Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ph2bN4BWFOE_u4clD6K95N97yeg.roa
File: ph2bN4BWFOE_u4clD6K95N97yeg.roa (raw, json)
Hash identifier: vElgG3U1rw9Sm4HKdAMuf2Zg2uQOb/Z5bna4NYnitk0=
Subject key identifier: A6:1D:9B:37:80:56:14:E1:3F:BB:87:25:0F:A2:BD:E4:DF:7B:C9:E8
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0197596D6C8D293B9B844E9C505E3C286D06
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ph2bN4BWFOE_u4clD6K95N97yeg.roa
Signing time: Tue 10 Jun 2025 10:40:32 +0000
ROA not before: Tue 10 Jun 2025 10:40:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209298
IP address blocks: 213.226.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 19:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:6d:6c:8d:29:3b:9b:84:4e:9c:50:5e:3c:28:6d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jun 10 10:40:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a61d9b37805614e13fbb87250fa2bde4df7bc9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:3f:e4:62:22:61:53:48:7b:88:77:58:8e:
b0:ae:00:58:f1:26:dc:5c:e3:09:da:60:88:d1:b4:
ec:2d:5a:6c:4f:89:08:c8:a4:39:eb:72:cd:35:34:
7b:b0:6f:1c:68:e6:61:1b:e4:19:7a:e0:2b:cc:e9:
9d:45:cd:51:ff:58:50:6d:64:e1:d3:78:9f:d1:01:
5f:18:75:8a:b6:2f:92:51:40:7a:b9:fc:07:d6:e7:
b9:89:99:04:53:d7:49:29:89:58:99:f1:7c:f6:c8:
95:34:73:ba:98:80:e2:e1:42:b3:fe:8d:48:39:2a:
ff:a7:df:a7:38:10:91:1e:9f:4a:a4:89:42:ca:f3:
79:7c:d2:85:3c:5b:d0:94:82:42:a5:c0:27:22:99:
f4:95:e1:55:14:40:d0:c9:4c:44:30:56:11:b6:c5:
b8:a4:d0:e0:67:02:2b:3c:fb:92:dd:8a:93:dc:9a:
f2:f2:fc:3b:74:72:ce:d6:60:ac:8c:e7:8b:56:ab:
63:20:43:a0:48:74:53:8e:9c:d6:37:a7:bc:cd:13:
e0:9f:9f:97:f7:e7:b3:0d:18:cb:72:3a:27:b0:1e:
22:5b:b2:1b:b9:b6:35:87:3d:10:a6:44:f6:a4:19:
cc:98:c1:3a:da:06:b3:b3:49:ae:97:97:d9:3e:78:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1D:9B:37:80:56:14:E1:3F:BB:87:25:0F:A2:BD:E4:DF:7B:C9:E8
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ph2bN4BWFOE_u4clD6K95N97yeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.113.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0e:88:ea:43:3d:b9:cb:be:f9:87:37:20:5d:88:e4:4c:ba:
3a:76:c4:8b:95:31:e5:88:ae:2a:9f:96:5a:d2:3e:ec:85:c0:
d8:b0:6d:64:0d:83:44:7a:77:8a:83:0a:b9:a3:cc:e4:83:41:
06:d3:56:8d:7d:a4:7f:0f:16:02:e5:dc:b7:19:75:28:30:ba:
27:a3:88:1a:3c:5f:02:f2:31:1a:c7:dc:38:69:4a:dd:49:f3:
d1:7b:74:79:98:a5:8c:91:86:42:30:16:79:51:f8:b1:d1:71:
44:a1:e6:3c:a4:b3:72:80:72:6f:86:eb:26:90:24:d4:df:e8:
fd:4f:07:ad:91:37:5d:66:e8:6b:d4:1a:b7:18:d3:60:3e:66:
4f:bd:b2:1d:ed:45:ff:d2:40:03:e1:31:57:12:6d:3f:60:06:
a0:2a:5d:3b:0d:94:19:f7:5c:8b:d7:f1:8b:87:07:7d:65:ce:
90:8a:f5:7b:94:5a:ec:a8:99:15:6c:d5:84:74:9c:c6:ac:b7:
fe:92:43:de:6d:7e:92:72:fa:1a:e9:ef:f1:e1:09:63:9b:60:
51:8a:e8:f2:03:9a:59:f9:ea:e7:4c:40:7f:54:05:4f:95:c5:
b1:a0:33:2a:d8:aa:d6:05:62:f6:1c:c2:71:e0:2a:df:76:de:
b8:bd:e8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:07:01 2025 by rpki-client