Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/CoUsP7_oLqXmI4GuJPmWe-DgrMk.roa
File: CoUsP7_oLqXmI4GuJPmWe-DgrMk.roa (raw, json)
Hash identifier: CDiTJKYK+x288ogOQUhmmMXeMfsax3zovLJjdT/l5es=
Subject key identifier: 0A:85:2C:3F:BF:E8:2E:A5:E6:23:81:AE:24:F9:96:7B:E0:E0:AC:C9
Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial: 01983DE576C832298520FF1B0E214D23A125
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/CoUsP7_oLqXmI4GuJPmWe-DgrMk.roa
Signing time: Thu 24 Jul 2025 19:25:05 +0000
ROA not before: Thu 24 Jul 2025 19:25:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28800
IP address blocks: 193.41.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:e5:76:c8:32:29:85:20:ff:1b:0e:21:4d:23:a1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Validity
Not Before: Jul 24 19:25:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a852c3fbfe82ea5e62381ae24f9967be0e0acc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:0a:96:8d:cb:23:8b:97:c8:af:7b:a8:53:
d7:ad:51:5e:52:b7:61:03:4e:47:a4:c9:6d:63:be:
ab:80:9a:f0:f2:08:cf:6d:b7:95:dc:a6:12:b4:47:
9e:e9:cb:17:83:40:f8:0e:6e:f0:f9:41:b4:5b:ad:
e4:bd:2b:df:17:36:db:aa:90:6f:78:65:67:54:4a:
81:25:f3:a4:27:78:25:24:e7:9a:41:55:83:78:e9:
71:23:90:44:96:55:da:56:2b:24:e7:cb:65:ac:e5:
69:9b:24:5a:f2:81:44:0e:60:21:89:97:53:bc:84:
4f:ac:9c:52:63:75:f4:dc:bb:0a:8f:24:a7:0e:21:
d4:ed:c9:dd:6d:0e:06:da:e5:eb:9d:32:3a:e2:26:
01:33:02:50:7b:01:ea:d1:7e:86:59:6a:fd:b2:7c:
54:15:7f:92:66:1c:1e:66:01:38:70:92:f3:17:8f:
f9:6b:7c:ed:b2:5e:89:d5:51:8b:ca:cd:9e:e1:76:
50:19:97:6e:61:57:3a:dc:e1:e8:ea:b0:2c:54:73:
d2:11:1f:41:51:4f:af:0a:54:45:b9:9a:bc:ee:d2:
d4:18:a3:6e:f8:c6:49:ca:b7:08:e1:71:f6:44:22:
7c:6e:ac:b0:7e:a8:96:b9:d5:15:fd:7a:8c:51:44:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:85:2C:3F:BF:E8:2E:A5:E6:23:81:AE:24:F9:96:7B:E0:E0:AC:C9
X509v3 Authority Key Identifier:
keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/CoUsP7_oLqXmI4GuJPmWe-DgrMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.140.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:5a:c5:e6:7a:fa:a4:7a:cb:d7:32:87:70:7c:eb:3b:79:b8:
98:9a:19:c0:3b:6e:82:e4:ac:99:78:60:f8:53:25:e4:bf:ad:
07:7d:67:29:6a:1d:f7:8b:30:7a:4f:a2:9d:2e:4f:55:18:ea:
5c:7b:dc:54:de:c6:19:d3:30:65:fc:68:84:fb:d5:8f:53:65:
67:ee:ce:49:95:6a:e2:c7:2b:e9:d6:20:35:88:c2:00:d2:76:
bf:b2:a3:bc:30:e9:7b:42:2f:47:54:20:8e:53:89:e4:3c:7a:
99:72:2c:06:93:0d:ab:52:37:1c:08:c4:6a:6d:08:a3:c6:5d:
ba:f1:b1:e2:31:e2:a9:1e:6e:40:65:ec:b1:ce:30:f3:ac:d9:
3f:bb:53:7c:8b:e1:62:6c:df:16:12:41:26:7b:59:5a:f3:9d:
c1:b4:dd:7a:d7:55:cd:ab:f9:42:d1:db:92:ab:a4:e8:0e:c8:
b6:59:6d:cc:92:b4:20:59:aa:69:b2:8b:02:05:25:f8:c6:b3:
59:12:5f:8d:07:cd:ad:d4:ed:df:12:64:24:06:aa:60:8d:6a:
01:db:6a:5a:6a:93:10:57:88:51:91:1d:0e:91:83:43:63:53:
71:cc:5b:ab:de:7a:44:42:01:24:ef:7e:16:c9:74:11:a0:ef:
0f:4a:36:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:05:56 2025 by rpki-client