Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/fL9MJjH2uZSPAsEqBzR-tRM2cJo.roa
File: fL9MJjH2uZSPAsEqBzR-tRM2cJo.roa (raw, json)
Hash identifier: F7hAcwIBSQhJTiFeaos197lpjHo7B2FuCmRxN0q9JC0=
Subject key identifier: 7C:BF:4C:26:31:F6:B9:94:8F:02:C1:2A:07:34:7E:B5:13:36:70:9A
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 0196E765DEEDD5AF4573856F0E230217D7F7
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/fL9MJjH2uZSPAsEqBzR-tRM2cJo.roa
Signing time: Mon 19 May 2025 07:15:35 +0000
ROA not before: Mon 19 May 2025 07:15:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204798
IP address blocks: 185.206.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:65:de:ed:d5:af:45:73:85:6f:0e:23:02:17:d7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: May 19 07:15:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cbf4c2631f6b9948f02c12a07347eb51336709a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:64:cc:2c:33:4b:5a:29:b4:b0:eb:d3:ee:
74:fa:e0:dc:89:15:41:5c:54:1d:b5:8d:2f:f6:f1:
e5:90:ca:5a:13:73:22:b5:b7:22:a9:52:c4:d8:af:
9f:1b:c9:5d:e4:ba:ea:56:cf:f4:59:bb:41:2c:84:
0c:f5:a9:01:08:8c:8b:bc:42:64:e0:5c:83:7a:a5:
c8:d3:62:3a:d6:d3:ab:71:21:1c:05:c8:1e:94:43:
73:54:11:0a:df:3d:44:44:35:88:d2:b2:35:c8:6b:
a4:b9:cb:53:c9:dc:39:c6:8c:29:34:5c:9d:20:9a:
7b:68:9c:c7:a6:c0:70:32:d9:15:72:f5:65:50:6e:
92:88:54:35:74:f4:a2:4c:e7:88:ad:4c:5e:a1:93:
d3:25:ff:3c:30:b6:7a:76:6e:3d:89:9c:fb:b9:d2:
67:f2:80:c9:92:62:b6:b5:cc:fd:38:5c:c8:65:bd:
7b:32:51:90:df:10:84:e2:f9:61:ec:df:06:ca:67:
28:92:08:d2:a6:7a:97:0a:3a:bd:6f:94:0e:0e:69:
17:71:36:7f:1f:d3:af:67:d4:c1:ae:b0:4e:a5:95:
c5:a7:e9:da:c9:48:8e:15:d0:a8:d4:3a:e9:35:8c:
bb:11:00:cd:f5:c5:d2:cc:6c:9d:8f:2f:29:7e:07:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:4C:26:31:F6:B9:94:8F:02:C1:2A:07:34:7E:B5:13:36:70:9A
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/fL9MJjH2uZSPAsEqBzR-tRM2cJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.125.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:eb:fb:a0:5e:63:4c:66:2c:ba:cc:5e:27:08:94:53:73:29:
73:ac:11:18:17:fc:ee:6f:06:c9:80:35:08:bc:fc:8c:ea:ea:
a5:0b:5a:c4:c8:d6:c0:23:06:c9:44:13:2b:7f:a3:f0:13:78:
fe:45:d6:5e:0b:fc:86:c3:47:c5:f5:fb:4f:a1:97:70:97:1e:
a1:05:e8:7f:4b:0e:b3:20:3d:4b:5a:45:46:0c:10:b4:6a:30:
ec:83:5a:40:e0:fe:33:75:66:c5:44:3e:85:08:a8:07:d4:b4:
6a:3d:b2:d1:18:bf:55:6d:1f:59:f4:62:e2:3a:11:b2:47:f0:
f1:54:1f:36:a2:aa:59:69:3c:49:b7:5e:f3:75:cc:46:3c:6d:
a5:6b:62:21:49:e6:24:95:ae:eb:db:fe:ed:51:aa:ce:af:bc:
4c:71:80:de:29:4a:af:b3:3b:d7:a9:f2:5a:5d:d8:aa:74:2a:
4e:20:88:cc:84:39:08:a5:0b:fe:ef:01:81:62:fe:aa:58:e8:
e3:75:8f:81:f8:d7:b2:b8:20:f6:c1:55:10:0f:12:86:dd:82:
14:9c:39:61:86:77:40:c9:be:c9:5b:b2:dc:01:18:9f:b4:83:
40:7b:64:45:77:42:50:bf:a7:16:23:56:0e:be:21:9e:35:cd:
90:ed:03:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:17:08 2025 by rpki-client