Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_kxKAFFROgItRU8B_sSRdeHw14A.roa
File: _kxKAFFROgItRU8B_sSRdeHw14A.roa (raw, json)
Hash identifier: UtnFV2CHVEHCIHtE7AUj/Z3ZL0mZhwomqKw1XJiJsfM=
Subject key identifier: FE:4C:4A:00:51:51:3A:02:2D:45:4F:01:FE:C4:91:75:E1:F0:D7:80
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0196CF0C959849913B2F4ECEB3D79CBEDE2C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_kxKAFFROgItRU8B_sSRdeHw14A.roa
Signing time: Wed 14 May 2025 13:47:10 +0000
ROA not before: Wed 14 May 2025 13:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59993
IP address blocks: 159.148.73.0/24 maxlen: 24
159.148.74.0/24 maxlen: 24
159.148.77.0/24 maxlen: 24
159.148.98.0/24 maxlen: 24
159.148.121.0/24 maxlen: 24
159.148.129.0/24 maxlen: 24
159.148.159.0/24 maxlen: 24
159.148.185.0/24 maxlen: 24
159.148.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:0c:95:98:49:91:3b:2f:4e:ce:b3:d7:9c:be:de:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: May 14 13:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe4c4a0051513a022d454f01fec49175e1f0d780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:6f:0e:88:30:44:f0:9e:34:e9:dd:58:95:
38:ac:2e:ac:79:c1:fd:0b:53:f9:e5:76:b5:10:c9:
1e:df:eb:f4:5e:59:98:0a:03:04:9b:55:60:73:26:
0f:b3:b3:6e:96:89:e3:12:85:3d:b7:42:af:2d:37:
7d:41:5f:a9:c3:dd:e3:76:3f:a4:e2:80:be:6c:e1:
71:fe:6d:0a:6f:bb:33:1d:3a:ee:dd:ef:35:2b:d8:
ef:35:05:27:5f:92:7b:a2:d6:a2:70:d9:8c:21:d1:
2b:10:5d:6d:92:f7:35:e6:04:8a:5f:fc:ac:c3:60:
17:c6:10:3a:c1:3c:20:b5:4b:51:b5:d9:15:55:0a:
2f:66:2e:c3:ea:f6:1e:8b:dc:95:4c:76:38:93:ea:
f1:df:3f:08:b4:5b:ab:4d:33:ea:cc:fb:f9:0e:21:
29:cc:ab:25:2f:ff:e8:13:c5:ac:47:02:86:65:ee:
a4:ee:f2:f9:6a:3c:50:3c:23:a4:c6:59:55:1b:0e:
6b:8d:18:51:b7:ea:91:da:c7:68:7d:1b:1a:e5:57:
7c:8e:84:e2:80:29:35:4c:74:e3:d7:b7:6e:cf:52:
7b:e2:c2:e6:f5:4f:1e:12:16:43:ec:fd:94:cb:f0:
4e:8d:2c:dc:e3:4b:a8:10:c2:a6:c8:a2:8a:60:71:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4C:4A:00:51:51:3A:02:2D:45:4F:01:FE:C4:91:75:E1:F0:D7:80
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/_kxKAFFROgItRU8B_sSRdeHw14A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.73.0-159.148.74.255
159.148.77.0/24
159.148.98.0/24
159.148.121.0/24
159.148.129.0/24
159.148.159.0/24
159.148.185.0/24
159.148.204.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0d:55:75:f1:53:6e:58:86:d4:ff:ba:89:67:95:44:b7:6f:
8f:e0:1c:a6:a1:94:bd:d6:ff:f0:f3:6b:74:3d:72:0f:b5:b0:
3f:1c:db:2b:50:79:b2:04:22:07:c7:c6:cb:67:58:ff:99:ae:
c2:ee:97:53:f4:96:df:42:d3:6c:81:73:26:4f:a4:bf:6e:9a:
a1:6b:47:ea:ad:e6:61:3a:6c:5f:fc:aa:62:ad:19:f0:b0:b9:
10:2d:c1:77:4d:b6:9b:9e:c4:50:14:5c:c9:26:30:d0:d0:65:
63:c2:3a:97:67:64:ef:79:b5:a5:74:dc:ad:d0:c2:76:cd:cc:
d4:b3:b7:14:7f:aa:02:36:70:84:65:68:60:d7:a5:31:a4:46:
68:d1:1b:d1:fe:f7:ba:72:c1:e4:a0:56:07:9a:f3:9e:82:85:
1f:47:5d:53:00:6a:0e:14:29:14:70:63:1f:04:97:8b:b9:c2:
9e:18:91:ad:07:9e:80:b1:30:51:32:98:64:82:f5:44:5c:d8:
10:2e:bf:77:2a:a9:5c:df:fe:45:16:46:40:c6:ac:cd:d4:24:
f4:57:60:18:d2:63:84:a6:ea:1a:02:06:85:cb:95:c2:de:c0:
14:f8:74:cf:87:fa:2a:77:79:9f:e6:d2:d2:35:a9:d5:f2:57:
66:1c:35:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:33:43 2025 by rpki-client