Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/0j33Ru6ENIlDY6BtfosnkftzwU4.roa
File: 0j33Ru6ENIlDY6BtfosnkftzwU4.roa (raw, json)
Hash identifier: rBc6Hy0e1d2fFaXTJszgwF3/u67YU7xF/ItW4XW6O7A=
Subject key identifier: D2:3D:F7:46:EE:84:34:89:43:63:A0:6D:7E:8B:27:91:FB:73:C1:4E
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0197C5ACFB669FEBBCFB3DD83FD4E1A2455C
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/0j33Ru6ENIlDY6BtfosnkftzwU4.roa
Signing time: Tue 01 Jul 2025 11:08:57 +0000
ROA not before: Tue 01 Jul 2025 11:08:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62300
IP address blocks: 5.183.153.0/24 maxlen: 24
213.166.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:ac:fb:66:9f:eb:bc:fb:3d:d8:3f:d4:e1:a2:45:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 1 11:08:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d23df746ee8434894363a06d7e8b2791fb73c14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:cc:ca:ae:0c:65:02:5b:b5:66:7a:8c:0e:
84:6b:7d:01:ab:fd:a6:de:6a:c2:7b:5e:a3:5f:cd:
de:31:d8:c0:fd:c8:f0:7f:91:a7:33:d3:72:8e:75:
1e:40:1b:40:e3:3a:ad:37:b8:71:fe:ba:9a:5e:fb:
5f:38:1e:94:57:60:34:a9:d9:e2:31:bf:44:98:73:
30:c5:df:70:27:bf:4f:8b:38:14:f3:fd:2a:3f:8d:
65:aa:f4:2c:66:93:ad:75:75:d3:1b:a8:8a:b7:88:
99:83:d7:41:91:20:3d:30:f8:4d:f9:1a:63:5c:83:
66:f6:05:be:78:80:6b:06:c6:9c:ac:fd:f2:1c:d0:
e9:46:a1:71:a0:cd:ec:ed:46:56:9b:af:9c:f3:a5:
69:5e:97:42:1d:60:23:21:d7:fe:60:7e:ba:02:da:
b7:77:a6:ca:2f:7c:bf:36:bd:73:e2:1b:90:6b:f6:
4e:2b:c5:e8:e7:19:e5:ce:bc:cc:d4:92:60:c9:55:
17:7f:e1:24:1c:33:53:62:98:d7:74:cc:4c:5b:38:
ae:71:ad:d5:b9:20:d1:70:03:c6:65:2e:79:57:3c:
4e:cd:b5:f4:a6:a4:77:ea:8a:00:f9:7d:43:64:aa:
04:87:3b:5e:34:38:07:9d:21:6c:64:0f:da:55:a2:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3D:F7:46:EE:84:34:89:43:63:A0:6D:7E:8B:27:91:FB:73:C1:4E
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/0j33Ru6ENIlDY6BtfosnkftzwU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.153.0/24
213.166.80.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4d:1e:29:f4:16:89:8a:62:39:67:1b:04:b5:b1:c6:4d:cb:
29:28:e4:bd:d9:32:41:6e:fc:17:73:55:69:ee:2a:ac:f1:a5:
88:7c:eb:57:dc:eb:18:8a:6b:18:95:73:38:5a:4e:ec:09:d6:
74:69:35:e9:0d:b7:df:84:b3:87:5b:6b:44:ef:42:e2:6d:bf:
cb:53:63:d7:04:5a:79:54:13:63:56:5e:ec:38:0d:50:f2:a6:
57:68:29:e0:c4:5a:0b:d7:35:30:d5:2d:29:96:77:85:dd:bf:
e1:2d:ed:c0:03:1b:ad:08:fe:d8:33:f5:7c:6e:1b:36:bd:ca:
e7:a2:55:46:02:f6:ca:72:56:1c:d7:c5:75:15:e5:9a:ca:44:
c9:ce:5a:e3:ca:26:78:a4:0a:fb:bb:25:f5:9b:67:73:49:b7:
30:19:1c:53:d3:5e:71:6f:4e:02:5f:91:75:a5:c6:e9:73:c0:
c2:dc:cd:8b:8d:b6:cc:4e:51:bb:9b:3f:7b:13:45:64:15:2e:
b8:fd:d9:d4:bf:ac:43:64:ee:7e:67:c0:02:ca:38:f9:37:07:
ed:6b:f2:f5:25:49:67:c8:e8:ef:9a:a3:d6:79:38:c1:3f:12:
9c:69:77:d7:ff:24:92:ee:56:7c:1d:5b:8e:b6:e2:67:77:e1:
25:4d:59:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:44:04 2025 by rpki-client