Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/OsdUL8EpuwhZx0vtvFVIiiL74NA.roa
File: OsdUL8EpuwhZx0vtvFVIiiL74NA.roa (raw, json)
Hash identifier: vcvnIapkn2FFYKfYoBurX1UcqL1Nk0pgUQpkrj/KNVw=
Subject key identifier: 3A:C7:54:2F:C1:29:BB:08:59:C7:4B:ED:BC:55:48:8A:22:FB:E0:D0
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0197EA220A54C40627539E61547D7297C53C
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/OsdUL8EpuwhZx0vtvFVIiiL74NA.roa
Signing time: Tue 08 Jul 2025 13:03:08 +0000
ROA not before: Tue 08 Jul 2025 13:03:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 178.173.232.0/22 maxlen: 22
188.209.156.0/22 maxlen: 22
212.90.100.0/22 maxlen: 22
213.173.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ea:22:0a:54:c4:06:27:53:9e:61:54:7d:72:97:c5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jul 8 13:03:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ac7542fc129bb0859c74bedbc55488a22fbe0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:d7:8e:c9:4e:7d:78:32:e5:c3:09:01:b2:
6b:18:16:8a:97:fc:93:d7:55:6c:e0:5b:08:d4:01:
c8:56:f5:6e:08:8f:de:78:9f:69:42:3a:c8:5e:4e:
a3:4e:0a:44:a9:5b:66:8b:04:d1:aa:8e:da:b4:8e:
5a:db:a0:8b:6d:c8:f2:7a:85:c8:85:d3:bb:cd:35:
aa:52:67:74:64:3a:e3:8a:25:11:49:dc:77:cb:cc:
ee:22:d9:a4:f0:f0:cf:4a:5c:f5:e0:ef:82:41:37:
bb:4c:aa:16:aa:7b:2d:f8:a3:e6:c9:a1:48:69:74:
cb:72:67:d1:44:ce:40:66:63:5b:3a:1c:02:b1:bf:
48:21:80:4c:05:f7:ad:db:83:26:2c:f1:9e:0a:c9:
6c:41:f2:bf:e9:22:91:9b:67:e0:f7:94:a7:09:42:
69:a1:36:8a:a5:16:c8:7a:f8:6e:5e:f1:f9:71:2a:
67:4d:3f:2d:88:14:be:17:8d:6d:2a:bf:da:71:b2:
1d:74:66:7e:78:25:9e:8d:97:4d:a0:79:00:48:eb:
4b:9a:d7:cc:2a:02:d4:67:38:c2:a7:9b:8f:30:dd:
1a:77:cb:f3:b0:6e:b3:3e:38:b8:d7:e5:78:42:ca:
03:61:c6:98:a5:a0:16:54:bc:2a:30:48:70:ef:c4:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C7:54:2F:C1:29:BB:08:59:C7:4B:ED:BC:55:48:8A:22:FB:E0:D0
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/OsdUL8EpuwhZx0vtvFVIiiL74NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.232.0/22
188.209.156.0/22
212.90.100.0/22
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:10:c8:7d:07:cf:aa:76:c8:d8:a2:58:5b:0c:fc:c0:6f:30:
bc:4b:9e:5f:2b:6f:34:6d:c0:74:fc:c5:b1:2d:52:a5:e0:68:
55:bb:d5:a8:0c:39:39:55:0a:5d:c6:3b:45:a1:f3:30:51:96:
82:07:b1:69:5d:1c:9e:57:00:99:14:c5:02:e6:ae:09:38:37:
36:e3:d1:ce:b2:c4:cc:8b:2a:93:d2:dd:a0:9b:f8:a8:fd:34:
23:9a:ba:a5:ae:25:96:36:ae:91:86:5f:07:fd:07:40:80:10:
49:d2:65:de:83:51:01:0b:0f:4e:a8:d9:55:42:73:32:04:10:
77:8e:38:d0:8e:4a:69:37:c3:88:a7:f1:9c:24:d7:ae:8e:e4:
25:7f:ad:a8:f9:b3:72:ef:4c:62:a1:ed:0e:e2:ea:84:d1:69:
35:dc:60:dc:f0:68:d9:4e:b0:1d:36:6f:24:b6:7b:05:95:13:
c0:f0:e2:c3:fa:a9:b8:8b:86:dd:58:f2:51:81:f8:6c:11:1c:
b5:a8:ba:27:12:ed:86:91:be:e4:25:e8:31:9b:61:a4:d8:ab:
ce:5e:3d:31:22:96:5f:4d:cf:70:bb:8c:e0:d1:9b:7b:6f:50:
dc:f0:a3:fa:8a:ad:0e:c4:b4:8d:40:de:8b:f5:cd:05:9e:cd:
c9:e0:3e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:47:34 2025 by rpki-client