Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/afGPS3PAVZ8nWwVk4CaX2Osnjtw.roa
File: afGPS3PAVZ8nWwVk4CaX2Osnjtw.roa (raw, json)
Hash identifier: +mXJCKECRBst1oRdqoThcAUlKIq3CdK3Wq8QN3b289Q=
Subject key identifier: 69:F1:8F:4B:73:C0:55:9F:27:5B:05:64:E0:26:97:D8:EB:27:8E:DC
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 0197E99D2CC83DFE6C61DA3837B7A056A0C9
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/afGPS3PAVZ8nWwVk4CaX2Osnjtw.roa
Signing time: Tue 08 Jul 2025 10:38:01 +0000
ROA not before: Tue 08 Jul 2025 10:38:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208414
IP address blocks: 45.138.104.0/24 maxlen: 29
45.138.105.0/24 maxlen: 29
45.138.106.0/24 maxlen: 24
45.138.107.0/24 maxlen: 24
89.221.211.0/24 maxlen: 24
185.8.236.0/22 maxlen: 24
2a0e:acc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:9d:2c:c8:3d:fe:6c:61:da:38:37:b7:a0:56:a0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Jul 8 10:38:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69f18f4b73c0559f275b0564e02697d8eb278edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:08:3c:71:fe:39:5a:fa:cc:c2:5f:10:86:b8:
a8:b4:22:b6:43:80:87:2b:f6:9d:ae:fa:32:4a:06:
fc:ed:f1:a8:37:30:bf:47:68:1c:82:fd:12:96:b3:
d5:36:35:21:8a:29:04:87:5d:06:60:30:1d:f9:fd:
f0:25:b0:94:15:67:29:a1:fc:9c:a2:31:8e:ac:59:
dc:44:42:dd:7a:6b:98:7b:89:01:4d:c9:c8:1c:4a:
14:d2:31:1c:d8:d6:6e:20:00:52:f0:a5:58:2d:53:
1f:27:82:cd:2a:b6:76:6f:5b:5f:7c:c2:c7:7a:b8:
f6:8e:20:67:9d:72:1a:15:ad:0d:22:5d:29:09:47:
13:f5:66:4d:43:1f:53:a4:f6:d5:0a:f4:7b:f5:35:
4b:3d:17:0b:06:52:cd:3a:14:bb:d8:80:5e:66:5a:
ee:60:43:43:8c:dc:2a:45:ae:65:91:67:85:2b:98:
bc:ea:d2:95:fc:6c:32:54:7f:cb:60:0f:7a:3a:2f:
aa:d4:38:0f:07:92:16:8d:ff:10:73:3b:f2:c1:83:
d7:16:dc:38:59:70:60:f3:b6:5f:c8:0b:9a:56:ba:
18:e2:9d:18:72:d7:25:e9:fa:57:12:48:0d:88:d4:
21:12:6e:eb:c1:65:cb:b5:fa:0f:d9:da:d3:44:81:
75:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F1:8F:4B:73:C0:55:9F:27:5B:05:64:E0:26:97:D8:EB:27:8E:DC
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/afGPS3PAVZ8nWwVk4CaX2Osnjtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.104.0/22
89.221.211.0/24
185.8.236.0/22
IPv6:
2a0e:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
19:68:4d:01:2c:ef:1f:38:77:ea:63:0a:35:d1:06:29:15:76:
f9:e2:bc:d5:ee:ec:83:ac:f7:6a:4f:66:56:e1:f2:12:93:9f:
3c:73:62:35:85:32:ba:8b:f5:94:eb:d3:63:1f:40:de:d3:71:
5a:f5:82:5b:c1:ea:13:19:8b:d1:33:34:4a:6d:2f:83:1f:6e:
02:72:eb:0a:ea:ca:d6:65:e4:9f:1e:80:21:8a:b6:d6:89:17:
c7:04:2e:d0:55:23:65:e1:ac:f8:5d:08:fb:08:b5:c2:9c:43:
18:db:f9:4b:ed:b6:fc:4d:d1:b7:ae:bd:14:72:39:60:aa:da:
8a:3d:a4:ff:c2:57:db:40:ca:d7:fa:4e:9c:b8:8d:68:b1:71:
db:fe:8c:db:1b:eb:fe:44:15:43:d8:65:26:59:3b:ad:b3:36:
72:29:97:46:16:8b:f6:e4:62:a9:8f:83:51:02:49:c3:94:37:
58:32:93:e0:a6:02:c1:e4:56:a6:1c:1a:fa:f0:3b:16:c2:fe:
83:f8:57:ce:e6:a7:75:4c:61:78:76:a1:3a:63:0c:6f:39:ef:
cd:e6:35:dd:c1:96:8f:f6:d9:a1:56:aa:21:65:64:41:8d:cf:
70:da:14:dd:68:7c:c5:c5:59:29:61:3d:6b:fc:8e:72:f4:cf:
ac:d7:ad:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:16:09 2025 by rpki-client