Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/erIPsMcrnn-1qtvunBUFAtuT9FQ.roa
File: erIPsMcrnn-1qtvunBUFAtuT9FQ.roa (raw, json)
Hash identifier: zJP4bliAEtdtdUwrPaS/xb72iPe/QbyyZr862b55WCY=
Subject key identifier: 7A:B2:0F:B0:C7:2B:9E:7F:B5:AA:DB:EE:9C:15:05:02:DB:93:F4:54
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01982C2D587C95096603748BAEB1A8C40F81
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/erIPsMcrnn-1qtvunBUFAtuT9FQ.roa
Signing time: Mon 21 Jul 2025 08:50:25 +0000
ROA not before: Mon 21 Jul 2025 08:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215171
IP address blocks: 109.122.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:2d:58:7c:95:09:66:03:74:8b:ae:b1:a8:c4:0f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 21 08:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ab20fb0c72b9e7fb5aadbee9c150502db93f454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:ca:5e:76:d5:3f:c8:85:a8:c5:33:0e:0d:
f2:a1:fe:ed:98:f5:ec:04:d7:8e:b5:91:9e:af:f6:
d9:a4:90:49:a0:55:6e:1f:96:43:82:f6:b7:f8:1a:
4a:50:69:a2:69:ca:3d:35:dd:f8:30:83:e3:a0:7e:
5b:fa:80:82:20:5d:12:e0:5f:2e:b2:6d:d4:8d:46:
7c:c0:9b:8c:e2:1d:c8:9d:a8:08:e5:41:6d:bb:9a:
38:88:1e:ca:a5:03:bf:09:6d:9a:ca:ec:89:35:55:
d5:0c:84:ac:d3:de:18:d5:9f:af:8f:56:d3:ae:15:
68:70:ca:8a:63:1e:c9:ad:aa:bc:bd:58:0e:d6:9a:
4b:db:e1:1e:e2:5b:9d:b9:f9:31:60:f7:7e:96:ac:
95:56:9c:37:79:62:51:08:c0:1b:7f:d8:1a:a4:89:
67:5c:2d:61:af:34:62:a3:0d:02:ab:28:a3:23:73:
a2:1f:0a:bd:93:76:0c:f2:53:e7:1e:c2:57:7e:2b:
cf:b4:0a:ff:4b:2c:a0:69:68:b5:24:bb:e7:0f:2d:
e6:dd:35:4d:d3:25:82:af:a7:51:02:dc:e8:41:88:
e8:06:d1:b0:5b:46:fa:df:17:a6:1c:77:23:bb:7a:
e3:e0:37:64:50:04:77:10:d9:60:d9:a2:9d:5b:20:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B2:0F:B0:C7:2B:9E:7F:B5:AA:DB:EE:9C:15:05:02:DB:93:F4:54
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/erIPsMcrnn-1qtvunBUFAtuT9FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.2.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:db:1f:69:66:73:84:04:cd:fe:a2:8a:32:28:bd:7e:f5:4e:
3e:ac:ba:72:cb:32:fd:41:fd:90:a2:98:74:89:bc:f2:f4:dc:
1c:9f:f6:da:7c:93:9d:e1:64:91:1a:e9:6b:fc:2c:d3:41:b0:
2b:21:b7:78:a2:e4:62:40:ed:c2:e8:12:25:d9:99:7d:c1:58:
3d:3a:28:46:7d:ff:d0:3c:f4:b9:14:f1:93:07:b9:de:e8:9b:
31:18:ec:1a:d1:f6:bd:f8:ea:83:5e:36:5b:1a:8c:1b:80:7d:
78:12:27:4c:86:85:06:8d:d1:5a:25:5e:19:9f:c7:23:d1:26:
44:34:e6:44:78:5c:3f:c5:27:ac:1c:67:39:a2:69:10:7e:33:
0d:fe:95:48:12:8a:9e:aa:97:04:b2:3a:f9:d6:78:1d:a9:63:
67:62:6f:1c:36:23:da:6d:04:3a:71:f0:c7:66:b9:fe:0e:09:
6a:90:4f:8d:39:84:74:89:6c:b1:bb:ba:84:06:58:68:a9:ce:
2c:1e:08:8a:58:a7:05:7c:8d:29:43:7b:ba:78:37:c9:5e:f2:
93:0b:43:54:67:aa:77:1a:37:8d:5e:8c:94:ca:7a:43:cb:74:
82:d9:a1:62:54:a3:60:f4:b7:80:18:de:9e:c9:e0:c5:b6:79:
f2:31:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:50:03 2025 by rpki-client