Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/SHaKbFPNsLxfj0s-D5n21WdMWXU.roa
File: SHaKbFPNsLxfj0s-D5n21WdMWXU.roa (raw, json)
Hash identifier: WwVmn3+VNOBpT8pGoSZiYks1QQTfhs67OIXLYD1YY2w=
Subject key identifier: 48:76:8A:6C:53:CD:B0:BC:5F:8F:4B:3E:0F:99:F6:D5:67:4C:59:75
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 01983E744AD521D5C9D33F83AF33AB9A0C40
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/SHaKbFPNsLxfj0s-D5n21WdMWXU.roa
Signing time: Thu 24 Jul 2025 22:01:05 +0000
ROA not before: Thu 24 Jul 2025 22:01:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42330
IP address blocks: 78.41.136.0/24 maxlen: 24
2a13:3840:1000::/39 maxlen: 39
2a13:3840:2000::/48 maxlen: 48
2a13:3840:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:74:4a:d5:21:d5:c9:d3:3f:83:af:33:ab:9a:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Jul 24 22:01:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48768a6c53cdb0bc5f8f4b3e0f99f6d5674c5975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:87:60:43:59:e1:8d:29:f2:21:95:54:e1:
2f:f7:b1:7a:ba:c6:22:47:21:47:a2:50:e3:a3:d8:
a5:b3:6e:4e:80:2e:9f:d7:b4:36:76:b2:75:8f:fc:
01:a2:f8:9a:35:a8:77:0c:47:a3:70:d3:c9:71:0e:
39:3a:0f:ed:09:6d:f1:f1:81:77:14:6b:39:27:3d:
6c:77:e1:20:6b:90:d1:47:dd:d7:48:b8:53:87:ae:
ee:72:e2:60:87:07:06:d1:b0:6a:74:9e:b1:ec:72:
3b:68:eb:89:77:af:d1:41:b5:ea:5f:cd:9f:34:69:
53:24:39:88:6e:75:b1:32:14:8f:a4:b6:17:66:cf:
96:bb:66:52:cd:32:c7:2b:57:f8:01:ee:6d:f3:c0:
88:9d:d5:57:0a:a3:2c:93:6b:61:8a:fc:e5:78:e5:
02:41:b4:f7:f5:ad:06:12:fc:9e:e0:c7:b3:d0:fb:
8d:86:16:85:e5:2b:91:a1:f2:fc:de:a2:7d:77:cb:
b2:14:d3:01:d2:b8:de:22:d7:be:9e:eb:e3:a4:33:
ec:7f:3e:69:81:69:ab:d6:4d:6d:2f:8b:85:87:f8:
a0:58:03:22:5b:bb:80:49:1f:1c:f4:1b:cc:7b:54:
75:41:e2:5d:fe:0c:d9:1b:ae:4e:79:81:88:21:1d:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:76:8A:6C:53:CD:B0:BC:5F:8F:4B:3E:0F:99:F6:D5:67:4C:59:75
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/SHaKbFPNsLxfj0s-D5n21WdMWXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.136.0/24
IPv6:
2a13:3840:1000::/39
2a13:3840:2000::/48
2a13:3840:4000::/34
Signature Algorithm: sha256WithRSAEncryption
5b:88:f0:75:72:cf:7b:bc:2e:9b:e4:60:06:29:27:c3:7b:6a:
79:20:d2:0c:b9:4c:72:4d:c3:63:2f:e7:f3:d8:e9:9f:e5:ae:
d0:02:ce:4c:9e:58:f6:7e:84:81:dd:4a:cc:39:38:e2:49:d1:
79:7f:40:5e:1c:21:04:6b:83:1d:06:22:01:e2:7d:47:9c:b7:
04:c5:6c:a0:02:5f:66:d8:1e:33:94:6f:1b:b3:07:df:0b:7f:
41:56:dd:87:5e:86:4d:2f:bf:d8:9f:f0:5d:5f:fe:8e:40:cd:
d5:fb:09:f3:ed:b8:1f:5f:89:f1:f6:53:8c:ac:ff:41:d0:18:
cb:3c:65:33:14:34:ca:4c:cf:86:ef:34:4c:7e:25:b6:40:90:
d3:1a:83:ab:26:f7:78:fc:ac:13:6b:b7:3c:62:c9:29:29:54:
0b:a8:b8:38:56:59:b2:ca:f1:00:ce:30:da:43:f3:1e:72:4c:
82:90:92:64:93:e4:fc:57:f3:e6:63:0c:06:bb:5a:71:bd:0a:
46:20:81:9f:ff:65:7a:e8:af:83:c1:e1:13:b4:b8:35:61:77:
76:75:de:cd:1a:e2:8c:fd:49:78:18:26:0a:31:25:83:f2:82:
55:8e:2d:57:b0:63:2b:32:18:d5:a3:a9:5a:31:8e:55:e2:32:
43:2e:7b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:13 2025 by rpki-client