Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/Z2dM55D00aW3RfIUxB7Cn0s3y18.roa
File: Z2dM55D00aW3RfIUxB7Cn0s3y18.roa (raw, json)
Hash identifier: r2sGLOuiB3Y67DgBocYW+k6Ki76Sz1ifvXri1YzDX/Q=
Subject key identifier: 67:67:4C:E7:90:F4:D1:A5:B7:45:F2:14:C4:1E:C2:9F:4B:37:CB:5F
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 0197CF6E4F9BDCC19C7BE79E2757213CB1C9
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/Z2dM55D00aW3RfIUxB7Cn0s3y18.roa
Signing time: Thu 03 Jul 2025 08:36:42 +0000
ROA not before: Thu 03 Jul 2025 08:36:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398465
IP address blocks: 89.124.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:6e:4f:9b:dc:c1:9c:7b:e7:9e:27:57:21:3c:b1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Jul 3 08:36:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67674ce790f4d1a5b745f214c41ec29f4b37cb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:d1:1a:68:4d:6b:0d:43:6a:19:28:4a:c7:
d4:37:7b:b8:c4:d8:9d:e4:93:cd:86:76:47:67:8f:
38:04:f2:eb:f3:8f:57:5a:4f:8c:2a:6f:fa:a7:43:
d7:43:09:ea:e5:e4:f7:35:84:25:dd:36:b9:a0:a9:
91:7f:44:1c:ba:65:83:9f:e6:03:28:22:1f:42:a9:
17:2a:69:b5:28:c2:ac:a3:85:58:60:44:b4:5f:e2:
ae:f4:ff:c2:9c:56:fd:30:33:31:71:8e:ba:b7:08:
da:0e:7b:be:a7:3b:c2:54:7e:d5:e1:c6:66:89:df:
cc:39:c6:09:b2:46:ce:79:cb:e0:11:de:59:cf:1d:
44:40:c0:5b:e7:26:3b:6e:53:54:b6:97:11:ed:e7:
07:c3:f1:ac:79:50:68:15:35:d2:2c:42:86:8e:b9:
fd:48:a3:f2:57:70:6c:1e:de:fa:ac:ce:4f:aa:1d:
20:57:71:1b:89:6d:e4:8a:29:69:8a:79:dd:79:02:
3a:80:26:1b:09:92:00:d1:91:55:69:66:76:ac:b9:
81:80:ab:a9:3b:6b:cf:91:cf:8c:ed:00:9d:ba:0a:
15:ec:8b:09:29:12:f5:47:8b:19:15:b3:f2:a5:7b:
b0:fd:b2:cb:9f:77:26:38:a1:94:1d:4e:3e:63:a2:
12:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:67:4C:E7:90:F4:D1:A5:B7:45:F2:14:C4:1E:C2:9F:4B:37:CB:5F
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/Z2dM55D00aW3RfIUxB7Cn0s3y18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.124.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:11:93:e9:5c:40:02:1e:0d:df:9b:a3:c8:2c:ab:c0:a4:9c:
42:5b:0f:f2:3b:43:a6:b6:ae:40:a3:28:0c:53:1b:ce:18:15:
bd:cb:51:0f:65:71:b9:52:bf:1a:36:4f:bf:db:7b:2e:e8:2e:
68:f8:fa:0a:15:58:89:52:69:ce:9a:0a:47:d0:19:7b:82:94:
d3:90:04:6e:5a:20:07:00:5f:ea:7e:26:12:a3:41:c0:54:ca:
8c:3c:b2:93:bf:fb:b5:00:d6:4d:18:7b:ab:8c:2c:f8:8b:b5:
b9:bf:f8:ba:0b:4b:1b:c0:00:30:fe:69:6c:24:c5:96:8e:c3:
d6:94:a5:be:ea:52:7e:25:26:07:cb:c1:7a:19:4a:f9:a3:34:
fe:17:12:52:38:9b:16:8c:a1:56:50:bf:27:81:99:20:19:6e:
b9:de:2d:90:55:37:b3:fd:7d:e9:d7:e4:42:4e:16:df:7e:77:
a4:8a:05:34:d1:80:96:90:24:00:95:6d:4f:8a:cb:14:a5:83:
5d:d1:e8:cd:df:9e:35:67:50:2f:ad:50:bd:71:cb:0e:14:86:
ad:43:af:be:75:4d:b2:02:e1:2c:08:d9:30:84:75:00:50:1d:
20:ac:d5:e0:6b:5a:57:2f:12:f0:1f:33:c4:8e:77:0e:1f:97:
7c:ea:a2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:08:09 2025 by rpki-client