Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ArHrFThvFGbv5lTjCZuEcSS5fLA.roa
File: ArHrFThvFGbv5lTjCZuEcSS5fLA.roa (raw, json)
Hash identifier: ihzxOwJ1kmpKWaGVR8vGnWB1orCttqp9k/NncJtGxdI=
Subject key identifier: 02:B1:EB:15:38:6F:14:66:EF:E6:54:E3:09:9B:84:71:24:B9:7C:B0
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0196B8B80855590093014E648CBCD5927AFF
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ArHrFThvFGbv5lTjCZuEcSS5fLA.roa
Signing time: Sat 10 May 2025 05:43:10 +0000
ROA not before: Sat 10 May 2025 05:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197071
IP address blocks: 92.62.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:b8:08:55:59:00:93:01:4e:64:8c:bc:d5:92:7a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: May 10 05:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02b1eb15386f1466efe654e3099b847124b97cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:f8:d4:67:04:e3:83:90:18:41:eb:2b:d6:
9c:69:1e:a5:1f:f1:7a:34:11:d7:e2:93:90:3c:eb:
0d:f4:46:7d:c4:2e:6c:fe:83:ed:25:0b:30:e0:b0:
50:1e:36:64:0e:ea:6e:25:b0:9e:d4:09:2a:b4:aa:
01:bb:ee:db:7f:d5:23:36:32:2d:4c:e0:f7:65:d0:
0c:01:d1:53:11:fa:0e:ed:0f:59:2f:26:f0:5f:be:
4c:3f:06:56:43:e1:c2:72:47:f4:b9:d7:4c:81:02:
ee:4e:db:3a:00:2a:25:24:17:d5:fa:c5:7d:4f:bb:
d8:c2:1f:75:f8:ec:0e:4d:d8:f4:47:fb:68:ec:42:
07:95:1b:46:0d:b3:30:9d:ca:1d:64:2f:9c:96:69:
73:0d:2d:78:ff:a3:e9:e7:18:56:6a:60:2a:46:69:
e4:7e:11:9b:13:1d:ce:f6:ab:b0:8d:70:ee:ef:1d:
c7:4e:c9:88:d2:05:28:3f:d4:87:cb:41:dc:2b:18:
76:b7:ac:39:ff:32:76:32:f8:b9:22:9b:6a:0d:76:
53:90:ff:d7:5c:0f:f7:f2:76:bf:b1:7c:f7:fd:89:
fa:6a:f8:73:53:c9:0b:6a:21:03:29:fd:61:0b:c2:
8f:31:cb:9e:08:b4:40:16:bb:bf:b1:eb:13:5c:f4:
01:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B1:EB:15:38:6F:14:66:EF:E6:54:E3:09:9B:84:71:24:B9:7C:B0
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ArHrFThvFGbv5lTjCZuEcSS5fLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:85:12:b9:a3:cd:36:2d:85:c2:e6:a9:d8:c6:54:d1:70:92:
44:c1:59:95:5d:2d:b4:e1:4c:bf:4b:e2:39:f1:0d:6d:c3:de:
e4:99:f6:b2:5c:62:4e:e7:a8:86:32:05:87:40:5d:b2:56:04:
51:32:b1:8e:e8:6c:46:63:0d:80:52:19:cf:85:33:84:d1:04:
f5:de:bc:d8:84:80:f3:8b:4b:0e:09:fc:35:eb:a6:2f:3c:88:
eb:76:2e:dc:dc:c7:86:d7:65:7e:70:8f:7f:e1:29:be:1e:00:
22:08:74:42:70:9b:08:dd:b5:6f:cc:ab:2c:25:81:11:f0:69:
12:14:3b:fa:66:98:ab:2c:1e:5e:8e:8f:2d:7e:04:40:ba:e9:
ba:f2:a1:e1:75:66:e4:23:a7:0c:e1:ae:6a:57:35:5f:04:30:
1e:57:ff:9c:dc:17:e2:ca:84:2c:45:32:d4:60:f3:98:bd:18:
72:d3:e5:34:b3:2d:d3:04:b9:63:4c:b6:c0:a6:a7:4d:40:63:
9b:3c:67:3e:de:18:6c:f0:00:e7:0f:21:7a:29:4e:9e:0d:70:
ff:d9:56:c4:66:1d:bc:24:9f:b2:be:2e:88:f8:02:97:81:6c:
17:67:bd:af:0b:82:c4:76:28:44:32:c1:3d:6e:f5:52:ec:0b:
e1:8b:29:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:21:01 2025 by rpki-client