Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/chhwL-zj1isGKfXerZSwFuCy2Ig.roa
File: chhwL-zj1isGKfXerZSwFuCy2Ig.roa (raw, json)
Hash identifier: EaAAiNMyzMZfk0/ZwRL/V1h2YZdNe3SPfk1b1YTVfY8=
Subject key identifier: 72:18:70:2F:EC:E3:D6:2B:06:29:F5:DE:AD:94:B0:16:E0:B2:D8:88
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 019859E66882A09239116BBD6FEA8811662F
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/chhwL-zj1isGKfXerZSwFuCy2Ig.roa
Signing time: Wed 30 Jul 2025 05:55:28 +0000
ROA not before: Wed 30 Jul 2025 05:55:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 62.164.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:e6:68:82:a0:92:39:11:6b:bd:6f:ea:88:11:66:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Jul 30 05:55:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7218702fece3d62b0629f5dead94b016e0b2d888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:08:eb:45:41:42:86:75:03:ca:84:64:dc:
7e:df:d6:dc:c4:1d:d0:54:75:8e:1c:bc:a3:39:00:
6e:39:7a:65:08:13:cd:0e:88:07:d4:31:ca:db:1b:
9f:82:76:2f:e3:fb:ab:0d:e6:08:5b:30:41:7c:37:
17:bf:0e:28:d8:02:01:83:cd:74:66:5b:d1:b4:b1:
d4:70:29:6c:90:cf:d0:cb:da:f8:ff:16:27:36:3e:
4b:81:ae:5d:e9:18:82:74:82:88:e8:22:ce:f2:71:
32:59:50:8a:51:83:7b:7e:58:e4:d7:b8:06:54:60:
e5:9b:08:aa:f9:49:2e:73:24:9a:27:2a:5f:ef:81:
c9:cf:17:2c:bc:99:54:96:c6:a2:69:43:9b:6b:fd:
9a:6b:cb:13:27:60:66:2b:d2:c1:f9:f6:86:74:8b:
4c:c7:41:c7:e8:6f:b4:ee:82:f6:93:d9:f3:3d:d3:
8c:4a:96:a5:90:b7:83:d2:e0:72:69:f4:ed:bd:80:
2a:ea:d5:cf:20:2a:09:00:fc:3a:f8:1d:62:fd:25:
e5:e0:18:90:d0:9e:20:41:e0:87:9f:c3:5a:0a:14:
5e:0c:c2:fc:ed:28:28:3c:0f:23:e0:4b:3a:f3:45:
eb:d2:8a:d8:20:b6:7c:34:34:44:2c:50:be:e8:92:
3c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:18:70:2F:EC:E3:D6:2B:06:29:F5:DE:AD:94:B0:16:E0:B2:D8:88
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/chhwL-zj1isGKfXerZSwFuCy2Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.193.0/24
Signature Algorithm: sha256WithRSAEncryption
44:cb:33:c9:92:40:b4:53:c3:20:9e:f1:a1:86:66:67:90:ff:
60:dc:a2:4a:f5:fb:fb:9d:bf:a6:7a:ad:03:f7:7a:c9:e6:9f:
78:c6:b5:7c:60:8c:a6:1e:30:57:ee:69:8d:b5:91:44:67:d6:
00:53:b7:ff:9f:b7:dc:0d:6f:02:12:ac:09:f6:6e:27:ad:a1:
01:f3:43:f0:17:62:0e:84:a5:89:bb:74:3c:53:74:f7:b2:a5:
37:4b:18:e7:97:0d:07:04:e0:2a:f9:d3:e1:7e:dc:6c:3c:ca:
77:25:c1:03:2e:ea:b9:2d:b2:d7:1b:57:cb:b9:41:ed:92:99:
e9:d2:6e:2a:b2:df:15:36:ed:46:6f:62:7a:4a:72:7b:ee:b9:
d8:e0:e9:56:4a:5e:62:9a:07:12:f1:87:e2:1f:f1:5f:05:6c:
dc:e4:95:2d:32:bc:ce:08:b6:68:c4:84:4c:e7:6f:a5:2c:9e:
85:26:bf:6e:de:65:67:e8:ef:11:6c:6b:1e:af:d4:bf:b4:c3:
73:b1:5c:d7:38:f4:ba:87:fb:20:da:d0:8c:ec:02:79:58:17:
8a:a5:36:3a:8b:f0:8b:64:0c:8a:dc:95:c7:e5:7b:e5:48:a4:
f6:04:d3:a0:e8:4e:2b:2c:f5:69:1b:ba:66:f0:53:a3:c4:35:
e0:56:c9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:16:46 2025 by rpki-client