Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/FcoEowCCwLtCDdAqHRO2Kv91VxE.roa
File: FcoEowCCwLtCDdAqHRO2Kv91VxE.roa (raw, json)
Hash identifier: zBLbUkp1NfzmYs07xsHGfKRfRLXTFax1XlRROYdA+UE=
Subject key identifier: 15:CA:04:A3:00:82:C0:BB:42:0D:D0:2A:1D:13:B6:2A:FF:75:57:11
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B28169C3FE5C4B8122397966F3126F
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/FcoEowCCwLtCDdAqHRO2Kv91VxE.roa
Signing time: Mon 14 Jul 2025 16:09:10 +0000
ROA not before: Mon 14 Jul 2025 16:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50040
IP address blocks: 213.108.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b2:81:69:c3:fe:5c:4b:81:22:39:79:66:f3:12:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15ca04a30082c0bb420dd02a1d13b62aff755711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:64:1b:e0:a7:0a:30:65:4a:60:17:3b:4a:
ac:85:f3:e9:55:2d:5f:28:c1:64:68:0b:06:23:ac:
34:8c:b0:e6:59:1b:c7:e4:58:35:55:c3:23:4c:dc:
9e:77:9f:2b:bc:f9:4b:f9:d7:39:9f:b3:a2:cb:1f:
7c:90:72:57:96:97:1e:77:d1:32:05:78:67:c2:b0:
af:3e:89:bb:3e:e1:6c:d3:3e:9d:3d:77:e3:a7:2b:
0d:7c:03:eb:6a:7d:06:35:d7:fd:79:15:4d:39:50:
30:e0:ab:87:e8:a4:4d:39:b7:1c:8f:0c:33:45:85:
40:09:c1:df:2e:c9:c5:22:61:2f:e4:f4:62:6e:a8:
5c:87:50:0f:be:d1:5e:2a:98:3e:78:a0:e5:9b:4a:
bb:a2:b6:29:05:99:96:49:57:e8:48:95:da:26:d5:
98:6d:e9:99:40:95:74:92:41:f7:57:51:c3:2d:04:
0b:4a:2e:1d:54:db:59:bb:59:82:7d:da:ef:9a:8f:
2a:23:84:e2:80:f6:2f:d6:00:3a:19:cd:86:b6:49:
28:cb:f5:8b:2d:0e:a2:36:f2:10:36:c8:9a:f2:5c:
e9:35:bb:2b:71:58:63:11:87:e8:3a:e7:bd:73:f6:
92:02:dd:1b:ae:53:39:cd:ca:c9:a3:20:fc:8e:f1:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CA:04:A3:00:82:C0:BB:42:0D:D0:2A:1D:13:B6:2A:FF:75:57:11
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/FcoEowCCwLtCDdAqHRO2Kv91VxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.197.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:b1:e2:75:22:4d:f2:5b:25:b5:2b:0a:02:05:3d:8f:2b:cd:
55:0b:89:01:a5:28:12:76:cd:ae:43:23:34:58:f1:e8:01:4d:
a0:34:63:ad:4b:33:aa:78:01:62:c4:00:77:1e:a4:3c:4a:45:
fc:c8:b1:f9:bb:18:41:e4:c0:de:b5:15:c8:2f:be:a1:92:25:
c7:65:74:31:8f:bf:46:83:6f:11:b4:28:04:08:4d:4e:16:9f:
d3:32:30:b8:2e:51:78:5a:d3:d7:0d:cf:74:09:ea:e0:88:55:
e5:b5:48:0d:f2:46:9f:7c:5e:27:f1:16:f1:b5:5b:75:00:57:
94:71:04:8b:89:e2:ea:74:57:67:bc:ed:d0:bd:e1:36:c1:50:
da:1e:cd:73:3b:c4:5b:c2:bd:c1:c0:36:c0:e0:9c:7e:15:01:
5a:70:ba:c7:58:fa:e3:7c:12:c3:84:35:3f:f8:69:99:b3:78:
9c:25:ec:e8:94:84:5c:d8:0a:1c:e8:5d:e5:6d:98:3f:1a:a0:
5b:c9:ab:e4:4e:f3:1b:9c:7c:79:c4:fd:ee:61:bd:d6:e2:fc:
5d:87:6d:e1:0d:48:da:85:38:64:2f:ec:10:dd:c6:e0:9a:4a:
43:07:b0:da:fb:17:4e:9e:16:1b:bd:f4:6a:db:bb:99:21:f1:
7a:42:24:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:26:18 2025 by rpki-client