Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/RBC7xRCUrzAV3xcSRBDVibZqCTI.roa
File: RBC7xRCUrzAV3xcSRBDVibZqCTI.roa (raw, json)
Hash identifier: WHOYeqrd+Q7s/pv59QgW/Re/r+BuES3bFI1GIinCkZM=
Subject key identifier: 44:10:BB:C5:10:94:AF:30:15:DF:17:12:44:10:D5:89:B6:6A:09:32
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019633E26FD1721685C772B9D3D2B1017E8F
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/RBC7xRCUrzAV3xcSRBDVibZqCTI.roa
Signing time: Mon 14 Apr 2025 10:39:59 +0000
ROA not before: Mon 14 Apr 2025 10:39:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 213.182.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:e2:6f:d1:72:16:85:c7:72:b9:d3:d2:b1:01:7e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Apr 14 10:39:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4410bbc51094af3015df17124410d589b66a0932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:f0:63:00:3b:3f:42:c3:26:ed:87:ea:bf:
cd:80:59:52:e7:22:b8:f4:44:d3:50:b6:c2:b6:f9:
20:ec:1d:f1:9e:c4:4e:87:74:f5:fc:0b:7c:c4:db:
80:8c:9e:fd:a2:99:d9:43:05:33:07:a2:ad:36:1f:
ce:b0:59:c7:59:33:aa:c8:3e:23:bc:55:f6:03:33:
59:82:be:07:15:8b:bc:94:73:5c:30:bc:b8:58:2a:
9d:83:67:32:bc:b1:d8:df:05:d9:eb:62:f0:c2:4a:
bc:4d:9e:4b:4e:a3:f1:63:00:e6:6e:d7:5f:a2:8f:
9a:db:86:fd:02:6e:46:68:35:7f:77:d9:5f:d0:07:
c4:ee:39:7c:f5:7b:f8:64:2d:11:78:6d:ba:c7:40:
40:29:4d:91:2c:e5:1e:65:10:a2:6f:28:78:d5:7b:
40:b8:70:d1:4a:c2:9f:f2:23:90:27:48:eb:ba:f9:
38:7c:7c:72:f9:23:e1:56:35:4c:a5:4e:9f:ef:7a:
c0:6a:2e:ba:66:eb:56:dd:26:7b:b7:c8:43:a8:3d:
49:39:18:58:7b:1e:73:76:ff:22:83:ed:da:2b:7b:
a4:67:32:47:b6:ed:a3:1c:f3:b1:8c:98:aa:17:dd:
a6:7d:c2:e3:92:40:ee:fc:81:f9:85:6a:52:37:5a:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:10:BB:C5:10:94:AF:30:15:DF:17:12:44:10:D5:89:B6:6A:09:32
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/RBC7xRCUrzAV3xcSRBDVibZqCTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.198.0/24
Signature Algorithm: sha256WithRSAEncryption
14:6a:f9:ce:d4:c5:47:03:75:16:ad:20:27:04:f6:be:ed:1b:
30:40:2e:fc:cb:63:12:ea:1f:6b:30:fd:56:5b:57:02:1f:80:
d4:78:16:08:5c:e3:8d:99:7d:6b:b5:68:76:e7:ee:c7:ee:4b:
48:a7:81:d9:e3:b2:3f:23:63:33:10:ba:5b:e4:33:f7:7e:c8:
f5:a0:fb:29:ba:9c:40:f6:76:0f:42:90:d2:3e:d2:6d:03:e8:
19:01:5c:79:88:f2:d3:8c:2d:0e:65:4c:99:5b:5e:25:39:78:
c1:c0:0e:1b:80:28:3a:d0:f2:99:62:df:77:f4:e1:78:da:94:
9e:45:36:b0:b6:b6:60:6f:1b:57:c5:f4:70:aa:73:3d:8a:27:
33:0b:cb:67:fd:34:85:8c:e4:18:99:74:01:99:53:92:91:30:
1b:0a:84:b2:20:b8:69:b2:ea:45:c8:99:f4:3d:bc:36:dd:cb:
a5:76:37:cd:ab:4c:c7:8b:22:d4:31:54:d1:78:ff:fc:db:1c:
fd:f2:7f:5d:13:df:a3:a7:54:78:aa:68:a8:54:1f:c5:a4:77:
36:a1:3b:70:bd:f4:33:6f:fa:46:a7:15:0c:48:a1:d9:5a:5a:
d4:f9:89:5f:d0:b7:4c:b8:b6:55:73:47:1e:b6:7d:52:bf:71:
5d:f0:36:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:09:45 2025 by rpki-client