Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/chz-ghXnicJHOF99blgR2G2G2rw.roa
File: chz-ghXnicJHOF99blgR2G2G2rw.roa (raw, json)
Hash identifier: dTFmiAaS2facd7CTtX9aej4ckcKjIvq++Fp+NitRT8g=
Subject key identifier: 72:1C:FE:82:15:E7:89:C2:47:38:5F:7D:6E:58:11:D8:6D:86:DA:BC
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01982B86B7A02B11AF78BDCB304EE64DD431
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/chz-ghXnicJHOF99blgR2G2G2rw.roa
Signing time: Mon 21 Jul 2025 05:48:25 +0000
ROA not before: Mon 21 Jul 2025 05:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
84.55.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:86:b7:a0:2b:11:af:78:bd:cb:30:4e:e6:4d:d4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jul 21 05:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=721cfe8215e789c247385f7d6e5811d86d86dabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:8c:a4:7a:63:48:50:c5:17:05:79:8f:d8:
42:b0:98:20:c7:ce:5a:84:9f:64:f8:e7:2f:0d:ae:
68:ae:fe:0a:ba:cc:50:57:65:60:3e:b0:df:dd:9d:
8b:f5:35:33:37:68:31:ec:ea:ba:cd:4c:53:28:04:
ca:21:f9:8d:75:67:14:92:94:83:a1:6b:a3:11:dd:
5f:06:41:ab:41:f8:11:48:d2:fb:d7:6e:06:1f:5e:
23:56:96:d8:2b:98:4a:2b:37:8d:25:01:db:44:ed:
54:8a:ed:47:be:35:8b:73:e9:90:10:4d:45:67:b7:
2e:47:5d:d6:f8:5c:09:dc:2b:57:ee:e6:39:17:64:
2e:1f:bf:17:08:fe:1e:71:07:f7:d5:cc:e6:2b:cb:
e6:4c:16:5d:e8:8a:1e:8a:e2:20:0f:92:65:22:19:
4c:ad:25:28:31:c1:ae:fb:99:30:f8:24:f9:f6:21:
e5:46:3d:ac:97:8d:73:2b:88:ad:92:d6:1d:00:71:
d1:04:f7:0e:24:3c:29:3d:d6:8b:39:fa:ed:f8:60:
4d:18:d3:e9:b6:94:c7:63:c3:b5:ec:c3:22:f0:7a:
c6:03:21:cd:6b:b4:35:e9:3e:cf:e5:d7:95:1e:b6:
e9:7a:f0:4a:45:1e:c4:f5:24:5b:66:00:c9:89:e9:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1C:FE:82:15:E7:89:C2:47:38:5F:7D:6E:58:11:D8:6D:86:DA:BC
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/chz-ghXnicJHOF99blgR2G2G2rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
Signature Algorithm: sha256WithRSAEncryption
04:da:b5:4b:43:71:ec:4c:d4:ab:ba:2c:8a:f5:fa:72:88:ab:
fb:c2:80:b9:6e:d4:54:15:b6:25:7d:68:a3:a7:7b:2f:90:ee:
0f:1c:37:20:93:15:5e:ee:76:fe:34:48:2e:b2:c1:03:54:b0:
07:a3:6a:16:bc:7e:ed:9f:43:3f:7a:98:fb:0f:78:36:a6:6d:
e4:95:e3:f5:cf:ba:9f:8f:d1:07:ae:5c:f3:7d:c9:22:c5:db:
71:e4:04:0e:3e:98:58:65:d3:10:e2:a5:74:b6:db:b1:61:41:
73:a2:cc:aa:06:36:c4:41:1c:0e:3d:bb:16:d9:ef:57:eb:ed:
71:5f:5a:49:4b:96:b5:7d:af:0f:37:7e:bb:a0:a3:2d:00:34:
a7:cc:52:89:94:ff:05:8e:f3:dc:2e:73:46:ec:47:0f:dc:54:
f8:de:d1:f0:06:26:38:11:dd:7f:0b:1e:77:91:45:55:a9:e2:
d5:ad:b2:00:e0:0f:b0:0b:ec:b2:33:d5:81:94:f4:f8:dc:d4:
35:16:64:93:e5:9b:26:b1:bd:2d:0a:3d:1d:02:37:42:4d:df:
89:11:12:56:eb:7f:6f:7b:1c:d0:4e:0c:e8:a4:e5:e3:15:d8:
97:e1:c8:3a:d1:9e:6c:80:5c:84:f6:b8:7c:c2:0a:cd:c1:60:
2b:86:87:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:58:20 2025 by rpki-client