Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/gTRae7ZL-HNGSMdQfcCH4w50U3I.roa
File: gTRae7ZL-HNGSMdQfcCH4w50U3I.roa (raw, json)
Hash identifier: lqNN9a02R1wKbKPgix1ICuGW1yv4WMeo7Mou83VAgGA=
Subject key identifier: 81:34:5A:7B:B6:4B:F8:73:46:48:C7:50:7D:C0:87:E3:0E:74:53:72
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 019740E019AF905C84CCA0F9B794ADF94A4F
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/gTRae7ZL-HNGSMdQfcCH4w50U3I.roa
Signing time: Thu 05 Jun 2025 16:15:17 +0000
ROA not before: Thu 05 Jun 2025 16:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39900
IP address blocks: 141.98.184.0/22 maxlen: 22
194.9.118.0/24 maxlen: 24
2a13:6c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:e0:19:af:90:5c:84:cc:a0:f9:b7:94:ad:f9:4a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: Jun 5 16:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81345a7bb64bf8734648c7507dc087e30e745372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:d1:09:2c:84:6e:fd:05:45:85:d1:4f:81:
ed:d3:c1:3a:28:19:71:82:cd:2c:a5:b3:86:ff:29:
53:a4:89:58:24:8e:0a:57:a1:06:c4:1e:d4:4e:9f:
42:b7:89:c5:dd:78:67:b8:78:cd:af:a3:de:cf:cb:
72:b6:4e:f8:22:79:9e:cb:5c:bc:47:e8:3a:a8:38:
32:c2:d8:80:42:b9:99:be:3b:7f:91:6d:44:4d:15:
03:9c:ba:2c:e7:be:1b:45:27:3d:b8:5d:0f:2e:26:
4e:51:39:40:e8:69:5d:bf:fa:b6:f7:be:0e:f6:43:
55:8e:f8:69:e8:5a:41:53:83:6d:f5:58:53:33:de:
c1:99:19:35:cf:45:0d:89:17:7c:8b:f9:e8:85:54:
09:b8:3c:a1:f9:53:5d:d8:89:6d:87:68:65:d2:7f:
25:16:d1:3c:01:6a:11:f2:d1:c9:fa:11:f3:4e:9a:
ad:63:11:ff:07:3d:25:4a:44:b9:e5:36:fa:e7:16:
d4:11:bc:a0:b2:a2:80:07:f2:93:88:c8:bd:e4:bc:
5a:64:44:d1:04:3e:64:2f:84:6a:05:21:56:bf:cb:
b0:e4:0e:8b:49:41:c2:30:92:8e:7d:4c:a2:ac:27:
1f:25:d8:9d:73:64:70:84:bc:be:c6:2e:80:91:b2:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:34:5A:7B:B6:4B:F8:73:46:48:C7:50:7D:C0:87:E3:0E:74:53:72
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/gTRae7ZL-HNGSMdQfcCH4w50U3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.184.0/22
194.9.118.0/24
IPv6:
2a13:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
cd:02:b7:e9:8f:da:ba:80:bd:60:60:b8:27:a8:ae:06:28:f4:
d3:00:fe:e9:c7:23:fb:f3:e0:5f:1e:c6:a6:23:85:56:75:c1:
20:e6:d7:66:3e:c1:37:f8:5d:d5:1d:ff:a0:98:0a:b4:2e:8b:
cb:14:b6:bb:ad:ae:c3:b1:ac:12:66:1d:f2:e1:cc:dc:e5:6a:
17:d2:39:1b:e1:3f:c6:58:aa:ab:1c:ad:51:79:4e:37:5d:72:
01:3b:59:b9:d5:8a:2a:c1:6f:f9:f9:6f:32:46:55:18:b0:de:
82:da:97:4b:4b:2e:96:12:78:72:7e:3d:f3:ac:23:6e:1b:ba:
f3:e4:74:3d:42:13:a4:8a:e4:cb:f4:10:cf:1f:3a:9b:4e:76:
5f:c5:6d:30:a6:d1:3d:10:8c:61:2f:d4:14:fa:ab:0a:d2:45:
54:88:75:d2:9a:4c:ae:c2:4f:f5:4b:7c:e1:ed:73:dc:b1:7f:
21:c7:7b:78:9e:0a:eb:e5:0e:cb:ca:42:b2:36:b6:a9:23:44:
16:5a:91:21:93:2f:e3:7e:e7:80:04:ea:d9:27:82:86:1f:86:
b7:13:76:10:f8:3f:62:95:c0:f0:98:79:bd:a8:48:a1:15:3d:
8a:e2:25:1b:32:f2:04:b9:e0:6f:ad:e8:18:47:09:3b:51:a3:
fa:23:bc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:59:08 2025 by rpki-client