Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/jWqrAUGc-QQna_az58FqrLx3KMM.roa
File: jWqrAUGc-QQna_az58FqrLx3KMM.roa (raw, json)
Hash identifier: IjB0FwqbEBc83dg3pquxXYEVYNlp7HB3DKdagqWmNT0=
Subject key identifier: 8D:6A:AB:01:41:9C:F9:04:27:6B:F6:B3:E7:C1:6A:AC:BC:77:28:C3
Certificate issuer: /CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Certificate serial: 01971CBD42C3FFE66720195A48F921C79603
Authority key identifier: DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/jWqrAUGc-QQna_az58FqrLx3KMM.roa
Signing time: Thu 29 May 2025 15:50:54 +0000
ROA not before: Thu 29 May 2025 15:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209759
IP address blocks: 78.40.220.0/23 maxlen: 23
178.218.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:bd:42:c3:ff:e6:67:20:19:5a:48:f9:21:c7:96:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0a9e71ad5d564233a944d1f4798518d1831f7d
Validity
Not Before: May 29 15:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d6aab01419cf904276bf6b3e7c16aacbc7728c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b1:72:a9:55:57:19:e7:6e:0b:8e:81:c8:59:
9f:39:46:00:55:b3:b0:c4:82:09:00:5e:a8:cd:42:
4e:17:c9:7c:ea:70:e5:61:53:aa:15:2e:7e:69:e4:
cc:19:6e:a4:a0:93:fc:b0:8d:6d:d3:bd:6e:44:b3:
eb:7f:fb:fd:98:ff:c2:52:b1:dd:d9:9f:f0:95:d6:
32:48:7d:89:68:b0:0f:b8:39:a0:8c:cd:44:c2:01:
f2:c3:3e:28:62:c6:06:16:1b:ef:3f:03:f0:ef:93:
98:a3:49:f0:e0:dc:f8:16:7e:d7:01:61:ab:46:0a:
4f:5d:c5:05:83:36:0a:2e:15:9b:80:a7:56:48:e0:
1f:e5:82:02:0a:85:4f:90:43:53:1d:65:83:41:58:
f9:b3:7d:4e:80:c0:21:ec:d3:ff:e7:61:5a:61:09:
37:5c:0d:a2:06:3a:d2:79:11:41:36:23:a7:2a:2d:
d7:8d:af:8c:1b:83:ab:1d:b5:84:69:e0:3b:86:47:
c1:75:ff:31:07:1e:9c:4a:14:ca:fa:4f:ef:f0:e6:
ab:32:9e:51:95:3c:e5:54:24:2c:8e:5e:3b:66:0f:
25:57:09:c9:7a:f4:98:df:be:29:3d:fd:62:fe:d6:
b5:0a:e7:12:ae:3e:0e:98:9e:cd:4a:03:3a:f8:27:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6A:AB:01:41:9C:F9:04:27:6B:F6:B3:E7:C1:6A:AC:BC:77:28:C3
X509v3 Authority Key Identifier:
keyid:DA:0A:9E:71:AD:5D:56:42:33:A9:44:D1:F4:79:85:18:D1:83:1F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqeca1dVkIzqUTR9HmFGNGDH30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/jWqrAUGc-QQna_az58FqrLx3KMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6d14de-615f-47ce-a7eb-a37b3f321703/1/2gqeca1dVkIzqUTR9HmFGNGDH30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.220.0/23
178.218.156.0/22
Signature Algorithm: sha256WithRSAEncryption
79:60:80:43:42:0f:62:e9:df:32:3b:6f:68:d5:5c:71:a8:c3:
6b:00:72:c3:d9:40:f7:11:b5:07:a2:e7:f5:4a:de:24:9f:db:
2e:03:2d:30:25:9f:78:e8:39:b2:21:7b:0a:82:27:09:69:78:
30:ab:3c:2f:e7:da:27:4e:91:f6:b1:44:4a:90:21:12:a3:21:
8f:e0:46:a1:4c:15:fa:08:95:d1:2d:d0:99:24:6c:2c:ee:d0:
8a:36:55:39:3b:a8:f6:89:e3:96:71:fc:20:d8:69:62:9e:40:
35:fa:36:de:22:ae:91:87:0d:c9:0d:fe:a1:e5:a3:77:7f:c3:
44:0f:14:a5:09:2f:ed:17:b7:f0:11:7c:c1:99:85:ad:9b:5b:
83:88:b5:be:78:28:b0:37:3f:d4:51:63:4f:86:d8:36:7c:eb:
1b:a7:17:d4:7f:75:ed:f2:20:21:85:37:01:5c:99:11:61:d5:
53:97:97:de:33:fe:77:be:d4:ef:42:d9:96:e0:ab:8c:f6:34:
b2:13:09:5b:d9:79:48:08:69:c0:2b:31:7a:2d:4a:58:cc:0c:
77:d8:bc:3f:bd:b4:5c:d5:a3:97:76:53:64:1a:8c:cc:20:b1:
96:02:7c:78:52:44:ca:ac:f6:6b:77:8e:00:5a:7d:22:da:a9:
19:55:f1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:09 2025 by rpki-client