Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/0wq7nKaScS0pbrNtDp5CCYa40I0.roa
File: 0wq7nKaScS0pbrNtDp5CCYa40I0.roa (raw, json)
Hash identifier: YLAnQ899fen9G75o1VQ4WG3xmrR1aE24+aqGBivGfPg=
Subject key identifier: D3:0A:BB:9C:A6:92:71:2D:29:6E:B3:6D:0E:9E:42:09:86:B8:D0:8D
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 019422FBB8BBE2420DA8B7738CD36A6F95BA
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/0wq7nKaScS0pbrNtDp5CCYa40I0.roa
Signing time: Wed 01 Jan 2025 17:48:29 +0000
ROA not before: Wed 01 Jan 2025 17:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.141.193.0/24 maxlen: 24
2a04:ac0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b8:bb:e2:42:0d:a8:b7:73:8c:d3:6a:6f:95:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Jan 1 17:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d30abb9ca692712d296eb36d0e9e420986b8d08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:76:f5:c8:36:44:18:03:36:ef:4c:26:e1:
af:21:b4:8a:c1:7e:32:e4:29:6f:60:17:46:34:cd:
b1:1a:aa:7c:36:63:17:45:71:3a:be:ce:09:59:40:
7c:f4:c3:85:23:00:1e:cf:9b:b4:01:3a:af:f0:6b:
7a:4d:c6:81:0f:27:54:c8:e3:b5:74:6e:2b:4e:ae:
2d:04:00:3b:9b:31:81:1d:f3:5e:6b:3e:3e:74:a6:
dc:d3:2d:72:34:32:70:5a:da:18:32:1c:58:97:f3:
b1:51:3c:e0:e5:f0:58:ee:3a:e6:50:48:c1:e6:f9:
e7:e3:c4:c5:55:3f:42:ac:29:4c:88:62:4d:b0:35:
4e:65:0a:17:67:dc:e4:4c:05:71:25:11:31:5e:ff:
f6:ba:2c:26:33:72:13:7f:08:fb:8f:a9:0f:81:cc:
b2:86:f1:bc:30:18:b0:12:6f:8d:dc:8d:ef:06:ad:
6a:b0:95:2c:d7:b0:a9:4e:3a:cd:ed:12:19:7a:8c:
18:d1:d6:db:91:e8:e5:e5:41:af:21:1e:89:e3:79:
da:30:41:00:9d:0d:f1:eb:b7:51:0b:29:c3:c9:c7:
eb:c9:05:d4:00:f5:28:ad:29:7f:73:42:26:04:dc:
31:fd:ea:80:9d:61:fd:1f:b7:f2:dc:89:b4:af:0a:
6d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0A:BB:9C:A6:92:71:2D:29:6E:B3:6D:0E:9E:42:09:86:B8:D0:8D
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/0wq7nKaScS0pbrNtDp5CCYa40I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.193.0/24
IPv6:
2a04:ac0:2::/48
Signature Algorithm: sha256WithRSAEncryption
48:0f:02:5f:45:ec:e6:33:81:c6:17:8b:b2:43:bb:68:4c:dd:
23:06:cd:08:3e:6b:d2:eb:7c:f8:e9:e4:7d:49:95:e4:8a:57:
7d:0e:40:b9:08:55:c6:11:e4:02:18:cb:21:fe:63:61:86:94:
76:0e:e8:f0:18:a2:dd:48:c9:44:55:f4:a7:84:60:c0:1b:71:
a1:e8:25:c2:3f:ee:8f:41:55:df:70:48:6e:97:76:87:47:8d:
73:4a:91:b1:5f:3f:8a:25:ef:33:c2:d5:25:6b:a5:b9:6c:fb:
b4:02:c7:67:00:84:c8:68:dc:43:ac:6d:c7:82:dd:b5:21:1b:
c8:34:eb:b5:9d:26:7e:d6:aa:6d:e0:df:9c:15:49:c8:db:5d:
17:f5:26:eb:ab:fe:49:a5:48:50:79:80:a8:9c:99:ee:33:b0:
52:b9:24:7f:42:28:d8:d3:a4:78:63:15:00:75:c9:fe:b4:71:
c0:e0:13:0f:63:22:9c:1c:f8:e7:12:0a:78:0f:a4:16:06:19:
40:49:6f:0a:3a:7e:48:1b:90:1c:fe:34:bf:b5:68:75:29:45:
98:f9:e2:f5:2a:c0:b6:40:2b:08:ba:58:48:ac:ef:23:39:30:
2d:b2:35:62:44:f7:0f:20:45:58:2e:25:f9:21:8a:39:fc:b2:
fe:46:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:11 2025 by rpki-client