Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/47Z2HtdwofFjyVEFI9qNr2a-tVU.roa
File: 47Z2HtdwofFjyVEFI9qNr2a-tVU.roa (raw, json)
Hash identifier: DNKD/o+eynRMlQCW6kVsQCccIBeiYPf64PT1npjPvG4=
Subject key identifier: E3:B6:76:1E:D7:70:A1:F1:63:C9:51:05:23:DA:8D:AF:66:BE:B5:55
Certificate issuer: /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial: 0196FD97EE8961E276BC97B96C69FCDBB796
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/47Z2HtdwofFjyVEFI9qNr2a-tVU.roa
Signing time: Fri 23 May 2025 14:41:54 +0000
ROA not before: Fri 23 May 2025 14:41:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34740
IP address blocks: 193.148.0.0/24 maxlen: 24
194.60.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:97:ee:89:61:e2:76:bc:97:b9:6c:69:fc:db:b7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Validity
Not Before: May 23 14:41:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3b6761ed770a1f163c9510523da8daf66beb555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:46:bd:1a:ee:10:87:87:b2:47:4b:8c:5c:46:
bf:22:89:d1:ff:5e:8d:09:8a:24:b9:c4:e8:71:e8:
aa:0b:ba:63:3a:22:9f:8b:e8:44:5d:9d:9a:4e:81:
a8:9f:82:13:19:c8:2d:11:72:53:f4:63:36:01:db:
91:41:ba:da:2a:29:39:46:1f:41:7a:14:e8:05:e4:
f1:48:8e:fb:fe:59:0f:63:29:1a:0b:42:76:87:98:
82:9a:c4:25:9d:65:d5:bd:55:3d:25:2e:dd:9c:3e:
21:4d:79:67:f6:6f:81:ea:da:a5:72:f0:05:25:ad:
c3:9d:d4:92:31:ce:11:58:76:91:c4:74:a4:20:20:
e9:e3:12:41:d4:1b:51:aa:9e:92:31:1a:ba:c6:61:
29:af:5a:db:d5:0f:29:53:09:17:ba:0e:f0:c6:7a:
1d:b4:9b:2f:f9:73:7e:23:19:9c:ae:54:99:3b:34:
ea:38:7b:41:fa:cf:f7:f0:5c:31:77:db:10:fc:4b:
ce:a5:e5:c0:31:85:61:48:e0:37:2a:f0:e8:73:b2:
67:fe:86:01:54:74:86:13:8c:5c:f3:12:ca:b8:c5:
de:13:00:fd:10:64:af:f9:e6:d6:97:69:bf:48:c1:
5c:b0:6e:3d:57:58:e9:1f:dc:68:03:88:d8:0d:36:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B6:76:1E:D7:70:A1:F1:63:C9:51:05:23:DA:8D:AF:66:BE:B5:55
X509v3 Authority Key Identifier:
keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/47Z2HtdwofFjyVEFI9qNr2a-tVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.0.0/24
194.60.72.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d0:e6:fd:c6:e2:ae:67:13:08:e3:d4:a0:ba:da:60:6c:71:
66:e3:ca:84:e7:2e:34:11:e6:b0:7c:61:1d:2e:e1:0c:3c:8b:
63:72:30:d4:45:fb:04:be:f6:d9:a5:9d:d6:b3:3b:c2:3b:87:
1b:3f:1f:61:d5:fb:ed:b8:b3:37:1f:45:a5:3f:58:30:b1:b2:
ed:20:9c:01:aa:62:08:88:72:46:52:8e:b7:a9:f4:18:6d:60:
de:0b:d1:5b:5a:44:11:02:17:26:0e:22:3d:a9:e4:49:dd:82:
b5:82:4a:62:9e:f0:26:db:4d:58:5e:1a:95:b2:54:57:20:24:
87:42:9b:41:3d:88:49:b7:f8:e5:ec:1c:af:79:6f:67:4a:15:
00:01:70:4a:63:d3:be:87:73:13:9c:64:82:8a:fd:09:5f:55:
22:e4:fe:af:b5:cc:d7:e1:ff:e1:42:bb:6e:be:33:28:32:8b:
94:2c:1f:45:0e:5c:f1:a0:bf:5c:b6:6f:cd:7c:73:24:20:03:
40:0f:ff:c3:ba:17:da:c7:2b:30:f8:6d:83:9c:e9:25:12:59:
cc:f4:14:47:ff:da:0f:2e:86:91:7d:c9:c0:c1:91:be:b6:e2:
21:a5:a6:98:8f:7b:0f:c7:7a:4a:2c:32:5e:2b:5f:17:45:12:
ba:85:05:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:44:52 2025 by rpki-client