Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/jJYsZg4wnTyX9mV0JNA_riAb8aI.roa
File: jJYsZg4wnTyX9mV0JNA_riAb8aI.roa (raw, json)
Hash identifier: 2YSmon6Fik8vSjQAeDBGETPmH22iZ7Gu1aYziQraG2Q=
Subject key identifier: 8C:96:2C:66:0E:30:9D:3C:97:F6:65:74:24:D0:3F:AE:20:1B:F1:A2
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01983FFC22DBEBA2495434D90B0403C54C20
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/jJYsZg4wnTyX9mV0JNA_riAb8aI.roa
Signing time: Fri 25 Jul 2025 05:09:05 +0000
ROA not before: Fri 25 Jul 2025 05:09:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208483
IP address blocks: 212.22.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:fc:22:db:eb:a2:49:54:34:d9:0b:04:03:c5:4c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jul 25 05:09:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c962c660e309d3c97f6657424d03fae201bf1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:25:1b:f5:eb:a6:92:ae:27:3d:dc:1f:01:
ef:d9:40:7f:7c:f0:21:db:be:28:4b:bb:a4:bf:ab:
f2:6b:17:3e:81:9d:65:b9:60:08:ab:23:0f:e8:49:
37:c5:91:8e:59:c1:ff:29:c0:ee:0b:a7:74:3d:fb:
1b:fd:a0:58:c0:8a:0f:26:d7:d4:0f:e6:65:a1:9d:
72:d5:ed:8b:f5:2f:84:dd:79:db:d6:79:c7:62:f7:
22:c9:b9:22:dc:13:34:48:78:71:fd:b5:2d:da:4f:
72:80:a6:7b:d9:d3:01:79:e9:7b:c2:b2:e6:4a:05:
c6:10:c1:7e:43:b5:cd:b7:78:02:27:94:64:a6:d8:
da:d8:fd:3a:ef:36:7a:0b:26:d4:9f:5c:c9:05:7e:
d2:3d:a9:8c:bc:d0:82:6e:10:a5:c3:6b:8b:49:74:
98:fb:83:16:6f:6e:4f:5a:59:cf:9b:c0:40:7b:b9:
5c:92:7e:5d:30:01:f2:e0:c0:81:93:30:25:7d:43:
24:1d:71:94:ab:b7:6b:0f:dc:18:2b:55:90:e2:f1:
ff:74:fe:8d:19:e6:bd:0a:6b:f4:36:68:44:1f:ca:
bf:3d:64:8f:26:53:1b:4a:fe:f0:d8:4d:67:b8:0a:
e2:a5:ea:3b:76:75:75:94:29:9d:fc:b4:f7:08:59:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:96:2C:66:0E:30:9D:3C:97:F6:65:74:24:D0:3F:AE:20:1B:F1:A2
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/jJYsZg4wnTyX9mV0JNA_riAb8aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.69.0/24
Signature Algorithm: sha256WithRSAEncryption
85:94:61:68:6c:1f:b2:6d:b3:ae:77:9a:56:4d:65:0a:2d:0e:
ad:69:89:ae:9b:62:8c:66:62:3c:d4:28:12:10:8c:6d:76:5e:
e3:a4:66:d4:a7:5e:89:c9:a7:2c:89:e9:38:47:c5:20:3a:bd:
14:a2:95:e1:8f:7a:03:b8:64:86:aa:da:f6:c3:d4:16:27:d9:
56:9e:dc:9a:9e:f6:49:39:49:b0:1d:ca:c5:54:c9:96:54:2e:
a8:95:95:80:8f:49:5f:63:a3:6e:0a:df:04:44:a0:a3:59:e9:
b5:6e:d0:ff:0d:77:7d:c3:b5:25:ad:55:74:74:b0:fc:6d:5b:
f6:33:1d:74:18:44:c9:ec:8a:2f:a3:75:c3:ae:86:39:7f:4d:
7c:1d:94:e9:be:df:bc:4a:52:99:15:99:e0:0c:ec:35:5d:40:
35:9f:f1:46:d0:1d:4b:b4:62:52:e8:b8:67:42:43:0f:62:fd:
0f:59:e2:95:c5:f3:62:6e:f9:9b:fe:5e:8e:7d:2a:2b:9f:b0:
44:0e:f5:e4:2f:e9:b0:f6:a3:e9:c8:70:e5:ed:65:93:d6:c8:
82:1b:e2:5e:21:3e:55:25:49:59:1e:e2:d2:cb:69:c0:f1:cb:
da:5d:93:e7:45:81:67:0e:78:ac:38:82:6c:23:96:54:8e:f2:
7a:56:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 04:00:57 2025 by rpki-client