Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/y9dGCqfvXd6vKRjYx3GJikg6pSw.roa
File: y9dGCqfvXd6vKRjYx3GJikg6pSw.roa (raw, json)
Hash identifier: hbcctqXDaj3+MVP6jmLsrRanKfXgW4xbeMzekZYeX1E=
Subject key identifier: CB:D7:46:0A:A7:EF:5D:DE:AF:29:18:D8:C7:71:89:8A:48:3A:A5:2C
Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Certificate serial: 01B205
Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/y9dGCqfvXd6vKRjYx3GJikg6pSw.roa
Signing time: Mon 01 Sep 2025 13:03:58 +0000
ROA not before: Mon 01 Sep 2025 13:03:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7619
IP address blocks: 147.28.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 22:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111109 (0x1b205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd
Validity
Not Before: Sep 1 13:03:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=CBD7460AA7EF5DDEAF2918D8C771898A483AA52C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:5d:c1:9a:38:f6:cc:de:be:5b:a4:4d:c6:
5e:5f:01:bb:d3:8b:0b:c2:10:56:2e:3c:39:d4:c4:
f6:d2:36:48:8a:c8:82:8e:2a:98:a4:bf:d6:50:37:
6b:8d:ed:6a:f7:5a:0c:b6:cd:35:0a:75:3b:c6:c1:
05:5e:d8:cc:bd:09:2e:96:e8:46:03:82:40:fd:93:
63:67:37:10:68:c4:03:db:da:b8:08:21:8c:7c:33:
45:a1:33:9a:f2:da:13:92:d0:6d:00:07:a5:e3:95:
da:28:02:96:98:f0:7d:ed:03:ca:67:5f:cd:18:4c:
ef:02:79:75:48:14:bc:9a:d6:45:eb:1b:e5:8b:5a:
78:c0:a5:14:5c:63:e4:83:63:aa:ef:81:24:88:cf:
75:97:a6:43:37:28:45:f3:cc:a2:9f:be:5b:2b:e4:
e9:97:c8:b4:fe:88:dc:f8:45:83:72:1d:97:4e:51:
62:cf:80:e5:82:09:da:de:9c:4c:47:a1:0b:77:c0:
c3:8b:47:1f:f0:fb:4e:68:5d:e1:32:99:fc:8d:54:
c2:8f:f1:ac:52:60:0e:cf:b6:d0:e9:12:2f:79:b8:
4d:d7:83:de:0c:f7:25:af:6d:30:ca:b6:59:c1:5b:
40:73:a9:44:d4:04:b1:4a:28:a0:3b:68:04:5c:5d:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D7:46:0A:A7:EF:5D:DE:AF:29:18:D8:C7:71:89:8A:48:3A:A5:2C
X509v3 Authority Key Identifier:
keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/y9dGCqfvXd6vKRjYx3GJikg6pSw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.8.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:00:73:0b:07:2d:1c:dc:76:27:43:5a:31:f7:4d:b0:6f:91:
71:0c:9b:ed:2a:18:1d:8e:3e:b2:cb:2c:a2:1a:c2:d3:70:8b:
d5:6e:7d:4b:4d:7b:48:3a:9b:05:03:67:01:99:b5:66:20:98:
52:4c:74:c2:b4:53:9b:76:50:18:14:49:6e:e3:96:9c:11:5c:
b7:d7:45:43:20:dd:24:b2:52:8b:a5:8f:75:44:b0:10:58:eb:
fe:61:ad:6f:32:21:7a:bc:63:d1:8d:68:9f:19:19:50:bb:50:
9f:39:c3:09:06:fd:c3:d9:c0:00:19:84:2d:ea:3d:d0:c8:ef:
d3:77:68:37:96:9c:6a:cb:51:5c:3e:45:1d:34:e0:2a:d2:d3:
d3:eb:65:d1:79:45:8e:22:b3:c4:c3:00:73:7e:88:90:09:3a:
12:cc:45:f9:1f:5c:7e:dc:39:73:dd:4e:54:f4:10:5b:50:76:
d5:9a:2f:26:c5:94:ee:d1:e6:24:80:c6:b3:0e:f3:65:f2:1a:
6b:a0:d2:c8:bb:93:00:9c:13:d3:4e:62:79:f7:d7:f3:19:fb:
ee:87:b1:36:55:c7:fb:95:d4:bb:16:16:80:8f:ae:de:b9:f8:
19:30:0b:dc:6a:29:b1:2d:2d:a5:1e:cd:b5:eb:ef:e7:c9:fa:
c1:83:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 17:59:36 2025 by rpki-client