Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/1-QgVdEVAtmDVzPL1t30XEpMkKpg.roa
File: 1-QgVdEVAtmDVzPL1t30XEpMkKpg.roa (raw, json)
Hash identifier: Nb18hgZy/dUiDthUh4PrNXR3WH0/oCbuHBjHexDpA0Y=
Subject key identifier: F9:08:15:74:45:40:B6:60:D5:CC:F2:F5:B7:7D:17:12:93:24:2A:98
Certificate issuer: /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Certificate serial: 0196F2CF9A8E5E7AA6D97A2CF5B08AC97D37
Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/1-QgVdEVAtmDVzPL1t30XEpMkKpg.roa
Signing time: Wed 21 May 2025 12:26:53 +0000
ROA not before: Wed 21 May 2025 12:26:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44066
IP address blocks: 185.60.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:cf:9a:8e:5e:7a:a6:d9:7a:2c:f5:b0:8a:c9:7d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Validity
Not Before: May 21 12:26:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f90815744540b660d5ccf2f5b77d171293242a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:b3:ce:1d:aa:32:0b:ce:64:5d:77:e9:6f:
e4:5d:4c:8d:00:d9:8a:9e:8b:75:47:fa:31:ee:c6:
c7:b7:61:92:1e:6e:a1:0e:04:90:eb:3c:39:b6:08:
2b:6b:9b:e5:3f:a0:4d:ef:26:43:8f:72:63:f7:ac:
cd:1c:97:fd:3d:5f:8d:b7:af:d2:31:52:e2:14:f7:
a9:5e:81:3c:30:43:71:ac:a2:a7:1b:39:49:dd:bd:
6d:d0:38:f9:b9:cb:c9:cd:42:35:08:1b:73:a8:21:
31:46:dd:d2:d4:28:33:0a:a7:35:f4:ba:81:30:a0:
cf:88:13:a6:16:9b:17:5c:84:56:4b:0d:c6:91:88:
de:b5:90:82:a9:b3:41:e5:ed:a0:3d:db:65:16:ee:
be:04:33:87:70:aa:60:f9:2a:7a:19:33:08:0c:4c:
a9:b2:31:3f:08:05:d6:61:e9:14:10:c6:63:c6:3b:
d9:a5:eb:cf:3e:28:9d:70:41:a3:67:5a:85:09:c1:
36:b8:3c:48:d8:c0:e8:aa:09:67:44:0f:80:39:03:
23:db:e0:95:4a:e7:14:85:01:91:96:27:76:75:92:
d1:f4:b0:b6:0a:c0:81:f1:46:0e:9a:24:b6:a5:11:
27:dd:f3:eb:e8:9e:91:83:da:b4:58:ec:10:c5:a3:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:08:15:74:45:40:B6:60:D5:CC:F2:F5:B7:7D:17:12:93:24:2A:98
X509v3 Authority Key Identifier:
keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/1-QgVdEVAtmDVzPL1t30XEpMkKpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.251.0/24
Signature Algorithm: sha256WithRSAEncryption
06:fd:ba:c2:14:04:93:b2:47:29:9d:a6:63:94:52:46:2c:c2:
06:7b:92:d8:f9:08:99:df:0c:47:41:56:e5:df:08:0a:d7:a5:
e4:55:2b:03:44:b4:98:28:54:e5:90:47:70:62:49:42:d4:dc:
51:68:98:ca:95:b1:e6:13:4c:3a:1d:8b:ad:87:74:2b:df:4f:
22:d8:72:3c:6c:0b:c4:f3:99:c8:a6:fe:5c:7c:b9:eb:37:fc:
06:7c:66:d9:bb:5d:47:e0:3d:c6:88:40:14:70:7a:8b:28:75:
a8:22:b0:be:09:db:3f:da:15:78:17:c7:4d:5c:8d:55:0c:3e:
25:f9:f6:f8:64:8b:cd:ab:31:4b:9b:67:8d:44:94:3e:aa:26:
cc:f5:3e:0f:71:de:7f:18:bd:96:c9:38:2f:c6:d3:e3:a1:79:
b6:ba:d9:cd:b8:53:ad:4c:31:e0:f5:a8:cd:39:0b:21:b9:17:
7e:7b:5c:c8:5c:48:57:c9:4c:b2:26:00:78:f0:73:72:f2:64:
ba:fe:07:19:24:da:05:59:62:a8:33:f2:a7:45:28:e8:d1:24:
f5:5a:14:21:99:c4:49:f0:d8:8e:c7:ca:53:98:66:da:73:0d:
df:43:9f:3c:e4:4b:de:8a:b8:2b:85:19:9c:73:56:5b:77:7f:
2b:47:4b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:43 2025 by rpki-client