Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/kjIvVbxcwGLH5SjeTdqkIDQRAyc.roa
File: kjIvVbxcwGLH5SjeTdqkIDQRAyc.roa (raw, json)
Hash identifier: luAw27nn+Q9DaAgXp0DPJsam5ai+yI+hFHF62vHs6nQ=
Subject key identifier: 92:32:2F:55:BC:5C:C0:62:C7:E5:28:DE:4D:DA:A4:20:34:11:03:27
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0197E93FE70269809EBFCD4EBE0710C4F722
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/kjIvVbxcwGLH5SjeTdqkIDQRAyc.roa
Signing time: Tue 08 Jul 2025 08:56:08 +0000
ROA not before: Tue 08 Jul 2025 08:56:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.1.208.0/21 maxlen: 21
92.63.225.0/24 maxlen: 24
2a02:c6c1:f::/48 maxlen: 48
2a0f:4b41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:3f:e7:02:69:80:9e:bf:cd:4e:be:07:10:c4:f7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jul 8 08:56:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92322f55bc5cc062c7e528de4ddaa42034110327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ee:98:19:fd:07:41:ea:af:39:6e:59:39:07:
5a:03:6e:38:4a:6a:2a:9d:dc:8f:da:50:71:12:48:
18:b1:37:d8:49:11:cf:f2:d7:a9:00:5b:cb:21:2c:
41:e1:ef:ee:7b:1c:ab:cf:76:3b:eb:03:d9:ab:a0:
68:df:14:cf:33:89:5c:26:37:92:11:7c:2a:e1:3d:
43:84:cd:c4:25:75:a6:95:0d:b0:03:21:6b:1d:4c:
0a:da:cf:d7:f0:4b:e5:2e:4d:90:22:90:c4:40:3a:
fb:33:b8:2a:2b:fb:a9:2c:aa:f7:59:ee:1e:7a:e9:
83:e0:c0:cf:86:92:49:97:d1:9f:41:7e:9e:d8:30:
cd:a9:d1:e7:e0:1f:32:e5:07:8f:54:36:bd:1a:28:
92:9f:ce:44:27:0e:8c:87:9a:a4:eb:38:f1:7d:a4:
b7:66:2c:49:4a:dc:02:82:62:24:c9:45:9e:32:31:
1d:7b:ea:0b:86:80:58:31:76:c7:12:eb:0c:65:68:
22:f6:eb:0e:f1:73:2d:d5:51:e5:19:1d:5e:bf:b2:
3b:9e:60:f0:f6:9d:3d:3c:94:f8:b2:8a:24:20:17:
b6:86:3d:0f:9a:db:4a:e3:e7:55:7c:51:54:e7:0c:
74:55:12:12:df:39:e3:49:58:6d:70:23:d4:ee:f7:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:32:2F:55:BC:5C:C0:62:C7:E5:28:DE:4D:DA:A4:20:34:11:03:27
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/kjIvVbxcwGLH5SjeTdqkIDQRAyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.208.0/21
92.63.225.0/24
IPv6:
2a02:c6c1:f::/48
2a0f:4b41::/32
Signature Algorithm: sha256WithRSAEncryption
38:ee:42:09:a9:2f:bc:b8:17:f2:6a:ed:8a:91:5d:9a:82:6c:
1d:b1:b4:72:af:54:6b:9f:0d:c7:dd:8e:5b:cd:e2:15:8f:7f:
35:0f:46:6f:35:e7:7e:93:a4:86:a3:05:f5:c5:77:a2:91:fb:
42:2d:b9:39:7e:7d:ec:02:91:16:13:47:30:2e:80:d6:0f:0e:
78:a7:50:9f:55:1a:17:9c:0a:05:ed:b9:6f:50:be:94:25:b7:
8a:2a:b5:e9:8e:6c:26:7f:48:43:6b:51:a0:27:33:f5:66:f8:
4a:9b:25:86:cf:d1:8c:7f:89:8c:dd:69:cd:5f:ca:b7:9b:3d:
8a:ae:d9:c6:d1:70:56:ed:7b:1a:bf:08:55:d4:6a:b9:34:04:
35:0b:a0:28:94:72:a4:a0:0b:4d:e6:4d:28:e7:24:a6:0c:9a:
39:43:6c:88:89:40:c0:7e:e3:c0:b2:38:26:3f:af:6c:d1:15:
8a:f1:09:3f:5e:c3:b6:fd:9b:e7:17:ba:47:5c:ff:e7:13:6d:
2f:dd:5b:d1:56:ac:79:fb:5d:5d:2e:2f:e4:20:5b:1a:74:de:
a7:08:78:c2:54:52:ab:21:c5:97:ea:5f:35:0f:0e:3c:07:88:
91:92:48:f9:52:fe:e1:0e:0c:f5:95:17:cc:80:da:12:a2:30:
39:86:bd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:20:11 2025 by rpki-client