Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/20-9mytYHMHndruQgUnF8ikroR8.roa
File: 20-9mytYHMHndruQgUnF8ikroR8.roa (raw, json)
Hash identifier: 2lr50ig6vbMmIzHsYNAhFoZOypQ5RbpTRGyrByTCT20=
Subject key identifier: DB:4F:BD:9B:2B:58:1C:C1:E7:76:BB:90:81:49:C5:F2:29:2B:A1:1F
Certificate issuer: /CN=819b97b20ccb4f696518e47c437259a8913e72ae
Certificate serial: 0196CA465AD04B135C98D2ECD0D8460945A1
Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/20-9mytYHMHndruQgUnF8ikroR8.roa
Signing time: Tue 13 May 2025 15:32:10 +0000
ROA not before: Tue 13 May 2025 15:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29423
IP address blocks: 185.88.147.0/24 maxlen: 24
2a02:ba8:a147::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:46:5a:d0:4b:13:5c:98:d2:ec:d0:d8:46:09:45:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae
Validity
Not Before: May 13 15:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db4fbd9b2b581cc1e776bb908149c5f2292ba11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:11:b7:09:81:d3:d9:5c:e1:0a:ae:0b:91:56:
67:49:31:05:68:6d:0a:49:9d:50:45:49:b8:01:4b:
ba:d6:a8:e3:82:4d:55:da:53:28:16:14:cd:c1:3d:
36:87:53:e8:36:c9:75:6e:8a:fb:4b:f1:5c:80:d3:
7a:fe:8f:ae:ad:bd:db:05:1e:2c:9f:ea:d6:b5:f5:
78:ba:2e:e8:5d:d9:31:54:5e:81:bf:59:ad:62:31:
5d:56:7e:45:db:b3:2e:d0:da:5d:7e:88:9e:ae:30:
d4:86:80:f8:5a:44:02:0b:6d:ac:8a:d4:90:a6:29:
79:2b:e0:41:6c:82:a0:7f:f4:db:2e:b6:36:5d:e5:
bd:ac:9a:1d:4e:88:8b:48:64:d7:2f:f9:2c:72:9d:
6c:b5:de:b2:ed:e1:82:3d:83:29:9c:d5:71:a1:af:
7c:fe:fa:73:1f:92:3f:be:fb:a6:60:c5:50:a5:d6:
b7:f5:d4:ac:b8:2d:f8:34:61:f0:c5:62:f2:ce:57:
e8:f5:99:85:7f:13:57:3c:27:14:7d:61:44:10:f1:
3a:75:ab:72:a8:58:fe:ee:7b:d3:a5:d9:b6:c2:ea:
9e:41:d9:64:38:2d:d2:95:c8:0c:bd:3c:a6:65:b9:
df:cb:72:2b:47:e6:57:23:ac:48:ce:08:91:c8:13:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4F:BD:9B:2B:58:1C:C1:E7:76:BB:90:81:49:C5:F2:29:2B:A1:1F
X509v3 Authority Key Identifier:
keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/20-9mytYHMHndruQgUnF8ikroR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.147.0/24
IPv6:
2a02:ba8:a147::/48
Signature Algorithm: sha256WithRSAEncryption
89:39:40:8b:8f:c0:c8:56:14:6f:8c:30:41:97:30:33:78:4b:
1c:e9:21:3a:02:7f:9b:3d:96:ed:06:31:9c:39:f2:bf:ba:15:
86:a4:94:17:be:81:d7:e7:c7:4f:cd:cc:d2:e2:0a:09:cb:e6:
35:e1:4b:7b:88:f7:67:6d:73:e0:5a:42:0c:81:f0:ef:ad:82:
6e:ce:57:4f:88:4b:02:9a:57:ff:f8:1f:5b:42:46:df:0f:bd:
d5:12:ac:c4:3d:d9:4b:b0:dc:35:93:23:11:aa:de:68:d9:03:
13:30:7b:1d:f3:d9:e8:92:1a:76:2b:aa:e0:e3:82:29:00:20:
09:5a:65:02:b4:3d:28:c5:b3:b2:84:16:d7:d4:23:93:8e:e1:
77:5b:07:09:9c:89:0e:d3:61:4d:bc:c7:6d:c7:b1:14:1f:82:
75:d9:e5:01:5d:a2:7d:fb:10:c8:e2:ac:49:fa:de:f3:18:ae:
96:e5:44:cf:7a:9d:73:ef:41:b5:05:69:2f:c7:34:4f:3c:29:
c1:dc:41:f2:b4:7b:b9:02:64:e0:d0:b5:34:d1:15:84:bf:1b:
e2:ca:ea:dc:d9:78:e7:70:b8:10:47:fe:a4:6a:17:ee:27:90:
9b:0a:50:15:10:92:ac:8c:34:5b:70:fe:b0:3b:4c:b3:5e:b6:
d1:a6:10:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:48:11 2025 by rpki-client