Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/G-FIewDyYURdVBX87-3ph-Fu2uw.roa
File: G-FIewDyYURdVBX87-3ph-Fu2uw.roa (raw, json)
Hash identifier: f7Fx/6OTf/ktcM8IxD8m+/K+/8kQL0F2zDEJFMd2eac=
Subject key identifier: 1B:E1:48:7B:00:F2:61:44:5D:54:15:FC:EF:ED:E9:87:E1:6E:DA:EC
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 0197658F94434A85EEF66BF54A3EE83EB1CE
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/G-FIewDyYURdVBX87-3ph-Fu2uw.roa
Signing time: Thu 12 Jun 2025 19:13:17 +0000
ROA not before: Thu 12 Jun 2025 19:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 194.35.72.0/24 maxlen: 24
194.62.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:8f:94:43:4a:85:ee:f6:6b:f5:4a:3e:e8:3e:b1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Jun 12 19:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1be1487b00f261445d5415fcefede987e16edaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:79:25:ed:60:49:95:7e:72:a1:ab:37:cf:11:
96:c1:52:96:ee:8b:58:f8:93:84:cf:3a:2f:36:44:
cd:53:c3:be:c4:08:0d:72:fa:60:79:b5:02:2e:d1:
be:d4:69:31:82:b9:07:1d:8c:f5:c7:31:f6:22:c0:
45:e6:9a:b4:00:85:2a:ed:80:0b:98:cd:05:ff:62:
92:e3:be:d2:e9:59:15:8e:65:35:78:53:1b:e8:9c:
68:7d:fa:5c:28:3b:e9:ac:92:d7:2e:1b:df:62:7d:
26:0c:11:6b:0e:6a:41:65:4f:a4:1d:4b:de:ad:ff:
bc:14:d7:43:e4:52:f3:ab:b4:83:f9:bf:cc:f7:3b:
93:03:10:3e:5f:b9:ee:60:cf:33:17:59:49:fc:65:
46:15:fe:5a:3a:d6:48:21:16:50:23:62:0c:89:87:
83:eb:e9:6c:87:48:60:de:38:bf:8d:a1:46:b4:69:
c2:f9:d4:61:e0:17:a0:f9:b2:b0:18:af:8f:8e:c1:
0d:4e:1b:03:e3:6d:18:c4:06:a7:87:42:07:51:49:
fd:b8:01:40:04:b0:f6:ff:24:c2:b2:9e:f1:28:cc:
a8:34:a9:98:d0:ef:66:f9:d3:ef:2e:42:0a:70:68:
2e:91:23:7a:72:0a:f4:f9:49:d5:38:4f:57:70:a9:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E1:48:7B:00:F2:61:44:5D:54:15:FC:EF:ED:E9:87:E1:6E:DA:EC
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/G-FIewDyYURdVBX87-3ph-Fu2uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.72.0/24
194.62.210.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:f3:9d:ce:5e:d0:9b:f5:a6:a4:ed:f8:59:db:b5:bf:2a:8b:
6c:ae:a0:a9:da:0d:ac:02:28:25:95:49:03:a9:03:8f:80:e3:
22:31:b0:2f:30:2d:b2:4d:cb:21:52:4e:0b:f4:42:43:7d:95:
6c:39:3c:6f:52:a2:51:b0:2e:35:9d:6e:1b:6b:c9:d3:ee:36:
57:bd:fa:6a:34:01:8c:d5:03:34:da:59:0d:84:2b:23:2d:97:
21:13:a7:93:38:cd:5b:7e:c4:6c:6a:ea:58:f1:4c:d6:03:76:
50:4f:1b:40:a1:88:42:44:5b:bc:38:1c:6d:86:ed:80:c2:54:
68:89:6f:5a:dc:5a:37:5b:cf:a3:e7:32:77:17:b2:57:08:d2:
2a:ca:51:ff:0b:70:45:c8:6e:49:1e:8c:cd:26:49:47:71:38:
d5:ca:df:05:9e:5e:72:23:cf:3e:18:ed:1c:ea:a7:37:2a:83:
a2:a9:27:86:33:45:ff:dd:8d:3d:ad:34:e0:32:1b:c3:f6:ff:
93:73:85:6c:65:91:e4:06:72:2a:32:56:89:41:7e:fc:c4:65:
08:2c:ce:ff:59:3b:56:46:68:4c:82:e2:46:e6:e3:65:15:5b:
cc:52:f3:d5:af:e9:93:37:6a:fe:4b:3b:7e:a7:de:3b:1a:4b:
d9:b4:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:44:07 2025 by rpki-client