Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/p2R7qp1dDRLSdeeuLbXWlGKoCVw.roa
File: p2R7qp1dDRLSdeeuLbXWlGKoCVw.roa (raw, json)
Hash identifier: h8RTGb87PL2zqNuBfWC/d7UynYOn5CvB5dqaiCio9gg=
Subject key identifier: A7:64:7B:AA:9D:5D:0D:12:D2:75:E7:AE:2D:B5:D6:94:62:A8:09:5C
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0197C56AD7421F9041008FB050D1FAC9BAE4
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/p2R7qp1dDRLSdeeuLbXWlGKoCVw.roa
Signing time: Tue 01 Jul 2025 09:56:42 +0000
ROA not before: Tue 01 Jul 2025 09:56:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 45.128.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6a:d7:42:1f:90:41:00:8f:b0:50:d1:fa:c9:ba:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 1 09:56:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7647baa9d5d0d12d275e7ae2db5d69462a8095c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:3e:1a:73:6e:80:7d:98:48:ae:20:a9:fd:
5d:37:a6:27:f7:fb:a7:ac:80:1e:11:b3:9b:2f:2d:
a2:1f:e0:56:82:b0:31:a8:8f:e1:de:71:53:b3:e3:
61:c5:e1:53:33:a5:7a:3f:aa:d3:59:d6:4a:00:24:
77:05:d4:30:bb:14:15:5d:8e:c4:47:23:80:45:2f:
d2:47:a5:63:f3:1f:40:b9:31:bd:16:6f:af:1c:e0:
4b:55:c7:06:8b:2f:73:02:19:a4:a8:c9:9e:44:df:
09:a8:db:2c:68:4f:d8:64:24:73:6d:98:b3:ae:4e:
14:ae:6a:6f:7a:f8:86:fa:04:76:74:88:de:53:67:
af:68:41:4a:0c:a3:29:25:87:39:09:15:dc:ff:6a:
37:d6:d5:cc:c4:fc:79:a0:47:f3:9c:7b:bb:5a:47:
ab:4a:1f:9c:38:07:35:41:bb:8f:f4:87:07:de:ee:
38:54:29:e7:71:52:28:4d:7f:50:19:8f:43:ff:fd:
bf:5a:12:9c:0e:1b:82:c9:a4:20:ca:59:47:40:e7:
b8:1a:ee:f6:e0:76:d2:27:f6:db:83:17:2c:a7:9f:
89:aa:a2:cd:e0:63:e3:96:66:be:41:d3:10:68:cc:
e6:a5:10:08:9a:81:18:ec:c9:c0:43:44:99:22:a6:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:64:7B:AA:9D:5D:0D:12:D2:75:E7:AE:2D:B5:D6:94:62:A8:09:5C
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/p2R7qp1dDRLSdeeuLbXWlGKoCVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.128.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f6:f7:65:94:a8:6e:d9:7c:d2:dc:9f:c5:b1:a9:ab:f1:42:
6a:d6:87:7d:a1:7f:cc:21:af:67:c3:53:2d:37:97:f7:5e:f0:
ff:b4:b4:73:c6:7b:d8:71:38:1f:86:7f:7a:d9:52:dc:c2:9e:
45:4e:1e:99:77:ca:ce:f9:e5:7d:a0:66:a6:d6:4a:be:ee:cd:
dc:74:ce:40:19:61:1d:6a:5a:78:d1:ac:b7:16:8b:1f:d6:1a:
b2:87:ba:62:7f:5c:7c:1f:a5:5c:a7:da:a0:ea:ba:ab:5e:ea:
c4:47:22:db:2b:28:7e:46:c3:65:d4:cc:36:d4:69:6c:6f:2e:
29:52:7a:cd:80:e9:02:c8:e0:42:e3:cd:dc:66:40:c2:79:9e:
44:85:ee:de:a4:f1:a0:99:fa:2f:38:03:4a:ff:c4:b7:92:fd:
5c:54:fa:eb:c6:63:ed:64:4e:1f:c4:ae:09:17:b4:87:f1:7b:
3f:79:17:1b:de:ff:a7:bc:80:f6:35:e8:b0:98:40:7e:69:d5:
e9:47:0e:0a:d1:5c:ae:4d:ff:ea:a7:55:71:8c:bd:b1:6d:9e:
67:15:19:04:d0:f0:f5:40:75:1d:09:f4:3a:24:77:a0:0c:91:
66:66:2e:c0:de:c1:ad:1f:cc:cf:98:54:b8:3c:af:6b:90:aa:
0b:53:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:10:51 2025 by rpki-client