Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/GEvk-OYZIbLA1C0nUWdR9FADeU0.roa
File: GEvk-OYZIbLA1C0nUWdR9FADeU0.roa (raw, json)
Hash identifier: gvjvLQ8vouXFqczTAQsahxoWOc7htNN/RNSCq7vtiz0=
Subject key identifier: 18:4B:E4:F8:E6:19:21:B2:C0:D4:2D:27:51:67:51:F4:50:03:79:4D
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 0197E97E2844F7BD6CCB399F9D05E7A98509
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/GEvk-OYZIbLA1C0nUWdR9FADeU0.roa
Signing time: Tue 08 Jul 2025 10:04:08 +0000
ROA not before: Tue 08 Jul 2025 10:04:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44066
IP address blocks: 2a03:aae0:fc::/48 maxlen: 48
2a03:aae0:fc00::/48 maxlen: 48
2a03:aae0:fc01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:7e:28:44:f7:bd:6c:cb:39:9f:9d:05:e7:a9:85:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Jul 8 10:04:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=184be4f8e61921b2c0d42d27516751f45003794d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:57:bc:47:31:7c:ce:dc:db:f5:1e:6b:1a:
25:ee:47:75:7d:c3:b2:09:08:0b:76:64:9b:f4:f3:
b3:bf:71:e4:7e:0f:f9:a1:ae:eb:49:f0:35:a9:18:
e1:71:b7:e4:f0:69:aa:28:33:28:e1:df:3b:53:08:
9e:6e:47:be:02:cf:6d:e3:29:74:05:f8:13:b4:fe:
33:87:e7:e0:3c:c7:6d:e9:70:26:d4:59:bc:7b:2d:
f2:be:1b:a6:a4:30:7a:5a:99:e7:48:29:17:34:b4:
39:e0:d7:b6:ac:14:2a:3d:d1:61:71:2d:6e:b3:c5:
4c:b7:86:a4:5c:51:52:21:4c:43:11:72:ca:d0:3a:
09:e6:36:26:f1:c9:9d:07:16:08:fa:2b:63:1c:59:
f7:4e:6a:41:bc:f6:ff:42:44:71:63:e7:a5:5b:d4:
fd:4e:41:3a:c0:b7:ab:51:67:3a:a2:f9:be:8b:a4:
7e:c7:a3:22:7b:cf:48:06:4c:a4:fe:83:23:fd:d5:
d3:c3:e4:0a:5b:df:fe:cb:d2:c9:9d:9d:0f:da:97:
e1:af:d4:12:6d:b5:ed:f0:75:1b:ff:87:dd:7c:05:
a6:64:62:d5:b4:7f:01:5b:ca:74:3f:2a:6f:46:af:
75:31:6c:90:2e:bf:a6:df:cf:cd:68:9c:91:88:42:
ca:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4B:E4:F8:E6:19:21:B2:C0:D4:2D:27:51:67:51:F4:50:03:79:4D
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/GEvk-OYZIbLA1C0nUWdR9FADeU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:aae0:fc::/48
2a03:aae0:fc00::/47
Signature Algorithm: sha256WithRSAEncryption
09:78:aa:8e:5b:22:32:92:58:08:71:58:53:83:6c:c7:6f:c2:
d1:f2:89:14:7b:f0:59:0d:d1:ba:43:e9:c6:b3:df:a7:c2:56:
b9:fd:f0:69:77:5c:69:d1:7d:96:04:83:dc:37:78:72:97:7a:
b4:65:f5:fb:86:c7:9f:16:63:f3:99:51:8b:2f:18:7d:dd:70:
f4:77:3c:0a:e8:92:f2:21:50:b3:b9:e8:73:ff:58:58:e7:5f:
4c:6b:69:c7:0e:22:2d:59:f5:9e:82:5f:f0:52:9f:37:3f:69:
b6:23:bd:58:48:6a:cd:73:be:96:a4:1a:29:56:1c:79:ea:2b:
51:32:2a:02:e4:af:f3:46:51:80:ed:07:1b:45:0d:52:5f:54:
55:04:b5:0c:f8:69:fc:94:1f:ac:88:3e:1e:cd:b5:80:5c:7d:
a7:57:50:11:f9:db:b4:f8:84:25:59:9d:33:47:89:d0:b3:8f:
3d:f7:7f:1f:60:c5:52:bf:86:70:3b:af:08:9a:64:7b:3a:bc:
41:35:3e:46:f6:88:86:06:89:af:eb:74:00:10:d5:fb:f5:7c:
8b:d1:35:8a:ee:3e:2f:70:77:d9:4d:f6:a3:5b:37:38:5b:d7:
a7:02:00:f5:76:20:e4:4f:05:aa:c8:c5:9a:c5:28:29:e6:27:
fa:cd:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:20:32 2025 by rpki-client