Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/I7W7BiiLm6u6D9C5aqvMTsVBhBE.roa
File: I7W7BiiLm6u6D9C5aqvMTsVBhBE.roa (raw, json)
Hash identifier: vyLDMlQQoZ6HtO2DzUWeO4AcSQzmTkzihUMiU4lYZ+0=
Subject key identifier: 23:B5:BB:06:28:8B:9B:AB:BA:0F:D0:B9:6A:AB:CC:4E:C5:41:84:11
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01983BD276A2D7A11DA381074E8F488E396B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/I7W7BiiLm6u6D9C5aqvMTsVBhBE.roa
Signing time: Thu 24 Jul 2025 09:45:05 +0000
ROA not before: Thu 24 Jul 2025 09:45:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207905
IP address blocks: 124.198.130.0/24 maxlen: 24
158.173.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 12:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:d2:76:a2:d7:a1:1d:a3:81:07:4e:8f:48:8e:39:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 24 09:45:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23b5bb06288b9babba0fd0b96aabcc4ec5418411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:8b:b8:4a:3e:13:54:2e:9f:74:72:df:c9:
be:bc:dc:9c:16:f7:f1:86:1c:10:3e:e9:72:28:62:
84:c2:f8:da:04:01:26:d0:85:43:25:b4:3a:55:c9:
3c:5e:f5:ea:c2:e9:82:3c:00:d6:bf:02:32:df:1b:
be:13:1b:ed:df:48:ba:5c:b4:aa:53:11:1b:db:b9:
80:49:21:cf:66:1f:7a:a4:16:34:2e:9f:6a:aa:bb:
ba:fc:a2:e1:6b:76:4c:4a:4e:31:1f:92:a3:ef:4e:
4b:90:c5:d5:e9:3a:58:13:f5:d0:a0:86:c2:c0:d7:
d6:49:15:e7:34:4a:f9:57:26:5c:52:fd:62:ec:ab:
ad:d3:5b:a4:12:bd:c0:bc:ab:e9:34:9d:7c:f5:1e:
8c:bd:30:ff:78:a4:a4:2d:20:58:9f:af:c4:b4:4f:
66:b4:c8:86:cf:e2:a5:45:45:d0:55:a1:86:98:01:
9a:1d:38:93:85:53:15:0b:fd:b3:0c:46:eb:bb:d3:
d1:a7:60:16:bc:e3:ab:35:18:98:7b:66:21:d8:a9:
36:d9:8f:92:5a:0a:be:ab:e9:9d:4c:c1:43:c7:b6:
ca:13:c3:ef:c5:6d:e9:86:b7:a5:0e:10:26:55:ac:
36:2d:e4:cc:08:b3:0e:14:b0:9a:c1:3b:70:ea:d8:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B5:BB:06:28:8B:9B:AB:BA:0F:D0:B9:6A:AB:CC:4E:C5:41:84:11
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/I7W7BiiLm6u6D9C5aqvMTsVBhBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.198.130.0/24
158.173.132.0/24
Signature Algorithm: sha256WithRSAEncryption
be:8c:33:06:98:52:33:9a:b2:c0:eb:27:2c:87:42:34:f7:fe:
3d:78:20:be:e9:b3:37:0a:5f:96:7a:af:3e:f4:81:be:b7:81:
1c:f6:a0:d8:4f:84:3d:c5:94:eb:7b:02:ec:73:63:f6:74:43:
5a:34:12:7d:b3:53:12:29:bf:9b:cb:e4:98:e0:96:29:58:4b:
d9:ee:58:54:36:8d:fd:ad:2b:37:5d:e0:ca:e7:da:71:91:85:
a2:88:38:63:39:03:e6:1e:45:3e:1b:04:2f:5c:6f:86:ce:07:
19:29:3b:92:be:11:ab:30:a2:e9:c0:64:cd:f2:2e:cd:d2:a6:
1a:db:5f:84:ab:73:d8:6c:db:68:3c:13:10:44:7a:20:e5:a4:
fd:24:6a:f7:5a:e6:3b:f9:3a:7c:ba:6b:fd:18:cd:bf:b4:2c:
81:a8:46:8f:ce:ce:40:cb:4f:72:fb:45:aa:92:05:94:ae:69:
27:c1:35:fa:dc:c7:b3:83:5a:4c:79:3b:6d:38:de:a2:97:d7:
d7:68:46:92:63:51:be:aa:65:84:ab:49:e5:c8:db:9f:0b:96:
03:68:05:76:d1:1a:d5:92:29:26:3e:1b:c9:5b:e1:8d:1b:3b:
4d:00:12:d7:a2:f4:1c:2f:75:59:bb:bb:d9:1c:92:84:8f:06:
1d:b7:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:23:49 2025 by rpki-client