Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/u8eSG8Tv1dGu5xy9LAZN3LadMO0.roa
File: u8eSG8Tv1dGu5xy9LAZN3LadMO0.roa (raw, json)
Hash identifier: 8ftGbQK6TKosgJWFS94PMu1Zj3OMZJC66zppWk0qzYg=
Subject key identifier: BB:C7:92:1B:C4:EF:D5:D1:AE:E7:1C:BD:2C:06:4D:DC:B6:9D:30:ED
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 01978195A71E4CC0C65D512AAA8DA8F53C62
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/u8eSG8Tv1dGu5xy9LAZN3LadMO0.roa
Signing time: Wed 18 Jun 2025 05:49:17 +0000
ROA not before: Wed 18 Jun 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204227
IP address blocks: 193.57.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:95:a7:1e:4c:c0:c6:5d:51:2a:aa:8d:a8:f5:3c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jun 18 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbc7921bc4efd5d1aee71cbd2c064ddcb69d30ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:fa:b5:5c:54:0b:db:47:61:70:02:04:e3:
fb:b9:96:8d:fc:88:44:14:e4:34:d9:7a:d9:6a:45:
cb:d9:91:35:e1:3e:8a:47:3b:00:60:35:75:a6:4e:
86:8a:5c:ba:6a:67:30:d7:f3:79:39:81:40:c5:6b:
be:29:4b:1c:f2:96:4c:78:13:48:b1:2a:c6:97:8e:
cd:20:ca:7d:c4:83:2c:ee:7b:73:88:40:14:51:66:
cf:52:f0:6b:96:53:73:16:50:cb:80:8a:67:d2:a1:
70:76:fc:ba:bd:cf:45:5b:dc:3b:0e:81:c5:33:ec:
f8:fa:73:ca:ca:6f:4b:81:31:71:b3:1b:e4:e7:3c:
22:a4:f6:91:bd:68:42:68:42:c2:96:7d:a8:4b:bb:
6d:ed:26:50:07:a6:df:94:ff:77:54:5a:e2:13:57:
af:64:44:1d:90:b5:4a:f9:7f:5e:6b:4f:4e:5d:a2:
6b:dd:11:7c:96:75:73:f5:30:c9:61:5e:5a:ef:4a:
39:a6:c4:af:12:5a:c6:66:68:31:27:a1:01:31:da:
c6:ae:f8:03:c4:5d:55:ff:63:64:bd:69:4f:31:b1:
dd:e2:c4:1d:80:fa:19:3e:40:72:34:6c:83:a1:d7:
da:d8:0f:4d:2b:d4:3a:ed:8f:09:ca:c3:3a:02:17:
8f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C7:92:1B:C4:EF:D5:D1:AE:E7:1C:BD:2C:06:4D:DC:B6:9D:30:ED
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/u8eSG8Tv1dGu5xy9LAZN3LadMO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.20.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ed:26:75:ee:52:0e:55:c9:7a:51:5f:91:b2:8d:56:f4:6f:
28:b6:24:d6:9b:04:0a:2d:db:68:e3:06:a7:73:db:4a:82:05:
82:f0:79:60:da:cf:d0:ee:9c:94:dc:fa:11:7f:ce:d2:56:07:
76:d0:b4:0e:2d:03:fd:9d:fd:e1:bd:f0:1f:56:09:89:c0:2a:
e1:28:b4:21:16:86:14:20:0c:8f:88:ce:d3:22:52:53:10:75:
3a:d7:da:d7:9f:e7:69:df:81:d7:24:a6:e4:1f:cb:5a:4b:39:
e2:ad:03:2d:11:5d:89:b4:eb:02:87:51:1e:61:89:4c:4f:85:
22:2f:f9:34:1c:72:41:6d:fb:32:56:01:08:4d:c1:08:b0:99:
c8:27:20:0a:f6:1d:8b:70:9a:05:7d:04:29:c6:6c:d9:85:e5:
3e:81:2d:f9:8f:36:89:01:5f:cf:11:f1:93:c1:9b:aa:ed:07:
5b:be:69:db:22:3e:d9:ac:07:e2:e6:b2:0c:c8:f8:51:1a:ba:
01:1d:c2:81:9d:53:80:f9:2b:bd:49:7f:e1:7c:54:5a:e4:d4:
4d:bc:92:b3:05:3d:de:2d:4f:50:9e:52:ca:cb:8e:dd:c5:6d:
93:de:03:bc:00:9e:d5:43:27:f9:36:1d:17:fe:d0:10:64:fb:
32:2f:04:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:10:23 2025 by rpki-client