Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/D98Ck1_qKOXalzx0pMS_FarSGM8.roa
File: D98Ck1_qKOXalzx0pMS_FarSGM8.roa (raw, json)
Hash identifier: u49BF5lQyjsLl1bn3ULD3SUQ9N/pcixaCTatnIvy4v0=
Subject key identifier: 0F:DF:02:93:5F:EA:28:E5:DA:97:3C:74:A4:C4:BF:15:AA:D2:18:CF
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 0197366563E359109D425203D4BB35E0C8C2
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/D98Ck1_qKOXalzx0pMS_FarSGM8.roa
Signing time: Tue 03 Jun 2025 15:25:03 +0000
ROA not before: Tue 03 Jun 2025 15:25:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198386
IP address blocks: 147.78.62.0/24 maxlen: 24
147.78.63.0/24 maxlen: 24
185.204.76.0/22 maxlen: 22
192.40.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:65:63:e3:59:10:9d:42:52:03:d4:bb:35:e0:c8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Jun 3 15:25:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fdf02935fea28e5da973c74a4c4bf15aad218cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:31:e2:22:91:a3:34:b0:47:16:91:a3:46:
5f:75:1e:2d:a2:91:36:b1:68:d9:10:fb:83:d1:d2:
af:ec:19:d2:ab:64:9f:72:e3:a5:c3:4b:ef:a5:33:
08:ac:21:0f:24:8a:b1:fa:58:ff:44:d3:7e:41:b8:
a0:27:aa:ea:6a:10:63:72:ab:62:06:28:c4:54:37:
e4:c1:57:c2:80:40:42:c2:79:42:45:11:2d:05:97:
47:48:dc:ad:c8:c7:0a:bb:cb:24:d5:8e:d3:06:46:
0e:30:19:16:4e:06:9c:46:07:d1:f9:1c:af:6c:48:
d6:09:ce:43:d8:e6:e7:99:eb:e5:36:12:ee:48:9d:
a0:8c:5f:a1:b5:8a:73:58:8a:f0:91:10:53:b1:fd:
e4:c3:30:ce:c4:f7:32:a5:1e:7c:fd:3c:8c:82:f5:
ee:b5:3c:ad:09:92:ec:9f:83:08:7f:89:16:b0:4b:
7e:03:61:5e:be:63:a2:2d:bb:6c:de:47:a6:28:38:
eb:68:c3:40:68:cd:2a:3c:ce:47:c4:71:e3:cc:ab:
80:c3:79:0d:0b:ba:d0:b7:cc:4a:05:25:15:e2:bb:
fb:e4:ca:d4:81:5b:e8:ef:a4:12:d8:5f:7b:2c:6f:
95:83:d7:a8:c8:3e:a2:63:c5:45:dd:e5:a9:61:09:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DF:02:93:5F:EA:28:E5:DA:97:3C:74:A4:C4:BF:15:AA:D2:18:CF
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/D98Ck1_qKOXalzx0pMS_FarSGM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.62.0/23
185.204.76.0/22
192.40.80.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:12:67:06:48:bf:4a:38:fb:bd:98:72:f3:dc:1a:fb:03:e3:
8b:33:4a:47:c0:06:f7:51:ed:57:82:a4:9a:3f:7f:aa:b6:94:
83:e9:e8:12:92:e6:ab:13:a4:ff:c3:22:5e:74:05:e5:97:d7:
22:f6:a7:48:c1:74:bc:a1:31:51:80:c6:4b:86:db:5d:e8:cc:
d7:23:75:ba:dc:ef:7b:34:4d:6d:47:b5:a7:30:5d:52:c4:26:
b2:f4:bb:d3:88:a8:30:df:4a:79:fa:fe:89:67:a0:49:90:eb:
79:0e:40:ee:72:fe:2f:19:39:22:3c:4c:77:33:94:14:a7:0e:
b8:06:fd:0c:70:eb:f7:6d:34:2d:e0:02:ca:e3:27:9a:26:f2:
d9:bc:5a:c3:31:92:b7:3d:3f:18:1c:bf:93:4d:e1:11:f4:76:
62:df:ea:74:34:b6:37:d9:19:83:4f:bf:5b:1f:2b:bd:45:8b:
97:f3:6a:d5:36:a1:61:bf:30:44:c6:99:d1:da:6d:ff:ea:1f:
d2:0f:fb:d2:4f:24:70:f8:56:bb:d4:87:49:df:02:f4:c8:56:
7e:61:c5:55:bd:df:87:af:b2:04:41:46:70:08:cc:14:33:4a:
c6:3c:96:d7:ff:ce:ad:f3:99:de:ee:4b:e1:03:78:7c:fe:8a:
d0:17:d5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:35:58 2025 by rpki-client