Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/ouJuya3X6R6DXlSGTvcwGrFG3qc.roa
File: ouJuya3X6R6DXlSGTvcwGrFG3qc.roa (raw, json)
Hash identifier: auurPbnlFkK50pznvn3DyAHS8yJ/Y07rROn4rW79W6A=
Subject key identifier: A2:E2:6E:C9:AD:D7:E9:1E:83:5E:54:86:4E:F7:30:1A:B1:46:DE:A7
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 0196FC7A49F297903D3B91B23FAED64DF7D6
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/ouJuya3X6R6DXlSGTvcwGrFG3qc.roa
Signing time: Fri 23 May 2025 09:29:54 +0000
ROA not before: Fri 23 May 2025 09:29:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12337
IP address blocks: 185.201.22.0/24 maxlen: 24
2a0a:be40:c0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:7a:49:f2:97:90:3d:3b:91:b2:3f:ae:d6:4d:f7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: May 23 09:29:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2e26ec9add7e91e835e54864ef7301ab146dea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b7:14:d1:8a:50:cc:b3:14:05:57:fd:c9:ed:
f0:67:03:71:f6:39:7b:a6:55:10:3b:0e:28:30:bb:
b9:95:54:a2:26:14:af:28:9a:bd:cd:11:0e:d5:08:
bd:d2:90:0d:68:a5:22:ba:a3:6a:16:98:05:b6:60:
a5:f8:11:e8:29:37:02:28:a4:58:b8:cd:3d:05:24:
83:78:47:30:2c:82:e6:3f:ac:87:07:dd:84:b3:69:
9c:36:7b:8c:23:d2:5b:4c:46:f0:49:85:0a:87:53:
1f:92:b1:63:0e:99:5b:12:c0:e1:24:c9:ff:0e:0c:
3e:15:4f:d7:ae:db:68:94:6c:b5:c2:f7:c2:f8:db:
1d:3b:68:39:3b:b4:8d:91:7c:5b:56:b4:e9:64:8a:
51:59:d2:30:d3:f0:37:42:7c:21:55:a4:b9:e0:a4:
82:dd:e0:71:a5:36:0b:6c:a0:07:58:43:e3:5a:06:
a5:c0:38:93:52:38:6e:2e:4b:2b:c5:b8:d6:64:ae:
fb:34:76:d1:f7:45:6d:aa:4a:70:66:b2:fd:c1:0f:
3d:60:54:eb:cc:39:65:6a:20:d0:43:97:f1:fd:06:
47:46:24:84:e8:18:8a:f5:d9:8a:97:1c:08:de:ad:
5c:c2:ef:7c:88:4e:09:1a:3c:05:a1:f2:f2:10:62:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E2:6E:C9:AD:D7:E9:1E:83:5E:54:86:4E:F7:30:1A:B1:46:DE:A7
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/ouJuya3X6R6DXlSGTvcwGrFG3qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.22.0/24
IPv6:
2a0a:be40:c0::/44
Signature Algorithm: sha256WithRSAEncryption
8c:49:ca:ee:a7:5f:44:8b:11:50:ef:32:1e:fd:8a:a0:40:b5:
68:cc:7d:de:6c:dc:55:dc:c8:19:69:e2:45:7d:ce:4e:af:7b:
c4:d0:5d:42:2b:31:50:a3:2d:39:a4:a3:a5:4f:7f:35:f4:11:
8c:9e:a2:64:05:3c:4e:70:61:48:36:24:6e:b6:c0:95:d4:ff:
0e:9d:73:14:26:46:2a:30:50:16:84:84:a8:05:3d:3d:0d:ca:
a7:37:36:b0:b3:39:9c:60:c9:39:26:a0:a0:83:08:ac:61:8f:
50:03:71:55:17:46:27:e6:d5:0f:58:a2:09:59:86:c2:dc:6f:
dd:ae:14:48:27:49:8b:90:11:86:4f:48:e0:70:8c:ce:95:a5:
40:86:00:d5:1f:06:28:58:66:f4:56:83:fa:f5:ff:7b:a2:33:
eb:a9:99:96:b2:b0:e4:41:92:bd:56:ad:11:6c:3b:82:67:37:
23:20:a1:af:bb:41:9b:6d:1f:c2:61:9d:b2:f5:dc:7e:c3:31:
70:e0:bd:9e:50:57:f0:3a:bc:26:d2:fa:9d:16:4e:3e:04:f8:
52:08:a4:fc:90:d3:c2:2d:e3:f2:dd:f6:0b:fe:9e:7d:53:00:
90:e3:b0:90:85:52:bb:46:e0:b7:77:3e:ae:96:1b:67:e8:22:
49:29:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:21:17 2025 by rpki-client