Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c3KwMfBFd6TNXLqnPhIuGPrsOH8.roa
File: c3KwMfBFd6TNXLqnPhIuGPrsOH8.roa (raw, json)
Hash identifier: 7flid9hqpcidHGZFlUXohhej1GlNP7t6cLSWqgSlM/w=
Subject key identifier: 73:72:B0:31:F0:45:77:A4:CD:5C:BA:A7:3E:12:2E:18:FA:EC:38:7F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01978AABCB94F62AD567DFD3D2CF1645661A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c3KwMfBFd6TNXLqnPhIuGPrsOH8.roa
Signing time: Fri 20 Jun 2025 00:10:03 +0000
ROA not before: Fri 20 Jun 2025 00:10:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 212.87.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:ab:cb:94:f6:2a:d5:67:df:d3:d2:cf:16:45:66:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 20 00:10:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7372b031f04577a4cd5cbaa73e122e18faec387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:6c:25:de:ba:c2:03:98:30:93:ad:f5:57:
bc:e5:76:29:cc:42:b1:f4:89:38:2c:65:76:cf:14:
4e:68:ce:e6:4d:8b:fd:c0:39:63:50:69:c5:b3:30:
75:d6:9c:0e:9e:35:71:4f:b0:e1:61:80:2b:d7:ed:
52:cb:61:de:53:06:a5:5f:ac:6f:d7:b3:9a:9e:3a:
c1:0a:5d:4a:62:d4:33:55:54:7e:33:c8:77:a6:10:
93:fc:00:37:43:01:ac:8b:b5:fc:32:0d:25:c2:f9:
12:d6:f0:fc:30:5e:1d:65:f8:00:62:6d:38:0c:88:
7b:39:7c:c0:ce:db:1d:16:88:d3:11:ab:ee:c8:07:
c0:05:50:83:98:37:b1:39:26:37:65:ab:ed:f3:01:
c1:54:e7:7b:72:bc:31:cf:10:77:03:e9:99:d4:28:
3a:19:8e:3f:52:d6:86:f4:3f:a4:df:6b:43:09:84:
b2:58:a6:91:5f:31:cf:30:8d:a4:34:2d:d9:ed:5f:
55:18:f4:4c:c5:94:d6:fc:b6:11:92:63:9f:e9:b4:
0e:9c:08:d7:8e:88:03:cd:81:5c:56:ac:ae:aa:d3:
d3:3e:96:ca:c0:37:16:81:9e:66:8f:b9:66:5b:63:
85:b8:bf:5f:a5:82:a3:de:cb:d9:43:a0:83:ce:75:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:72:B0:31:F0:45:77:A4:CD:5C:BA:A7:3E:12:2E:18:FA:EC:38:7F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c3KwMfBFd6TNXLqnPhIuGPrsOH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:de:41:7a:47:aa:e4:1a:78:0d:12:65:29:9b:23:f5:0a:83:
69:96:40:2d:47:8a:17:54:50:22:f5:35:03:ac:61:34:c8:9d:
45:b8:4a:c4:bf:65:99:f1:b2:4b:6d:1b:cd:97:aa:a4:8a:8d:
b6:4e:57:9b:4d:c2:c3:de:63:20:36:94:93:1c:8f:d3:d0:28:
72:a9:cd:33:04:4b:fa:39:9b:45:67:2b:bf:db:77:52:bc:47:
aa:84:cc:28:2d:4d:50:10:92:bc:e4:2f:4f:83:53:e9:0d:ec:
c6:1c:0d:8b:9a:ae:0e:34:48:42:75:bc:5c:c0:e0:3f:15:6c:
d4:ad:cb:a8:74:f4:fe:83:f9:03:93:2f:62:5a:33:94:c0:35:
cd:d5:71:42:ad:95:51:9f:e8:ad:79:da:45:8d:75:9e:6e:c6:
53:cf:b0:79:6e:68:d5:f9:31:24:9e:03:25:fb:9b:4a:c3:49:
12:84:48:57:cc:1e:54:31:19:ed:c5:64:67:55:e2:ef:c6:41:
f8:0d:8b:6e:35:7b:47:0b:cc:5b:4d:45:2d:fa:6e:99:b5:c7:
2c:c8:77:d4:7b:47:d2:b0:04:47:1e:06:03:c6:7d:42:29:ae:
0e:05:c0:89:46:12:68:1e:71:92:45:71:07:0a:fd:77:99:ea:
96:ff:5c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:16:04 2025 by rpki-client