Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lQUGhG-39DRBNfglc9s2l03eM7A.roa
File: lQUGhG-39DRBNfglc9s2l03eM7A.roa (raw, json)
Hash identifier: rn09A91Q6gQVAQbqPEGAYFXMNtL9SmFnUQNDdv5BTnE=
Subject key identifier: 95:05:06:84:6F:B7:F4:34:41:35:F8:25:73:DB:36:97:4D:DE:33:B0
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019817359B303199A3933D2BCAF4C9ABF256
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lQUGhG-39DRBNfglc9s2l03eM7A.roa
Signing time: Thu 17 Jul 2025 07:07:25 +0000
ROA not before: Thu 17 Jul 2025 07:07:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207416
IP address blocks: 147.45.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:17:35:9b:30:31:99:a3:93:3d:2b:ca:f4:c9:ab:f2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 17 07:07:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=950506846fb7f4344135f82573db36974dde33b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:47:b0:c5:7d:1c:24:43:62:d2:c7:d8:09:
d6:c5:67:48:4f:d7:74:04:06:a0:ae:2d:26:bd:b5:
08:f7:10:91:c5:04:41:f3:25:a0:12:e7:8d:89:38:
d0:16:d7:bf:5d:26:d7:ea:27:2b:7b:70:f8:08:22:
c8:aa:f1:c8:40:0b:12:8e:66:2d:8f:4f:3d:6e:cf:
68:53:94:55:a0:e7:de:6d:79:de:4e:e3:5e:70:b8:
38:fc:62:9d:d4:fa:ac:9d:8d:0a:3a:74:01:7f:da:
94:9f:fd:b3:93:6b:ad:23:4c:76:d4:9e:22:cb:66:
e2:6b:9a:50:69:11:44:a9:d2:31:2a:a6:8d:ef:62:
17:15:e9:01:1b:db:70:51:c6:d6:c3:01:93:95:51:
84:10:ac:ac:13:5c:1e:76:1e:a9:a7:93:54:08:35:
fd:f4:e4:9c:5d:1c:bb:92:2f:e2:52:9e:07:9f:ba:
77:52:36:31:ea:3c:0a:78:9b:df:bc:74:63:f3:e3:
12:20:9e:79:9b:05:a5:b0:18:7e:8f:47:eb:c0:38:
e3:26:89:ed:e4:e2:0b:b1:e9:04:48:95:77:2d:0e:
d3:07:de:a7:04:59:cb:79:18:d6:f4:af:c8:f0:68:
f5:8e:0a:a1:b8:a3:fa:95:54:1a:a9:11:a3:2e:e0:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:05:06:84:6F:B7:F4:34:41:35:F8:25:73:DB:36:97:4D:DE:33:B0
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lQUGhG-39DRBNfglc9s2l03eM7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.210.0/24
Signature Algorithm: sha256WithRSAEncryption
87:bf:4a:54:7d:a8:27:a8:19:fb:c0:d2:39:ba:a1:9f:53:2e:
74:d1:7a:b5:27:8e:bc:cc:00:11:41:35:f8:a8:43:bc:68:73:
d7:5d:f4:02:b2:0b:cd:a1:e1:8f:ce:3c:2c:64:53:91:f1:b2:
b2:8e:f4:d2:cc:92:ef:79:8e:6d:25:f3:be:23:a1:6d:ba:8b:
b2:65:a6:5b:d0:dd:47:7c:12:61:19:88:48:9b:0c:2f:67:53:
0c:11:6b:10:53:cc:a1:4a:46:7f:e2:a1:96:86:66:cf:9c:22:
a2:70:8c:f5:02:0e:b0:e9:46:9c:85:1b:11:dc:a1:1f:d9:5b:
8e:1a:d5:a4:63:a0:a0:9f:ec:15:d1:d6:e1:36:56:93:12:3e:
1c:9e:ce:05:7c:20:f6:71:56:61:96:f6:a2:ef:fd:f2:5e:ba:
e6:39:96:87:dd:48:ef:01:7d:50:be:54:e6:af:7f:87:31:6f:
20:79:37:78:7b:ce:e1:fd:33:80:be:51:a8:4d:ba:8a:81:c5:
db:e2:d2:cc:0b:26:c8:84:ec:28:87:39:e0:61:73:43:a2:19:
5f:f0:9a:ff:57:91:5b:81:2b:25:82:82:83:f8:b3:07:00:69:
10:9d:bd:2e:35:6a:14:67:9b:fb:3c:6a:c1:71:73:0d:56:db:
1e:27:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:17:59 2025 by rpki-client