Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/dUjydhDtv2Ysc8dEDoiT2yx34lg.roa
File: dUjydhDtv2Ysc8dEDoiT2yx34lg.roa (raw, json)
Hash identifier: ebc83oZNm2ylmobsykoAv58WP6zLL9GO+02NODZysqQ=
Subject key identifier: 75:48:F2:76:10:ED:BF:66:2C:73:C7:44:0E:88:93:DB:2C:77:E2:58
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 01971AFE7C0449DB3818B92ADA97A5D6E058
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/dUjydhDtv2Ysc8dEDoiT2yx34lg.roa
Signing time: Thu 29 May 2025 07:42:54 +0000
ROA not before: Thu 29 May 2025 07:42:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199669
IP address blocks: 46.29.118.0/23 maxlen: 24
91.109.200.0/21 maxlen: 24
93.183.112.0/24 maxlen: 24
185.10.44.0/22 maxlen: 24
185.10.44.0/24 maxlen: 24
185.195.170.0/23 maxlen: 24
2a03:ec0::/48 maxlen: 64
2a03:ec0:1::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1a:fe:7c:04:49:db:38:18:b9:2a:da:97:a5:d6:e0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: May 29 07:42:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7548f27610edbf662c73c7440e8893db2c77e258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:d4:f4:ef:50:9f:5e:41:f6:88:d5:fd:dc:
9f:dd:d9:19:3b:91:20:dd:59:9a:21:e0:e6:9d:17:
e9:ec:76:dd:b6:49:b2:04:e1:f1:be:cf:8d:7a:ed:
ed:b2:e6:80:07:8b:93:07:86:f0:6a:f8:a4:f0:0e:
73:72:0c:03:c8:e9:f3:97:38:be:c6:61:1f:bb:cb:
9f:39:6a:45:39:84:4b:1e:d3:8f:3e:b4:57:87:54:
00:2d:29:34:b8:c2:be:0e:05:a1:56:c7:5c:cb:3d:
04:1c:07:53:86:da:d7:eb:21:71:ce:99:83:76:71:
13:e3:7d:35:75:7f:38:d0:97:4a:02:ef:22:74:8e:
17:4d:92:14:27:6d:73:fd:72:21:73:37:4a:7c:f4:
d5:31:7f:b4:e9:90:54:4a:76:ca:64:a7:06:35:63:
68:1a:3b:3a:6c:b9:e3:11:8a:b1:5e:ef:05:24:e8:
b8:43:a9:29:61:9b:ab:fd:11:ee:22:96:d6:41:64:
ac:17:e1:58:67:3c:59:20:27:ed:53:e0:1b:9a:62:
f4:0d:b0:d7:3e:f6:b2:f7:bb:87:88:4e:ac:ba:1e:
32:4c:de:df:c6:09:93:6e:df:21:a0:70:5e:cf:6c:
18:45:56:cd:bd:13:a5:2c:b9:9c:9a:d8:81:d0:83:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:48:F2:76:10:ED:BF:66:2C:73:C7:44:0E:88:93:DB:2C:77:E2:58
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/dUjydhDtv2Ysc8dEDoiT2yx34lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.118.0/23
91.109.200.0/21
93.183.112.0/24
185.10.44.0/22
185.195.170.0/23
IPv6:
2a03:ec0::/47
Signature Algorithm: sha256WithRSAEncryption
97:ba:99:75:1b:13:40:f7:a1:f2:07:c4:4a:f1:32:58:30:55:
9f:e5:a8:f3:e2:45:3e:10:d3:eb:72:b8:c6:a9:e5:93:a3:11:
7d:f6:ae:78:01:48:b1:97:55:75:5c:1b:d8:70:46:68:df:a1:
22:7f:3c:4c:24:4d:84:15:4b:8c:7c:ab:4e:de:5e:1f:4b:48:
24:58:c5:17:34:af:31:ab:28:9a:20:f1:e6:00:13:65:2f:ac:
53:8d:9f:c0:e0:b0:20:ca:0d:11:a9:aa:7f:be:0a:d0:c6:df:
2a:2e:e4:1d:7c:20:83:ba:09:45:56:bf:0b:2d:3a:94:d1:66:
e8:d6:cf:24:db:36:d0:33:5c:e8:71:9b:c5:95:70:b3:d8:ff:
d4:42:03:68:08:8e:58:7a:7a:5f:93:1f:50:95:4e:60:71:55:
a1:d7:44:19:c0:5c:53:dd:9f:52:15:97:ea:9b:2d:b6:16:0f:
b8:0c:53:5f:ee:80:ca:2c:c6:b3:bd:ae:9a:a5:5a:77:d5:d4:
41:c2:ba:37:cc:14:1f:9d:81:58:9d:3c:b4:5d:4a:4e:a0:9d:
e0:f8:30:00:aa:82:e0:92:7f:b8:3d:c7:b7:a9:de:4a:24:c0:
0d:3b:ef:8c:cc:b6:4f:ad:1f:ec:fb:da:6a:53:45:18:70:f5:
d6:3c:05:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:51:50 2025 by rpki-client