Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/eQ-gR06b4zJqKEnaNnRmGDj0gZU.roa
File: eQ-gR06b4zJqKEnaNnRmGDj0gZU.roa (raw, json)
Hash identifier: JTu+VCZve4g7YJ7lEl3E5gK1lzKHcSO10n13jSXvJvE=
Subject key identifier: 79:0F:A0:47:4E:9B:E3:32:6A:28:49:DA:36:74:66:18:38:F4:81:95
Certificate issuer: /CN=075e993e76f9d7fa404d69a6cb60d4bf98f2ba1e
Certificate serial: 019744949674D0F5D1B48BB894CCFFA96C01
Authority key identifier: 07:5E:99:3E:76:F9:D7:FA:40:4D:69:A6:CB:60:D4:BF:98:F2:BA:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/eQ-gR06b4zJqKEnaNnRmGDj0gZU.roa
Signing time: Fri 06 Jun 2025 09:31:17 +0000
ROA not before: Fri 06 Jun 2025 09:31:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60633
IP address blocks: 194.11.156.0/22 maxlen: 23
2001:67c:5d8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:94:96:74:d0:f5:d1:b4:8b:b8:94:cc:ff:a9:6c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075e993e76f9d7fa404d69a6cb60d4bf98f2ba1e
Validity
Not Before: Jun 6 09:31:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=790fa0474e9be3326a2849da3674661838f48195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:98:88:a0:3a:f5:e1:80:1a:07:17:7c:06:
c2:c4:c9:35:56:b3:04:2c:c7:96:b8:35:08:24:e2:
e2:63:c9:f1:4b:95:42:09:14:8e:77:c6:2b:dc:06:
c2:a2:e4:a8:16:cc:84:c9:07:49:80:38:c0:e6:54:
1c:41:8a:57:ae:51:1f:a0:c0:28:f4:b0:40:ae:94:
87:fc:55:47:1f:e2:85:9b:50:c7:05:85:6c:2a:b4:
a6:7f:77:7d:07:b4:cc:d9:8d:86:15:e8:78:9e:f6:
f1:dc:16:69:90:3b:ad:f0:f1:6a:b5:3d:08:ab:d9:
dc:07:29:fa:47:ce:d2:6b:c5:89:a7:cc:f9:3b:a2:
ae:db:d0:cd:3c:18:89:4c:30:33:35:f4:21:70:5d:
65:fb:56:93:d7:fe:07:b5:37:1b:cd:fc:62:2b:7b:
89:1b:66:d4:bd:76:17:a6:0d:2d:2d:de:e4:81:0b:
27:20:c6:f8:08:02:d4:b2:e5:33:55:26:7b:e8:6d:
f6:fb:d9:f9:29:0f:53:9d:f7:c4:45:9c:cc:22:e6:
6d:9b:a4:90:d5:2b:bd:b2:1f:42:56:63:0b:8a:5c:
0e:20:bc:1b:c5:b2:8b:3c:f8:cd:b9:b4:4d:cc:b4:
c2:9d:44:b6:d2:05:b6:e5:1d:56:7b:7c:ea:a1:a9:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0F:A0:47:4E:9B:E3:32:6A:28:49:DA:36:74:66:18:38:F4:81:95
X509v3 Authority Key Identifier:
keyid:07:5E:99:3E:76:F9:D7:FA:40:4D:69:A6:CB:60:D4:BF:98:F2:BA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/eQ-gR06b4zJqKEnaNnRmGDj0gZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.156.0/22
IPv6:
2001:67c:5d8::/48
Signature Algorithm: sha256WithRSAEncryption
53:2b:36:91:7c:eb:0d:7e:12:45:24:6e:af:94:1f:ce:31:9a:
e5:28:73:b7:57:52:98:95:fb:5c:59:8c:dd:a2:ff:d5:66:90:
1c:c2:a6:66:db:7a:29:13:e1:63:e8:7d:e3:90:5b:73:74:f0:
8b:a0:af:67:b1:8b:77:05:77:7b:3e:8a:94:33:b9:bc:f1:77:
ee:12:8b:44:bf:4c:64:b5:ca:8d:35:fa:85:cf:6b:ed:1e:e1:
c6:39:a9:29:05:9e:59:bb:2a:02:9f:a0:49:d6:15:1f:41:3d:
4d:45:64:24:a6:6b:51:a8:ba:cf:d7:6f:fc:13:3c:d6:c5:5e:
32:71:0a:3e:3f:f7:bc:36:6a:ea:91:8e:bc:d8:de:10:ec:9c:
55:b4:a3:77:88:1b:33:af:c5:56:f4:e5:53:ed:f9:38:ca:05:
1f:ae:59:7c:19:80:11:91:02:5d:98:ad:15:a0:04:27:1c:dd:
6a:8a:9a:d2:59:3d:36:7b:3f:bd:90:bf:b0:93:50:b7:6f:bd:
26:3a:80:b0:c9:3e:ff:74:2e:9e:3d:d1:7d:2a:e0:97:9a:5b:
39:c6:71:2e:24:90:aa:c7:db:85:ab:03:37:45:b4:0a:d1:b0:
72:81:d2:b5:eb:7f:89:8d:b3:64:56:7e:03:c0:18:43:4a:20:
51:cd:5b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:23:28 2025 by rpki-client