Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/9IzClk2cOa1HvrSqnxJFFpqt66M.roa
File: 9IzClk2cOa1HvrSqnxJFFpqt66M.roa (raw, json)
Hash identifier: rklyjGu+NArQTZ8EAeTWx20YU2+30eONSR24wbRMT30=
Subject key identifier: F4:8C:C2:96:4D:9C:39:AD:47:BE:B4:AA:9F:12:45:16:9A:AD:EB:A3
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0198765FD6F829888E06EAA3C8F70B413F2B
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/9IzClk2cOa1HvrSqnxJFFpqt66M.roa
Signing time: Mon 04 Aug 2025 18:37:29 +0000
ROA not before: Mon 04 Aug 2025 18:37:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 84.247.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:5f:d6:f8:29:88:8e:06:ea:a3:c8:f7:0b:41:3f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 4 18:37:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f48cc2964d9c39ad47beb4aa9f1245169aadeba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:27:50:50:19:d8:f8:b0:bc:42:5a:ab:13:
15:70:ee:7f:e5:73:a8:a4:8e:3a:e6:75:9e:08:26:
49:2e:ba:ec:d4:07:3f:5f:23:b5:ce:3c:7c:2f:3b:
3a:bc:85:9d:f6:43:b4:49:83:db:50:00:f9:1b:17:
bd:f5:a6:f5:38:8e:c9:c7:dd:fe:a5:0c:56:19:86:
b5:ea:1b:9c:dd:9e:f8:72:8e:62:45:aa:dd:6f:9a:
e1:55:21:64:b0:57:e5:9a:72:7c:a8:50:df:59:0d:
19:7a:04:d4:cd:83:fe:c3:1d:96:ac:23:e2:34:a0:
22:82:16:57:4c:2f:96:40:95:96:2e:6a:96:19:b3:
92:10:cb:f4:74:e6:fc:a6:ab:b9:45:5a:a2:9b:6b:
e6:22:a9:12:dc:2c:1e:2b:df:09:26:4e:51:97:87:
89:3a:b2:a6:c7:c9:60:41:76:d1:44:2c:27:d1:d3:
c6:81:1b:e3:75:cf:7c:63:15:b4:91:f0:bd:7a:29:
b7:99:b1:a4:69:b6:c1:d0:fd:e5:2b:40:82:d8:4e:
22:86:66:c2:19:22:ff:14:36:d7:4b:a8:66:23:e3:
79:cf:dc:04:01:b6:9c:1e:0a:51:8a:02:26:2d:52:
10:61:8c:5b:55:05:55:aa:ae:24:14:dc:4f:2a:85:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8C:C2:96:4D:9C:39:AD:47:BE:B4:AA:9F:12:45:16:9A:AD:EB:A3
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/9IzClk2cOa1HvrSqnxJFFpqt66M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:9e:a0:11:4b:ae:5c:02:42:45:cd:ef:6b:da:95:58:7f:58:
1a:7f:d8:9a:e6:5b:84:c0:48:37:e7:51:01:3a:36:cd:be:01:
b3:5c:f8:9b:f1:d8:85:cf:a3:a1:ea:dd:09:8c:46:ed:a8:8e:
f0:12:8c:1d:82:fe:c5:8d:7d:8f:33:31:56:3b:9d:30:f1:a2:
b3:04:2e:71:83:b8:a1:44:bc:3f:72:8a:82:29:47:1d:b1:e8:
be:03:94:aa:bb:66:a7:97:3e:6f:6f:bd:aa:42:4e:86:2f:39:
37:01:cb:d5:e9:23:db:8a:3d:0e:90:ec:59:25:c5:a9:61:74:
cc:75:8a:da:28:2c:8a:96:a7:1a:20:04:5b:85:52:ce:e2:c8:
28:d1:68:fb:7b:1f:d8:a6:82:03:cd:c1:ea:e8:f1:44:65:08:
86:f0:08:4d:a7:1c:ad:55:84:06:50:0a:23:55:27:18:da:68:
20:d6:39:30:bd:8a:a1:79:3f:f2:b6:d4:85:e0:74:2f:8d:11:
85:5e:fd:27:51:cf:e0:00:10:27:7b:3b:6b:b9:a5:15:0c:f5:
8f:23:2b:2c:44:38:f3:be:da:2f:65:86:34:d2:57:8a:f7:88:
26:9b:7c:e1:36:4d:8a:65:cc:55:2f:b1:c7:b4:50:c4:a2:83:
12:7d:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:50 2025 by rpki-client