Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa
File: r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa (raw, json)
Hash identifier: 8x452bR9h9FZkxCtz0Hac6JBkLr+TCy/u9myFaRh5zg=
Subject key identifier: AF:6A:7F:9D:FB:62:F7:03:FB:69:C4:06:11:A2:87:33:FC:59:E5:8E
Certificate issuer: /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial: 01971BA5597C097C2BD8BBE1A2113FEB6CAF
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa
Signing time: Thu 29 May 2025 10:45:10 +0000
ROA not before: Thu 29 May 2025 10:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56595
IP address blocks: 193.39.144.0/21 maxlen: 21
193.39.152.0/21 maxlen: 21
194.32.48.0/23 maxlen: 23
194.32.50.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:a5:59:7c:09:7c:2b:d8:bb:e1:a2:11:3f:eb:6c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
Validity
Not Before: May 29 10:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af6a7f9dfb62f703fb69c40611a28733fc59e58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ae:cd:94:a4:b7:aa:39:f8:75:9a:d7:af:27:
cc:74:ea:56:2c:9a:11:fd:47:6e:78:bd:3b:10:c7:
4e:fb:b9:b3:73:27:e4:0e:54:0b:f1:3b:08:5c:e5:
e0:3d:03:03:d2:33:08:b3:c4:fc:bc:2d:cf:cd:4c:
98:be:27:7f:02:f3:f6:12:3d:e3:f6:03:02:48:44:
a3:6a:50:80:55:c0:4b:91:6d:2c:7d:c4:43:11:28:
b0:7f:5d:68:c2:2b:3e:e1:09:8f:7d:88:ad:bd:8b:
a1:96:6d:b9:2d:e6:d1:21:9b:df:da:7f:10:45:fb:
86:4e:58:e5:11:b6:e8:01:9c:d0:ec:72:f6:06:eb:
64:6b:b6:04:94:29:3e:6d:5b:ce:35:2b:94:cd:a4:
f2:3a:2b:bf:ca:e0:95:b7:48:77:9f:93:45:41:60:
5f:01:b6:72:31:dc:d9:1a:90:11:a4:5f:dc:62:9b:
4b:91:8f:06:98:7f:04:af:14:84:ef:37:b1:a2:ff:
d6:29:d1:32:5e:ec:e5:b5:3a:34:fb:41:d3:d9:49:
0f:bf:5c:9e:26:df:3b:2f:26:17:3b:81:f7:92:1d:
95:6f:a9:8e:b2:57:51:e6:fc:d1:f3:a2:9e:6e:97:
d2:fb:c6:a0:62:f9:b0:3e:ab:69:07:66:fd:05:99:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6A:7F:9D:FB:62:F7:03:FB:69:C4:06:11:A2:87:33:FC:59:E5:8E
X509v3 Authority Key Identifier:
keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.144.0/20
194.32.48.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:9d:aa:f6:da:4d:04:8a:85:7b:9f:e8:d1:38:93:de:b3:48:
f2:6e:e8:29:7e:40:c1:8e:c9:b4:6a:03:01:e4:4e:cd:de:19:
2b:ee:41:dc:4b:dc:26:da:ab:6e:58:ec:fb:2f:ca:a2:ba:ba:
61:07:4e:a2:e5:73:f1:45:6d:fb:1c:50:78:63:14:37:b0:26:
70:d2:f3:00:47:f9:bd:64:6b:4b:56:b7:75:e7:cf:fd:0b:81:
cf:dd:3a:be:1c:b8:1e:73:ba:56:55:2d:a7:e7:2d:7f:3d:e6:
7d:fd:37:57:72:42:de:23:f4:b7:d6:d8:8a:aa:8e:ac:b6:20:
67:0b:0d:8b:78:cf:bd:18:8d:05:89:06:f5:22:0b:fe:e7:06:
d7:a6:6f:a7:23:d2:64:86:85:6d:3b:02:4e:de:ac:e6:dc:be:
c2:4f:c0:1d:2d:93:2a:8c:a2:90:f3:cc:6e:b9:e3:3b:3e:44:
c4:11:04:b5:6d:2a:2b:c9:22:31:23:39:23:2a:68:7b:2b:3a:
19:89:5c:d5:80:bb:9f:5f:8a:dc:95:9a:ce:e4:36:c0:fd:b0:
08:8f:71:77:c9:65:1a:4d:01:04:83:d1:0a:55:34:8c:fd:7f:
63:8e:aa:e2:8b:84:14:bd:5f:68:09:18:67:3e:50:b1:19:77:
95:3a:b0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:28:54 2025 by rpki-client