Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/GrCJk2XTvFQ1bFg3LeF86Dm0kMU.roa
File: GrCJk2XTvFQ1bFg3LeF86Dm0kMU.roa (raw, json)
Hash identifier: //aHWa+QTi3TqyDc0NocuZ54Ser38N49WnMxWn6LdwE=
Subject key identifier: 1A:B0:89:93:65:D3:BC:54:35:6C:58:37:2D:E1:7C:E8:39:B4:90:C5
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 0197E3E061F2636F9E2C65E0D046D4D35230
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/GrCJk2XTvFQ1bFg3LeF86Dm0kMU.roa
Signing time: Mon 07 Jul 2025 07:53:42 +0000
ROA not before: Mon 07 Jul 2025 07:53:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209724
IP address blocks: 212.32.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e3:e0:61:f2:63:6f:9e:2c:65:e0:d0:46:d4:d3:52:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jul 7 07:53:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ab0899365d3bc54356c58372de17ce839b490c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:69:e6:20:6f:6f:7f:44:28:75:81:06:b7:f9:
23:7e:f3:e4:5c:43:d4:dd:2e:13:ea:da:b2:a7:de:
09:67:27:d1:38:08:d1:69:be:7f:45:68:cf:4e:d0:
76:cd:a6:8b:4f:44:f2:1c:71:e5:b6:67:a6:cd:bf:
26:b0:a9:c1:49:c8:7e:7b:df:12:c2:5e:1d:bd:97:
56:29:4e:95:5a:ef:fb:09:bf:93:11:58:98:84:0d:
8b:49:1c:5e:7a:e7:43:bb:58:ba:8a:e7:c6:d2:29:
7a:67:90:57:e7:e8:73:9d:f1:bb:e7:1a:99:33:ec:
a7:fc:9b:a0:aa:bc:ad:0e:f7:25:7d:d8:9f:32:b2:
f8:d6:c0:1c:4b:8c:c3:2f:68:1d:ff:c7:62:32:22:
b0:03:5f:3e:a3:5c:6d:cf:6d:80:70:33:f7:40:cf:
1e:ca:a5:ff:cf:16:14:1a:4f:2f:1a:dc:25:d0:5b:
da:1a:06:1f:e2:16:99:4d:60:f2:50:67:01:22:1a:
37:03:4c:34:8f:2c:37:25:54:2d:88:87:60:f1:10:
a5:b0:bb:3d:df:0c:9c:dc:b3:3a:06:af:7e:d5:29:
2f:6f:be:34:12:f8:55:b8:96:db:e4:cb:f9:b7:80:
81:4d:3e:6e:81:69:b6:43:80:40:c1:1c:8a:01:ed:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B0:89:93:65:D3:BC:54:35:6C:58:37:2D:E1:7C:E8:39:B4:90:C5
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/GrCJk2XTvFQ1bFg3LeF86Dm0kMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.64.0/24
Signature Algorithm: sha256WithRSAEncryption
63:29:1b:a9:45:f7:10:61:3d:f5:6e:11:da:95:25:43:10:4c:
39:10:71:b4:77:bd:96:df:4d:a8:55:4e:f6:f0:de:d0:73:a9:
f6:70:d6:00:4c:f3:e3:cf:97:2a:fa:3c:78:b2:b1:74:f0:7d:
19:00:e3:3c:49:aa:e7:89:a9:ed:bc:82:6c:84:71:da:d0:f7:
cd:53:ad:6a:51:8f:e7:10:4f:93:f7:14:5f:2c:e2:32:ea:84:
c2:06:c8:a0:08:3f:c7:66:68:c2:84:7c:9f:64:e4:17:72:b4:
b2:d4:4c:67:85:47:8f:af:5e:3f:03:28:81:4b:1a:ef:c1:c8:
69:5d:1e:3b:9b:05:bc:13:d8:df:6d:53:fb:00:aa:40:6e:76:
c0:4a:87:2c:c5:f8:9b:76:e0:e7:5a:84:70:95:08:ab:29:16:
3c:ea:95:32:72:67:2b:dd:81:7e:a7:a5:d9:1b:72:04:4b:c0:
9d:d9:44:cf:69:7a:45:79:85:d3:d8:4b:f5:61:b2:bc:f3:b5:
91:5f:50:43:ba:b3:c9:fb:50:ca:af:8a:7a:b2:ac:b7:62:f9:
6b:13:4d:f9:46:b8:92:68:01:d4:4a:84:2c:93:38:c5:b9:89:
0d:86:89:40:55:55:4a:dc:cb:69:44:3a:9a:ce:a0:82:f8:75:
15:dd:03:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:38:05 2025 by rpki-client