Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/gRffKuEX0czsrnlZBP9RuWOhUxc.roa
File: gRffKuEX0czsrnlZBP9RuWOhUxc.roa (raw, json)
Hash identifier: ZNpwDIB3C/ZPnj8Whylo5eGsxYBRndXhcd3COmk7erw=
Subject key identifier: 81:17:DF:2A:E1:17:D1:CC:EC:AE:79:59:04:FF:51:B9:63:A1:53:17
Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial: 0196C4FFF488D8754F81A3AFE84372B5BA2D
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/gRffKuEX0czsrnlZBP9RuWOhUxc.roa
Signing time: Mon 12 May 2025 14:57:10 +0000
ROA not before: Mon 12 May 2025 14:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137922
IP address blocks: 2a03:b8c0:11::/48 maxlen: 48
2a03:b8c0:16::/48 maxlen: 48
2a03:b8c0:17::/48 maxlen: 48
2a03:b8c0:18::/48 maxlen: 48
2a03:b8c0:27::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:ff:f4:88:d8:75:4f:81:a3:af:e8:43:72:b5:ba:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
Validity
Not Before: May 12 14:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8117df2ae117d1ccecae795904ff51b963a15317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:20:71:4d:d8:72:5e:ba:c5:ef:42:0b:2e:
31:70:4e:28:5e:d2:28:b5:a1:3f:62:28:fb:1d:14:
21:a2:ae:1d:3d:95:05:18:bf:1b:89:68:da:6c:2b:
07:91:2c:28:6a:0c:68:04:7a:0b:cb:9c:7c:62:0e:
b6:e8:49:a9:b6:9b:f9:78:99:11:3e:ff:4d:55:ef:
79:bd:33:f1:e3:7b:a5:26:5f:64:69:90:9a:a6:0d:
7f:06:43:ad:b2:2f:fe:ca:eb:d3:67:21:cc:18:d5:
df:f0:de:d3:a0:e5:09:d0:3a:0b:a4:23:ad:d1:d3:
a8:0a:4c:aa:d8:4b:56:56:18:aa:58:2c:36:c5:94:
7c:cd:1e:28:05:b9:25:5f:ea:db:82:40:c2:f3:a5:
28:a1:8b:33:e1:34:b5:61:e0:ae:91:63:21:c7:21:
a9:f2:38:1b:8d:49:78:3b:b2:34:6f:cf:39:51:84:
d3:f1:be:ed:bb:e4:ff:21:5f:9b:5a:92:17:cd:ae:
e0:16:6e:65:4e:0d:8d:0c:43:c1:a5:19:ec:c9:c1:
f1:3e:4a:69:09:50:90:98:e1:9a:1c:69:4a:82:a9:
83:02:0e:3e:f0:d6:df:14:29:7d:2d:0f:e7:b1:c2:
8c:f8:db:91:ef:4b:bf:e5:d1:26:87:87:44:cb:f8:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:17:DF:2A:E1:17:D1:CC:EC:AE:79:59:04:FF:51:B9:63:A1:53:17
X509v3 Authority Key Identifier:
keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/gRffKuEX0czsrnlZBP9RuWOhUxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:b8c0:11::/48
2a03:b8c0:16::-2a03:b8c0:18:ffff:ffff:ffff:ffff:ffff
2a03:b8c0:27::/48
Signature Algorithm: sha256WithRSAEncryption
24:ce:aa:5d:1c:33:4f:1d:5d:dc:46:1a:b4:eb:19:01:f2:8a:
9a:d8:db:63:12:6a:ae:9b:fa:b1:2c:60:15:5c:8d:bd:16:e6:
ad:68:51:ee:4f:0e:72:69:0f:da:f7:74:cf:b7:c4:16:0e:2a:
bf:04:49:ee:cd:c5:f8:df:84:cd:94:59:a7:f2:0c:ad:07:9a:
be:b4:a0:5d:1c:20:02:4a:34:1a:4b:34:f7:b2:ab:f2:b2:09:
0e:77:46:fc:26:ca:c9:63:cb:c5:26:ae:db:36:9f:19:27:42:
30:4d:0a:f8:98:98:27:31:8a:44:f8:51:95:00:c7:78:f3:0b:
4d:68:a5:db:3a:7b:42:07:14:6c:e9:05:74:23:08:a5:ea:15:
ae:c5:08:1f:c9:e5:c0:0f:de:bb:22:55:58:ea:d8:40:2b:31:
fe:cb:ad:68:29:17:55:ca:24:22:7f:cc:9c:00:ea:94:66:3e:
a0:50:12:f9:69:98:24:fa:34:8d:92:a6:5f:3f:68:d0:c1:54:
21:d5:7a:28:51:d9:77:a2:5c:88:a5:ab:61:3f:c1:a2:19:c4:
76:c5:72:20:1f:ad:88:c3:43:ac:59:e6:59:3c:24:2b:ff:74:
49:07:ce:78:c2:7f:c9:79:4d:f8:d4:07:04:37:3d:df:ea:68:
17:23:22:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:23:00 2025 by rpki-client