Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/iEjwphsnsCkTvYcagBPKufnt2-g.roa
File: iEjwphsnsCkTvYcagBPKufnt2-g.roa (raw, json)
Hash identifier: exQmAtQ6POft9PaSsq76nVkrM+e0e7z6aqVk5GRVWO8=
Subject key identifier: 88:48:F0:A6:1B:27:B0:29:13:BD:87:1A:80:13:CA:B9:F9:ED:DB:E8
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019736FAD6028BE761DE6CECE350E2DDC753
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/iEjwphsnsCkTvYcagBPKufnt2-g.roa
Signing time: Tue 03 Jun 2025 18:08:17 +0000
ROA not before: Tue 03 Jun 2025 18:08:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 178.212.61.0/24 maxlen: 24
178.212.62.0/24 maxlen: 24
178.212.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:fa:d6:02:8b:e7:61:de:6c:ec:e3:50:e2:dd:c7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Jun 3 18:08:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8848f0a61b27b02913bd871a8013cab9f9eddbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:35:a9:a0:56:78:24:fb:dc:d8:87:37:81:67:
3f:ef:c3:5e:7e:23:ff:d3:27:05:17:29:9a:0c:3c:
4e:e3:df:7e:c9:b7:0c:50:b1:24:6f:c6:f3:96:72:
e4:07:ca:00:cd:b7:c6:04:17:f6:19:3e:3a:32:d5:
ac:ba:56:c2:89:82:69:bd:6e:e8:93:ad:9a:8d:80:
89:74:a3:4d:0f:4d:0b:40:ea:f6:3c:72:8a:a9:d3:
dc:fb:62:c1:9b:7b:79:ef:75:ab:63:dc:a5:35:80:
da:89:77:28:32:d6:cb:35:a9:61:c7:e5:41:84:05:
37:50:2c:e3:36:d8:26:b5:37:60:b1:54:be:eb:f0:
09:71:ed:d8:97:b8:7c:25:73:fb:4d:1a:91:5c:fd:
0e:b3:ed:05:6c:d0:b0:23:d2:a7:b5:01:d6:10:e4:
93:c4:a1:de:a3:92:44:28:20:7d:9a:d9:6f:04:c6:
52:41:2b:27:a8:95:bd:ae:08:15:b0:6a:48:11:79:
3a:39:b6:80:d5:37:4e:37:01:e5:10:f1:de:84:41:
b9:11:b6:b7:45:37:82:40:17:8e:ce:f8:12:20:69:
b7:b4:c8:52:5f:24:c4:a3:16:9c:82:8b:8b:7f:47:
29:b6:59:b0:f2:de:b0:e9:02:b1:f1:ba:2b:1d:f5:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:48:F0:A6:1B:27:B0:29:13:BD:87:1A:80:13:CA:B9:F9:ED:DB:E8
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/iEjwphsnsCkTvYcagBPKufnt2-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.61.0-178.212.63.255
Signature Algorithm: sha256WithRSAEncryption
89:25:78:bf:12:db:ec:4c:7b:b9:4d:ae:7a:1c:96:85:d1:85:
09:0c:94:15:ae:bd:67:3b:e9:63:67:6a:4a:20:89:80:c5:50:
b7:99:e2:61:4b:07:c6:8f:3c:e8:5c:b4:6e:81:27:29:a2:48:
20:de:f0:56:05:1b:fd:a7:15:90:60:a2:9b:e9:39:d5:d8:86:
a8:63:ca:f5:b2:01:08:5a:a4:5d:17:f7:01:b7:9c:05:c1:83:
74:6e:da:b6:19:67:df:2c:ca:fb:80:f3:7a:80:49:7d:cd:d0:
e5:ae:9f:d4:8c:36:8a:29:28:00:1a:c1:ab:78:b1:f4:af:30:
c7:78:0e:d1:3c:07:94:f2:41:3d:63:f0:43:89:5a:45:2c:af:
86:b2:9d:6c:24:70:c9:9f:fc:8d:b3:22:4f:8a:df:00:dd:6d:
c3:eb:f8:07:34:fd:99:b4:ab:68:87:3a:b8:79:6c:89:74:f7:
e9:5a:d5:7f:1c:65:c0:fa:fe:4b:6d:5c:e4:4a:c8:ac:23:2a:
33:0f:dd:7a:3d:17:64:ff:e3:f2:b1:68:39:8c:4b:56:3b:92:
f2:4e:24:c1:34:e7:78:21:52:e1:1a:bb:c6:ab:3a:8d:87:cf:
ba:6d:ea:5a:f1:f0:9b:76:a9:13:92:6c:95:79:2a:2c:cc:b7:
db:65:8f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:38:14 2025 by rpki-client