Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/E6R94wdwkh-hvCHzRqeitSBB2O8.roa
File: E6R94wdwkh-hvCHzRqeitSBB2O8.roa (raw, json)
Hash identifier: 1a2WMmmz+ouXlrOwjMj3BpLs/97+QuTmqE3PpY2RusU=
Subject key identifier: 13:A4:7D:E3:07:70:92:1F:A1:BC:21:F3:46:A7:A2:B5:20:41:D8:EF
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 0196809E26B0DC50EFBCE914DD2AF93B088A
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/E6R94wdwkh-hvCHzRqeitSBB2O8.roa
Signing time: Tue 29 Apr 2025 08:16:10 +0000
ROA not before: Tue 29 Apr 2025 08:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60651
IP address blocks: 194.38.8.0/24 maxlen: 24
194.38.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:9e:26:b0:dc:50:ef:bc:e9:14:dd:2a:f9:3b:08:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Apr 29 08:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13a47de30770921fa1bc21f346a7a2b52041d8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:0f:ed:04:1b:c0:54:ab:95:ab:22:8b:61:
39:72:2f:3e:f5:b1:91:d2:b4:ff:6a:53:88:60:e0:
c6:02:fe:fd:eb:11:21:f1:45:05:b9:c2:99:ed:de:
2a:a5:75:76:8b:ba:70:74:ce:21:2c:4e:9b:60:80:
bc:2b:e6:5d:f2:88:b5:af:77:b5:7e:41:5e:cf:63:
d8:d7:b5:5c:43:38:00:d0:90:40:e5:dd:4e:95:fd:
d9:17:70:54:2c:69:cd:1e:94:a5:1e:ac:cc:e2:26:
b0:1e:a3:66:82:f5:b0:c7:92:1f:8d:59:d7:38:68:
e1:1e:f5:0c:47:37:11:8a:25:19:01:04:8c:e6:72:
60:65:12:a0:10:c8:45:cb:26:15:3f:04:8a:24:e3:
7a:2b:1e:5d:df:02:bd:ea:6c:ad:29:ce:68:a6:ac:
0b:b9:6a:21:d0:6f:51:54:55:d4:63:34:fe:f8:29:
d8:76:2a:5e:4e:5c:b2:ff:36:05:e1:0f:3f:15:68:
35:f4:53:1d:b6:3e:cc:f4:52:92:4f:cd:6c:64:4e:
20:31:2e:22:eb:a1:ea:22:ee:e6:83:f5:23:c6:43:
42:eb:9d:84:80:cd:49:4b:58:67:ee:14:4b:4b:53:
21:ed:23:45:a5:23:de:53:71:c5:6c:81:8e:2f:20:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A4:7D:E3:07:70:92:1F:A1:BC:21:F3:46:A7:A2:B5:20:41:D8:EF
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/E6R94wdwkh-hvCHzRqeitSBB2O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.8.0/24
194.38.10.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:f7:c0:99:3c:37:f9:0b:4e:69:97:4a:af:80:e5:e3:96:49:
8b:78:49:08:1e:9d:40:8e:77:65:2e:04:8d:35:53:ff:8d:a1:
cc:7d:54:0c:0c:5e:49:40:c8:e5:28:33:aa:a5:01:c2:b0:20:
4f:8e:37:80:73:c8:06:d7:13:a8:43:29:d6:8f:cb:e1:25:8e:
13:8c:3b:a0:d5:b4:44:fb:98:a8:4e:c8:0c:a1:bf:26:d5:ca:
96:d4:e2:b6:5c:b4:f5:8b:a5:1d:1d:d8:f1:65:33:f6:49:e9:
89:6d:c1:28:6c:6f:49:ec:7d:0a:59:6d:04:b9:a0:97:29:a0:
10:da:ae:43:79:34:b6:2a:c2:f2:c4:48:10:87:70:14:d5:07:
e4:f7:50:72:28:96:3a:e4:5a:34:61:81:fd:fe:05:ce:d2:4c:
7e:74:48:d2:9f:fa:28:55:47:6e:f0:0c:22:46:83:b4:d3:4b:
f1:b7:61:a2:01:24:c4:58:84:d2:96:06:78:ff:dc:30:a4:0d:
00:d1:8c:98:64:b0:03:c3:e5:d5:4a:09:f3:2d:2d:29:0a:9c:
5d:f0:14:bc:0f:7c:2a:5e:50:ac:b2:c3:ef:d9:77:f2:2c:6c:
40:50:11:30:e7:4a:c6:e1:03:27:0f:ed:1d:25:f2:65:c5:ba:
1e:7b:01:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:41:39 2025 by rpki-client