:0c:9c:ee:72:60:f8:87:bb:3f:b9:
a1:ab:00:52:6b:39:a2:7c:39:0f:2a:2f:8b:79:e9:
e7:31:97:26:59:56:33:b4:36:b6:35:67:12:a4:ea:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:34:8C:92:0B:82:AE:D3:7C:76:47:BC:07:A0:72:A5:8F:16:F5:B1
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/jjSMkguCrtN8dke8B6BypY8W9bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.73.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:62:3a:f0:07:a5:d0:89:3f:1d:44:b2:1f:98:1e:3a:cb:72:
25:e2:33:1a:a2:fa:1e:8c:1f:a4:1d:95:df:76:5c:c9:43:86:
c1:03:58:e4:b1:aa:4e:11:7a:d3:57:2b:12:b1:3e:01:9b:a3:
3b:b5:fc:fb:9b:f0:72:d0:2a:ae:fc:15:ac:7f:a9:40:3c:66:
a9:d3:d8:1c:d7:38:7c:03:02:d8:a7:0e:bc:cf:c0:67:e9:8f:
8e:6a:61:2b:42:2e:45:0d:a3:15:7d:aa:1a:91:44:4d:b1:4d:
16:3b:27:59:76:f3:68:a5:20:e2:a9:f2:35:f6:77:d4:5c:3e:
44:23:45:76:e8:44:ac:1b:1d:59:4a:51:d8:94:ef:86:34:62:
34:97:da:07:b8:25:21:17:b5:fd:04:32:21:a5:8b:5e:59:c9:
84:44:03:b0:04:da:3b:74:6b:a0:f1:ad:be:dd:46:44:20:f4:
a4:03:c7:48:6a:60:cf:53:e8:90:2d:f0:44:2f:61:a2:a3:9b:
d6:05:e0:93:cb:b4:3b:96:87:0d:ed:43:61:ab:d6:68:1d:5a:
0a:d6:8f:0a:18:0a:e6:ab:5e:45:d3:ba:3d:9f:39:17:b8:43:
67:9d:00:db:7d:2e:9e:af:78:7b:f9:5d:65:46:9a:86:ee:15:
3d:17:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:56 2025 by rpki-client