Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/bRYjB3AE8kPZ-jGNzpvdv812wk4.roa
File: bRYjB3AE8kPZ-jGNzpvdv812wk4.roa (raw, json)
Hash identifier: 5JAiIf3iVrOU7HujG8SzAxkGZ4kTFT4GJBTPJ9taCeM=
Subject key identifier: 6D:16:23:07:70:04:F2:43:D9:FA:31:8D:CE:9B:DD:BF:CD:76:C2:4E
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 01975F74C5DB7BB18B8C6ADBB99DE88B88C2
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/bRYjB3AE8kPZ-jGNzpvdv812wk4.roa
Signing time: Wed 11 Jun 2025 14:46:17 +0000
ROA not before: Wed 11 Jun 2025 14:46:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215761
IP address blocks: 178.17.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:74:c5:db:7b:b1:8b:8c:6a:db:b9:9d:e8:8b:88:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Jun 11 14:46:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d1623077004f243d9fa318dce9bddbfcd76c24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:e4:a5:db:25:42:79:91:92:98:25:71:83:
ce:cd:6f:77:f3:83:79:6d:13:61:d9:1a:ba:e0:34:
6b:a0:c3:22:53:a6:f7:45:9f:65:7f:6d:17:0f:03:
56:d3:3f:ff:2d:87:bb:82:61:a4:e6:71:ad:ae:ac:
4d:52:13:c6:15:77:2c:5f:7a:06:67:74:5e:42:e3:
16:0c:c9:ad:48:2f:1b:d1:cc:90:20:e3:0d:cd:77:
c4:1b:48:90:0c:c4:65:a8:68:94:55:46:79:63:11:
16:21:0d:e2:f1:16:14:bd:6c:29:f4:73:3a:b6:c4:
55:bc:0f:c1:ee:68:e8:f1:61:a7:0e:3f:b8:83:6f:
57:3b:2b:aa:60:fa:55:66:50:e1:46:60:2f:83:f3:
e2:5e:85:cb:6f:75:4a:28:7e:53:86:61:ae:0b:cc:
c7:5c:78:59:22:e0:ae:88:3b:94:00:9b:43:1d:ce:
64:51:46:27:d0:1e:37:0e:af:72:0d:c7:cd:74:2a:
3f:1a:aa:d8:83:aa:e2:c6:85:8a:ca:0c:15:e7:c9:
cc:7c:4e:70:13:19:ab:0d:a4:d8:a9:9d:2c:17:ec:
6b:1a:84:2d:75:e6:5a:9a:54:92:3a:4e:9b:62:57:
17:03:f6:13:ad:e0:02:e4:e6:bd:f2:b1:27:a2:1b:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:16:23:07:70:04:F2:43:D9:FA:31:8D:CE:9B:DD:BF:CD:76:C2:4E
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/bRYjB3AE8kPZ-jGNzpvdv812wk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.48.0/20
Signature Algorithm: sha256WithRSAEncryption
af:95:9c:fa:cb:71:b2:f2:63:1a:9f:ef:3b:41:30:2b:7f:1f:
96:36:06:6b:d2:da:14:60:7e:52:b1:a6:48:69:57:22:77:e0:
82:cd:c5:73:33:fa:8a:69:92:12:4a:67:3d:c3:e3:5a:70:fe:
c6:eb:7f:90:5c:1c:fe:4d:2b:5b:b2:3c:d2:50:ce:13:e0:be:
62:34:ba:7f:96:ca:ba:7f:d2:74:5c:87:d7:01:23:e1:00:f4:
df:cd:44:e4:b9:b4:85:b2:af:16:05:82:29:ce:5f:31:8d:a4:
89:66:9e:33:eb:2b:5a:64:24:4d:f4:e6:e4:35:02:e8:ba:91:
6e:ff:d8:4f:0e:3c:93:ad:08:02:87:19:32:c9:73:07:09:1c:
fc:ec:77:5a:ac:ce:21:6a:15:35:0f:63:1f:d3:41:e3:5a:fe:
a8:6c:46:8f:67:2a:c9:12:4d:cb:ba:5e:4d:2c:b8:9e:8c:d1:
53:da:be:57:3d:f6:4b:b3:38:51:81:df:6e:71:47:d5:6c:55:
36:71:ef:90:d3:61:de:6b:d8:d5:34:08:eb:15:a3:54:1c:05:
14:8e:cf:9a:24:d1:78:89:26:65:00:3b:c6:64:e7:11:b8:34:
1e:13:05:95:d0:04:2d:be:fa:81:14:81:c5:2a:e1:eb:5e:4e:
37:b8:dd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:23:12 2025 by rpki-client