Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/aa5AbLBPnoYTAUvTmbD3Iub_120.roa
File: aa5AbLBPnoYTAUvTmbD3Iub_120.roa (raw, json)
Hash identifier: PcPVYbE1FKjarjaLrOxDhw3YIdXoKle1a0a471+wigo=
Subject key identifier: 69:AE:40:6C:B0:4F:9E:86:13:01:4B:D3:99:B0:F7:22:E6:FF:D7:6D
Certificate issuer: /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial: 0197CD41ABDB21FE9812FFC6FBF4CDF1FEFE
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/aa5AbLBPnoYTAUvTmbD3Iub_120.roa
Signing time: Wed 02 Jul 2025 22:28:42 +0000
ROA not before: Wed 02 Jul 2025 22:28:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 185.46.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:41:ab:db:21:fe:98:12:ff:c6:fb:f4:cd:f1:fe:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Validity
Not Before: Jul 2 22:28:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69ae406cb04f9e8613014bd399b0f722e6ffd76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:51:1f:a8:7d:b5:ff:f3:ab:de:20:e0:c8:
d0:d6:e6:cd:4b:b5:52:25:ee:69:a4:17:5b:92:76:
13:ae:23:97:2d:a5:ec:76:09:db:8d:6b:54:b2:d8:
85:6f:e8:fb:1e:cf:1a:7c:de:8a:1f:91:90:e6:7d:
86:d4:75:1f:e4:50:ee:f3:66:e8:a5:0c:0f:53:92:
a4:ab:ef:75:9b:22:70:49:30:72:65:1f:aa:ef:fb:
1e:7c:ff:07:86:72:6d:e4:02:38:f2:db:30:cd:22:
ed:ec:24:9e:8e:6b:fa:02:08:db:be:92:90:bf:a7:
9c:76:d7:6f:65:2e:54:af:ca:a4:af:8e:6b:60:87:
17:3e:c2:4a:fd:af:74:87:81:74:70:2e:3c:b1:f8:
6f:6d:75:e5:9c:db:75:29:44:67:ac:29:86:6a:62:
c9:df:f2:44:87:e1:7b:4e:1f:0a:66:12:0d:dc:ec:
80:60:73:00:ac:66:ae:af:4f:a3:89:2b:91:1d:45:
27:3a:03:8b:c4:45:f3:68:9c:93:39:95:ef:4e:21:
96:25:ae:24:56:b0:f7:dc:b4:00:3c:51:5c:d5:97:
7a:db:db:80:c2:45:ca:e0:09:dc:3c:6d:61:07:46:
7c:b7:fe:17:db:ee:f0:60:65:ac:28:cc:e1:55:49:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AE:40:6C:B0:4F:9E:86:13:01:4B:D3:99:B0:F7:22:E6:FF:D7:6D
X509v3 Authority Key Identifier:
keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/aa5AbLBPnoYTAUvTmbD3Iub_120.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.113.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:75:c1:2d:dd:be:18:52:ba:8b:5e:ee:83:56:3a:c7:05:fa:
a1:58:8e:4b:38:b0:05:b5:7d:5e:12:8d:94:bb:c0:9b:63:6d:
89:ad:7f:cd:f9:8c:42:da:e2:55:02:60:28:4f:83:a7:6b:f1:
5d:b7:62:4c:d9:7c:8b:bc:b4:9a:8f:5b:fe:70:c0:fa:87:1f:
68:e4:15:63:d7:53:17:df:02:5e:de:95:07:c9:b4:58:74:e6:
8b:bd:58:65:54:de:dd:55:2f:ea:c6:7f:e0:c2:6f:22:0f:de:
94:c9:02:fa:e3:8a:ff:93:e9:73:67:07:f2:e7:70:03:06:49:
3f:fd:fa:9b:5f:2f:87:3a:84:ba:c0:1a:f6:36:56:7e:b4:6d:
ab:dd:ee:a5:37:fa:83:ad:13:35:15:4f:8d:ee:2d:c6:d7:90:
79:46:59:9c:3b:3a:83:a0:15:52:ea:f5:f0:2c:cd:80:3c:bd:
c3:21:00:27:35:0b:63:fd:29:57:37:4e:f9:32:37:a3:76:c6:
0c:72:52:ec:49:17:53:64:3d:34:74:ea:a5:04:c8:64:2e:8b:
b7:02:29:12:3d:a7:3a:5b:33:aa:cc:45:73:2d:ce:6d:cf:25:
1b:6f:fb:b8:b0:70:cf:d6:2c:e0:26:57:7b:38:44:9a:3a:e3:
0e:44:bd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:12 2025 by rpki-client