Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/dwzGjClilGgqBa83jIlDLO6MhiY.roa
File: dwzGjClilGgqBa83jIlDLO6MhiY.roa (raw, json)
Hash identifier: ax5/1FqZ7LpfpWHSsIMG4PE6ZnxsmjJK2plIEm/o0h8=
Subject key identifier: 77:0C:C6:8C:29:62:94:68:2A:05:AF:37:8C:89:43:2C:EE:8C:86:26
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 019837E27738FBD59DAFCDEF3CC1F0ECD055
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/dwzGjClilGgqBa83jIlDLO6MhiY.roa
Signing time: Wed 23 Jul 2025 15:24:04 +0000
ROA not before: Wed 23 Jul 2025 15:24:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61049
IP address blocks: 212.124.212.0/24 maxlen: 24
2a00:19e9::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:e2:77:38:fb:d5:9d:af:cd:ef:3c:c1:f0:ec:d0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jul 23 15:24:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=770cc68c296294682a05af378c89432cee8c8626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:43:d9:bf:56:62:7f:09:26:94:6d:6d:29:
f0:c0:d4:8b:42:5f:2d:43:5e:d4:f5:d9:c0:3e:0f:
ac:18:30:f9:58:0f:7b:58:8c:52:96:c1:17:bc:a3:
fe:57:d8:b7:5b:c7:17:af:a0:99:57:50:1b:3e:18:
be:e3:bd:68:f2:1f:c2:f7:20:f8:c6:37:c6:58:41:
6c:46:1d:72:0a:0f:b8:a0:3c:03:27:73:c4:1a:7a:
dc:3f:31:7f:75:98:46:a8:e5:26:4c:64:95:d3:ac:
55:b7:a4:b5:46:97:d6:78:28:4c:8c:37:a8:f5:fc:
b5:e7:95:d7:77:f1:b7:32:57:3b:4d:42:b0:67:01:
68:47:a9:36:d3:55:08:5a:19:50:f6:83:af:7c:9f:
99:bc:d7:2a:04:fe:46:ec:8d:00:61:89:83:93:56:
a8:54:59:6b:fe:28:14:0e:17:d1:99:bc:24:50:50:
86:03:58:c5:04:67:5f:35:48:03:0e:56:2b:c9:8d:
06:ae:40:6b:f8:17:2f:11:f2:ab:39:f6:3e:d6:c4:
8e:39:0d:61:55:5b:c3:da:c1:9b:e4:9c:f3:fe:87:
41:e9:a6:3a:b6:08:a6:df:3f:0a:1d:47:08:79:28:
dd:91:61:d9:86:05:08:ff:10:41:d5:9b:ee:36:9f:
8f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0C:C6:8C:29:62:94:68:2A:05:AF:37:8C:89:43:2C:EE:8C:86:26
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/dwzGjClilGgqBa83jIlDLO6MhiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.212.0/24
IPv6:
2a00:19e9::/32
Signature Algorithm: sha256WithRSAEncryption
a7:2a:e0:02:7e:60:62:77:73:f6:dd:ed:7e:3b:d6:ea:70:44:
52:6f:f1:ff:d6:0c:ca:22:e7:23:8a:ce:a7:2d:93:80:83:36:
b5:78:f1:20:b4:e7:f2:34:aa:94:9f:72:63:e1:82:5f:05:20:
5b:c9:9f:e2:af:71:b0:fd:46:a0:57:20:e7:cf:5b:f6:96:6e:
dd:50:be:60:31:27:a0:20:fd:be:e0:ef:45:40:fd:1d:4b:02:
ea:21:56:11:24:c8:c1:8e:bb:4d:b3:d2:3e:08:7b:4e:a3:13:
b3:b1:9c:ea:d7:23:92:f8:f9:6d:88:2a:5f:bb:83:4c:6b:a9:
31:2d:58:b8:89:57:20:36:c6:5a:2e:7e:f7:03:f7:fe:70:5c:
c2:21:88:ed:60:df:c3:23:f9:7c:cc:e9:b3:c0:4a:c6:e6:2d:
22:22:06:46:e2:ab:25:23:a5:b5:18:af:39:ce:1b:2d:a5:80:
09:66:37:51:08:53:2f:6a:4f:1f:b4:0d:a2:13:4f:7b:bb:b4:
40:ab:dd:02:9d:c8:b5:b7:98:1d:93:e2:b2:b9:d8:90:58:b5:
0c:3e:eb:84:08:0c:9d:a9:83:07:a5:15:f5:0d:3f:a3:00:c2:
d8:21:82:cf:46:b1:30:6f:1a:5c:fd:2d:ab:a0:e3:39:05:9e:
4b:05:f1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:44:15 2025 by rpki-client