Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/emo1Q5S85kXcQiS_AOQnJpCv1Ks.roa
File: emo1Q5S85kXcQiS_AOQnJpCv1Ks.roa (raw, json)
Hash identifier: nGThIK5KWgFiHgBYn4d6q1DvellcLqYIA1fpLkP2lwY=
Subject key identifier: 7A:6A:35:43:94:BC:E6:45:DC:42:24:BF:00:E4:27:26:90:AF:D4:AB
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01975862C7E7DFF25B95A00C3CE75F4DF158
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/emo1Q5S85kXcQiS_AOQnJpCv1Ks.roa
Signing time: Tue 10 Jun 2025 05:49:18 +0000
ROA not before: Tue 10 Jun 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 92.62.245.0/24 maxlen: 24
92.62.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:62:c7:e7:df:f2:5b:95:a0:0c:3c:e7:5f:4d:f1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jun 10 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a6a354394bce645dc4224bf00e4272690afd4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:2c:83:c6:ed:72:e9:55:42:31:b6:1b:b2:
88:48:17:ba:e4:2c:b8:93:5d:13:61:05:46:03:e3:
35:f9:42:f7:0e:df:b9:a2:b8:3c:dc:49:b7:5b:91:
29:86:bf:57:7b:f8:23:66:f2:78:fd:37:2c:33:60:
66:5d:d4:da:e7:35:bd:3c:95:df:84:2b:a7:f2:17:
63:92:03:8b:2b:97:e9:0f:4d:e9:f4:7a:8a:47:43:
22:fe:89:49:22:38:46:6d:a7:81:2c:3e:4f:6f:4f:
4a:69:11:0a:de:d1:3b:1b:b0:49:91:37:84:d9:f3:
10:92:00:36:62:84:80:05:69:16:a2:84:40:44:8e:
66:b8:78:4d:63:69:48:83:14:95:67:91:89:8b:0f:
b2:4d:19:ae:f2:d1:69:48:0a:78:12:39:82:82:06:
ee:6b:2c:b5:a3:c9:41:78:4e:47:a1:22:c5:4e:cc:
b0:69:90:38:78:08:78:f0:48:91:d6:f8:c7:52:03:
aa:7e:aa:40:91:d9:c7:ff:b5:09:f4:fc:d6:89:ba:
56:4c:f4:3a:83:05:94:1a:67:34:4a:cf:0f:4f:f6:
aa:5c:8a:4b:53:1b:1c:c7:6d:46:76:9e:0f:eb:26:
e1:09:9f:a8:46:10:f7:65:0d:76:f2:cf:6c:48:7d:
d3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6A:35:43:94:BC:E6:45:DC:42:24:BF:00:E4:27:26:90:AF:D4:AB
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/emo1Q5S85kXcQiS_AOQnJpCv1Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.245.0/24
92.62.252.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d7:5a:97:24:e3:68:0f:c9:4f:6c:2d:57:f0:20:56:08:31:
d1:5b:1b:69:d5:36:02:cb:36:c9:bf:92:4c:cf:0d:1d:00:aa:
f1:42:1f:67:c2:2b:3d:c3:c9:d8:68:67:89:1c:ea:e0:13:b3:
f6:72:4a:03:a4:64:eb:50:b5:29:ff:e2:1c:e9:d5:4d:82:dd:
16:c9:f3:24:03:83:f0:00:db:df:f5:42:72:db:5b:e0:95:cb:
ee:a8:66:96:1a:be:bf:6a:39:d7:43:fa:5c:f0:25:29:fb:b7:
3e:72:6b:36:99:a9:ef:95:05:b8:d1:b2:17:e4:6c:3b:ed:26:
b7:6d:11:a6:62:36:1d:a8:c3:c3:e1:f7:7b:cd:6d:cb:60:bf:
07:59:f8:a1:bf:c9:55:83:ce:16:f0:37:2f:21:9b:9d:e0:67:
41:3b:75:1b:2b:ad:49:87:8b:95:32:a9:a7:b2:6f:3e:a4:32:
50:53:e5:a7:a4:51:eb:17:0f:82:40:ed:21:30:05:83:46:f6:
71:1b:11:b1:23:84:5c:39:af:53:ce:d3:d1:34:29:d3:0b:71:
d9:b9:83:5f:52:f5:d9:06:5e:0f:92:0d:86:f3:f3:b4:85:43:
8b:19:2b:b8:95:72:68:cb:99:5e:a8:96:42:f0:68:57:ff:01:
26:fa:1d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:20:25 2025 by rpki-client