Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/wV9umEm47GUIRnHnVoDY5WzbsVU.roa
File: wV9umEm47GUIRnHnVoDY5WzbsVU.roa (raw, json)
Hash identifier: PpWajWHFJexj7DjwV0RD1qLjLbRc4jVQSVNbZE4K1PE=
Subject key identifier: C1:5F:6E:98:49:B8:EC:65:08:46:71:E7:56:80:D8:E5:6C:DB:B1:55
Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b
Certificate serial: 01972FE0157F308E9D2CA74A888409C7F930
Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/wV9umEm47GUIRnHnVoDY5WzbsVU.roa
Signing time: Mon 02 Jun 2025 09:01:44 +0000
ROA not before: Mon 02 Jun 2025 09:01:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15925
IP address blocks: 46.21.0.0/20 maxlen: 20
87.253.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:e0:15:7f:30:8e:9d:2c:a7:4a:88:84:09:c7:f9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b
Validity
Not Before: Jun 2 09:01:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c15f6e9849b8ec65084671e75680d8e56cdbb155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:b1:61:67:af:5a:a0:1a:fa:94:1f:50:6f:
6f:81:b7:08:f0:22:eb:8d:02:bb:f7:c4:9b:b0:70:
99:54:80:66:7f:ca:b7:c4:d6:b6:5d:8c:8f:9c:5d:
ed:b2:35:e1:45:5c:89:9a:a2:ad:82:09:aa:f4:bf:
52:e7:11:04:5c:12:2f:01:f9:6a:79:7a:fc:56:85:
67:59:40:b4:0b:f4:f9:52:e8:e2:e4:ba:54:13:bd:
76:60:38:05:77:c1:00:35:ab:41:d5:34:6b:0d:91:
63:5f:d5:48:7b:6a:e6:65:04:d0:07:5c:78:6f:a9:
f2:78:f7:bb:03:ff:86:5a:c4:ef:e6:65:10:bb:c5:
2a:99:3d:9a:58:c3:6a:55:da:7f:18:94:45:a2:a9:
74:4d:d9:ce:08:30:89:2c:a4:8e:ee:7e:ca:ed:32:
bc:c1:86:62:4d:13:49:a1:16:a5:3a:a4:84:3f:90:
03:18:06:15:75:0a:fe:03:bc:3a:6c:10:e8:ef:38:
d3:32:be:97:21:7b:e5:24:ed:00:de:68:58:a1:04:
97:ae:56:b6:de:cd:ce:07:3c:4d:f4:0f:8d:41:e5:
a2:28:b9:64:fd:44:1d:bc:24:81:27:9b:02:da:fb:
ea:79:c6:b0:ec:6f:eb:2f:0f:37:6a:05:f3:17:24:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5F:6E:98:49:B8:EC:65:08:46:71:E7:56:80:D8:E5:6C:DB:B1:55
X509v3 Authority Key Identifier:
keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/wV9umEm47GUIRnHnVoDY5WzbsVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.0.0/20
87.253.240.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:81:db:a9:94:44:ba:98:75:35:9d:a1:d8:0e:78:d2:23:fc:
2b:50:4e:cb:f8:26:53:72:ef:ec:ac:d8:0f:7e:35:59:64:91:
85:e0:6b:62:ab:83:40:ed:12:f7:e3:ce:28:63:5a:a9:e7:b4:
7c:44:f4:7a:b5:7a:4d:0a:f5:0e:98:d1:26:1e:ef:1c:3d:fe:
bb:ac:fd:23:fe:0d:62:5b:b0:96:7b:bf:41:c5:ed:f4:7c:18:
5d:9c:0c:50:7a:38:69:de:e9:b5:89:97:b2:38:33:82:fc:d1:
3b:4e:d8:99:93:46:82:57:bf:00:d3:f0:cf:87:e4:7d:91:4c:
1b:a0:87:20:e9:67:7a:97:5f:01:91:fd:da:c2:f5:dd:64:99:
0c:ac:e4:e9:62:d7:a4:1f:f5:f8:4e:f1:b0:6a:76:03:1f:f2:
80:be:53:f2:30:f6:45:c6:5e:20:a5:39:47:31:01:b9:74:2e:
f6:7a:1f:b8:29:9a:21:35:25:c2:59:e0:e1:bd:c1:cb:37:10:
62:b7:4e:37:ad:5f:e9:76:dc:41:52:c8:56:8a:88:bc:75:0a:
15:4c:0e:2b:14:39:d8:96:d4:62:c0:51:92:75:f0:d7:86:da:
13:90:06:ca:02:45:5a:5c:7d:3a:b6:76:23:87:4e:e5:db:4a:
f4:b8:3b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:16 2025 by rpki-client