Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/G4i5HzFemLXdLvBS_7Q429NG6_c.roa
File: G4i5HzFemLXdLvBS_7Q429NG6_c.roa (raw, json)
Hash identifier: PhE5GD2aKWrEPp5p1ohcxf7+DsUWcfKZIUIvlvVO+6k=
Subject key identifier: 1B:88:B9:1F:31:5E:98:B5:DD:2E:F0:52:FF:B4:38:DB:D3:46:EB:F7
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01976795C4ECDDD61688746D4CBC9019CD81
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/G4i5HzFemLXdLvBS_7Q429NG6_c.roa
Signing time: Fri 13 Jun 2025 04:39:17 +0000
ROA not before: Fri 13 Jun 2025 04:39:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 178.239.127.0/24 maxlen: 24
185.95.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:95:c4:ec:dd:d6:16:88:74:6d:4c:bc:90:19:cd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jun 13 04:39:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b88b91f315e98b5dd2ef052ffb438dbd346ebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fc:e5:aa:b5:ab:d7:e2:05:98:54:6b:64:ec:
c0:dc:b5:6b:4b:23:1a:f5:73:a0:44:5c:7e:0b:87:
12:6e:9c:df:8e:98:6c:22:fe:c8:ce:c9:d6:65:1a:
6d:96:5d:aa:28:16:cd:5b:59:f5:76:02:9f:cc:70:
aa:42:38:14:3f:6a:68:ce:3f:6c:c8:05:e4:f6:36:
04:34:47:b0:39:ad:f6:66:60:1f:1d:28:d6:8a:f5:
5f:38:cd:ed:08:85:4f:e4:8c:6f:de:2a:ce:c1:2e:
46:71:16:f6:82:87:ef:d2:57:cd:58:58:dc:39:51:
40:a4:73:8d:36:03:f1:a1:e0:aa:33:2f:25:b0:e7:
44:8b:7b:9b:91:f8:70:5c:44:9b:f5:58:6e:4c:98:
ad:ba:4c:92:76:f6:95:d0:d1:42:00:6b:b2:1b:05:
18:f8:d3:30:f8:32:5f:61:74:19:93:42:6e:2e:91:
d1:b9:0e:32:5b:1d:a7:77:c6:77:08:7c:05:45:32:
20:3c:eb:86:b7:7a:a8:ef:23:22:b5:85:37:49:8a:
dd:24:48:a0:57:da:ac:2a:33:1d:42:28:9d:da:d7:
40:2f:c8:5c:ec:ff:df:3d:01:1a:56:03:bb:dd:00:
a0:d1:ef:47:30:15:67:33:a2:28:b0:fe:55:0d:47:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:88:B9:1F:31:5E:98:B5:DD:2E:F0:52:FF:B4:38:DB:D3:46:EB:F7
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/G4i5HzFemLXdLvBS_7Q429NG6_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.127.0/24
185.95.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b0:76:4c:85:2b:17:4a:b5:0a:f1:9a:da:83:a5:5f:1e:1d:
18:1c:e9:78:8c:88:09:ee:93:bb:67:92:df:e7:e9:ba:be:e6:
b2:2b:fd:d5:e3:85:d6:f7:70:5d:4f:d3:b6:61:4d:b7:c5:f3:
b7:6b:a0:3e:0a:32:d4:98:9d:92:31:01:d9:16:95:28:92:3e:
f5:93:08:38:37:40:68:bc:73:85:61:ab:43:1f:75:56:2f:bd:
ce:d2:82:b6:ae:3a:27:91:5f:77:5f:ee:a4:db:96:2d:f4:83:
8f:06:30:5e:83:50:df:aa:2c:57:ff:13:04:38:2e:7b:1d:92:
ce:f6:6f:40:ac:ba:9c:64:56:f7:82:24:a4:6f:d4:fd:89:8c:
5d:51:82:30:d0:93:ed:bf:5d:23:76:f9:c4:f1:e7:08:be:18:
d9:38:de:15:51:a0:fd:fb:0d:e7:1b:a9:cb:bd:75:bf:00:f2:
f0:58:df:a4:9d:0b:b7:77:9c:2b:ee:29:5c:a6:17:36:87:35:
9e:c0:42:bc:b1:30:02:63:29:85:a1:c4:73:92:b5:da:b3:cf:
92:39:00:8f:9a:e2:23:6c:d9:d7:ec:24:41:6f:12:74:90:ed:
3b:d3:3c:cd:ee:d5:e0:78:0d:15:d8:66:80:6e:6e:e9:41:95:
22:4e:29:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:51:20 2025 by rpki-client