Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/fykdvBDNLvaFDLOeKcvquSaaNlM.roa
File: fykdvBDNLvaFDLOeKcvquSaaNlM.roa (raw, json)
Hash identifier: 36Psre3MLHPEb3ezhbbE40C2QS1KDUyERdtNq15GTwU=
Subject key identifier: 7F:29:1D:BC:10:CD:2E:F6:85:0C:B3:9E:29:CB:EA:B9:26:9A:36:53
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 0198D6
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/fykdvBDNLvaFDLOeKcvquSaaNlM.roa
Signing time: Sun 20 Apr 2025 17:37:29 +0000
ROA not before: Sun 20 Apr 2025 17:37:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3130
IP address blocks: 147.28.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 09:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104662 (0x198d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Apr 20 17:37:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7F291DBC10CD2EF6850CB39E29CBEAB9269A3653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:98:b2:75:25:3a:9c:50:13:28:eb:92:6a:
12:a0:86:99:56:cc:e2:93:af:99:95:f0:c7:e1:13:
4d:30:3f:46:90:43:f1:59:a0:67:d6:6d:69:c4:a7:
2c:9d:52:bc:a4:07:b6:e2:88:fc:42:fc:62:65:af:
c5:f6:25:02:99:08:a5:ad:9a:b0:a0:ee:27:eb:72:
04:77:16:9f:18:de:c3:36:fa:e4:48:0d:cf:d9:da:
2e:bb:ab:e7:f1:4f:e0:48:8b:3e:b6:94:41:ad:e2:
0e:37:35:4a:69:7a:89:25:4d:5b:db:4c:20:94:3c:
96:0c:3f:0e:37:69:bf:f9:37:c2:cf:ae:db:c2:b6:
a0:d7:c7:24:df:02:a6:a2:a5:03:60:26:4a:22:e8:
7e:cc:5d:0e:92:0a:bc:4b:57:0b:6d:a7:a4:25:cb:
d2:91:82:4f:25:39:d7:9c:91:c2:49:f2:b2:ec:88:
ea:e4:3f:c9:c6:e2:ae:43:37:76:9c:71:9b:80:c3:
b7:e8:88:f9:bc:9e:88:8e:54:31:8d:c5:71:ac:7a:
b2:1b:16:fd:d6:52:ec:52:01:f5:bf:bb:98:6a:98:
4d:5c:f8:87:cc:b2:0e:c7:12:b1:ba:a5:17:42:00:
53:4b:ba:51:cc:4d:56:18:89:63:42:fa:34:3e:30:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:29:1D:BC:10:CD:2E:F6:85:0C:B3:9E:29:CB:EA:B9:26:9A:36:53
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/fykdvBDNLvaFDLOeKcvquSaaNlM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.7.0/24
Signature Algorithm: sha256WithRSAEncryption
93:da:51:0e:b5:ad:5e:38:ef:74:2b:a5:42:3e:94:6a:4b:49:
f1:56:15:9c:7d:65:94:71:eb:db:d8:4f:e1:78:2d:ed:16:b2:
60:c2:71:b4:9d:8d:0a:36:6c:e8:78:77:c6:27:fd:bb:d1:1b:
30:ee:5d:0d:e3:72:bf:60:ac:33:d8:e4:be:1c:ff:35:79:21:
9f:67:74:b3:24:3f:70:24:d2:6b:6e:65:1a:7c:30:8f:4d:12:
34:21:d4:bd:0b:76:8d:79:aa:8b:2d:69:77:9f:33:69:fb:8e:
0c:ab:fd:5d:86:20:54:ba:75:75:a9:2c:3c:4a:a7:bd:5e:a6:
0e:1e:34:99:a5:f6:52:1f:9a:b4:3c:84:46:0d:8a:9f:16:73:
88:35:b9:7c:30:1a:43:4c:2b:ed:c2:6f:14:d4:49:94:39:e4:
31:5e:87:cb:03:5d:da:2d:e2:56:ca:24:f7:19:d0:6b:d8:f6:
3c:2a:66:98:5e:d6:18:ae:60:29:8a:f2:f7:36:9f:07:a1:89:
27:1d:e7:c0:e6:87:67:a8:d8:0d:56:9d:bd:67:60:82:90:4e:
c2:25:d3:e8:c0:f0:d6:5a:8e:6f:4c:02:e5:dc:c8:ab:ee:eb:
f2:b1:bd:f7:75:92:ca:95:58:b5:ad:e5:70:dd:54:3a:d0:cc:
63:3c:6b:df
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIDAZjWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZk
NmZiZmE5NzUzZGI4ZDg0NjQzM2RiNTM1MWQ5YTllYzA3Yzk2YmQwHhcNMjUwNDIw
MTczNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3RjI5MURCQzEwQ0Qy
RUY2ODUwQ0IzOUUyOUNCRUFCOTI2OUEzNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmcOYsnUlOpxQEyjrkmoSoIaZVszik6+ZlfDH4RNNMD9GkEPx
WaBn1m1pxKcsnVK8pAe24oj8QvxiZa/F9iUCmQilrZqwoO4n63IEdxafGN7DNvrk
SA3P2douu6vn8U/gSIs+tpRBreIONzVKaXqJJU1b20wglDyWDD8ON2m/+TfCz67b
wrag18ck3wKmoqUDYCZKIuh+zF0Okgq8S1cLbaekJcvSkYJPJTnXnJHCSfKy7Ijq
5D/JxuKuQzd2nHGbgMO36Ij5vJ6IjlQxjcVxrHqyGxb91lLsUgH1v7uYaphNXPiH
zLIOxxKxuqUXQgBTS7pRzE1WGIljQvo0PjAUBwIDAQABo4IB1DCCAdAwHQYDVR0O
BBYEFH8pHbwQzS72hQyzninL6rkmmjZTMB8GA1UdIwQYMBaAFG1vv6l1PbjYRkM9
tTUdmp7AfJa9MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUAYDVR0fBEkwRzBF
oEOgQYY/cnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9SR25ldC1PVS9iVy1fcVhVOXVO
aEdRejIxTlIyYW5zQjhscjAuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcw
AoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iVy1f
cVhVOXVOaEdRejIxTlIyYW5zQjhscjAuY2VyMA4GA1UdDwEB/wQEAwIHgDCBigYI
KwYBBQUHAQsEfjB8MEsGCCsGAQUFBzALhj9yc3luYzovL2NhLnJnLm5ldC9ycGtp
L1JHbmV0LU9VL2Z5a2R2QkROTHZhRkRMT2VLY3ZxdVNhYU5sTS5yb2EwLQYIKwYB
BQUHMA2GIWh0dHBzOi8vY2EucmcubmV0L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAJMcBzANBgkqhkiG9w0BAQsFAAOCAQEAk9pR
DrWtXjjvdCulQj6UaktJ8VYVnH1llHHr29hP4Xgt7RayYMJxtJ2NCjZs6Hh3xif9
u9EbMO5dDeNyv2CsM9jkvhz/NXkhn2d0syQ/cCTSa25lGnwwj00SNCHUvQt2jXmq
iy1pd58zafuODKv9XYYgVLp1daksPEqnvV6mDh40maX2Uh+atDyERg2KnxZziDW5
fDAaQ0wr7cJvFNRJlDnkMV6HywNd2i3iVsok9xnQa9j2PCpmmF7WGK5gKYry9zaf
B6GJJx3nwOaHZ6jYDVadvWdggpBOwiXT6MDw1lqOb0wC5dzIq+7r8rG993WSypVY
ta3lcN1UOtDMYzxr3w==
-----END CERTIFICATE-----
Generated at Fri Jun 6 05:52:16 2025 by rpki-client