Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/23cjywgox101LeW5GrrQWi4IHG0.roa
File: 23cjywgox101LeW5GrrQWi4IHG0.roa (raw, json)
Hash identifier: uYyFedbey5ChPUlaasPp5Y63DNZ1EjHPXUKggcmyWcA=
Subject key identifier: DB:77:23:CB:08:28:C7:5D:35:2D:E5:B9:1A:BA:D0:5A:2E:08:1C:6D
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01982D8A27ED861593093FC77AEF6A0CB0D2
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/23cjywgox101LeW5GrrQWi4IHG0.roa
Signing time: Mon 21 Jul 2025 15:11:25 +0000
ROA not before: Mon 21 Jul 2025 15:11:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2a12:3f80::/29 maxlen: 29
2a12:6d80::/29 maxlen: 29
2a13:c540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:8a:27:ed:86:15:93:09:3f:c7:7a:ef:6a:0c:b0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jul 21 15:11:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db7723cb0828c75d352de5b91abad05a2e081c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:ac:bf:29:31:c2:62:82:4f:3e:90:19:fe:
eb:cb:e8:cd:31:68:ed:e5:9f:d1:a1:e9:a8:0e:dc:
25:e0:fd:c4:c1:f7:21:eb:39:89:03:c8:b6:ff:d4:
99:7a:b1:e5:75:51:ec:28:8a:fd:63:2e:cf:71:23:
10:4a:47:e8:77:72:ca:b6:0d:c4:21:e8:4c:3c:f2:
95:4c:93:4c:9c:a2:ca:79:6f:23:43:43:3a:a8:36:
c1:c1:8c:a5:72:7f:d3:76:7b:12:45:7c:c7:d7:75:
8b:35:d3:7b:22:eb:a9:dd:4f:1c:b8:60:4a:1e:95:
10:5c:7c:eb:54:86:a4:b7:ce:3a:22:98:74:f4:9b:
9e:32:53:49:f1:8f:56:22:55:07:46:42:c8:84:84:
9d:e7:90:fd:ef:34:ea:1a:34:90:80:48:cc:b2:90:
b3:15:a0:d7:d0:5b:90:49:6c:1f:f9:36:c0:20:e7:
f1:b5:34:39:ca:bb:fa:5a:66:28:b2:23:7a:c3:fe:
4e:3d:a6:2a:d7:75:6f:be:ee:7b:fe:38:cb:22:dc:
b0:ef:86:f1:f2:da:ee:a0:fe:c3:e7:9e:73:50:8e:
c4:40:a4:7a:af:f6:b1:af:3c:02:c8:1c:32:19:a5:
aa:68:12:68:a6:a0:56:53:5f:ec:fd:c4:7e:26:d7:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:77:23:CB:08:28:C7:5D:35:2D:E5:B9:1A:BA:D0:5A:2E:08:1C:6D
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/23cjywgox101LeW5GrrQWi4IHG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3f80::/29
2a12:6d80::/29
2a13:c540::/29
Signature Algorithm: sha256WithRSAEncryption
6a:45:c5:74:2c:ab:a4:fc:54:c0:23:23:53:68:3f:ef:1b:d3:
f6:50:21:04:0c:1e:59:f4:49:a2:cc:75:9b:21:42:c8:a7:f5:
a6:cd:16:e6:7d:c1:ab:fb:3f:18:51:06:67:33:cf:f8:e5:ea:
79:81:69:cf:bc:ff:b5:4c:b9:88:8e:b7:5a:c1:53:33:4e:69:
a0:45:23:a1:1d:dd:ab:ba:ec:80:46:b2:11:b7:8f:39:cf:ac:
2d:d5:19:98:42:68:62:dd:63:05:21:9a:a7:79:5e:ca:ee:fa:
39:2b:61:af:54:56:18:9b:73:5e:3c:54:83:4d:2a:04:83:79:
fa:d7:05:f1:4a:5d:07:d1:a2:44:15:81:bd:25:14:b3:13:eb:
b9:91:20:47:5a:a8:b2:65:02:3d:95:d8:53:d5:a5:5e:6b:bf:
32:42:7a:7a:ba:75:5c:11:77:8a:d5:ce:22:dc:94:a0:8f:c5:
91:c9:44:05:42:08:3a:38:4d:e6:6c:77:35:f3:af:52:06:f4:
27:1b:2a:8a:70:e7:6a:d7:b9:b3:13:f9:cd:03:17:b3:47:a7:
79:4c:1e:30:a9:8f:dd:ef:53:ca:f1:0c:9d:cd:aa:12:82:a4:
e6:00:18:57:47:5b:19:3b:de:e0:e6:65:48:cb:b7:2b:47:de:
ca:21:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:47:43 2025 by rpki-client