Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/Aqz_ehMSCGzxFOJ8FvGbcOAmgSU.roa
File: Aqz_ehMSCGzxFOJ8FvGbcOAmgSU.roa (raw, json)
Hash identifier: s3KelrVfC9+y7bPujzwFv1EKOWZnruzzVkasMV5xnU4=
Subject key identifier: 02:AC:FF:7A:13:12:08:6C:F1:14:E2:7C:16:F1:9B:70:E0:26:81:25
Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial: 019715ED2E1EF98E99895CE2A6D2E52E9ADD
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/Aqz_ehMSCGzxFOJ8FvGbcOAmgSU.roa
Signing time: Wed 28 May 2025 08:05:54 +0000
ROA not before: Wed 28 May 2025 08:05:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1257
IP address blocks: 193.227.126.0/24 maxlen: 24
2001:678:454::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:ed:2e:1e:f9:8e:99:89:5c:e2:a6:d2:e5:2e:9a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Validity
Not Before: May 28 08:05:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02acff7a1312086cf114e27c16f19b70e0268125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:61:07:4f:65:84:96:15:df:28:8b:42:75:
31:98:65:94:53:6a:f6:84:6b:07:2b:86:97:fb:9f:
73:9a:ae:c2:9e:c1:d2:01:ed:22:f4:52:35:7a:e8:
d3:e4:ae:73:10:d2:b7:20:80:82:d3:98:4c:53:b7:
19:f9:fb:db:ff:63:ce:10:b6:1f:2d:4a:7c:09:df:
b8:fb:0a:c4:d7:b5:d5:3e:78:f7:62:2d:d3:55:66:
44:af:cc:35:ec:be:82:b4:26:83:ef:22:32:cb:18:
17:a7:a5:84:85:83:0c:05:b8:d5:58:51:64:9a:81:
04:b4:56:ef:38:5e:4f:ec:19:2b:81:20:e8:2d:5e:
67:a9:d1:fb:14:56:a2:88:e0:72:3b:a3:4e:c3:68:
8d:b0:22:34:a0:06:0e:f9:64:31:de:c9:ef:f0:f4:
fc:d7:1b:c1:74:58:bf:b9:fe:03:23:1f:ce:7f:c5:
48:0b:47:12:82:36:8a:04:64:2c:1e:b6:8e:12:5e:
ce:d3:e0:f9:5e:d2:2c:43:4b:5f:6d:de:1b:12:2b:
19:0b:0a:8f:c4:56:2e:28:06:8a:dc:b4:db:88:e3:
75:38:1d:ca:2a:54:1d:ea:fc:82:ab:82:17:12:cd:
41:23:45:8f:87:96:8c:1e:3b:bc:52:e5:b1:72:b2:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AC:FF:7A:13:12:08:6C:F1:14:E2:7C:16:F1:9B:70:E0:26:81:25
X509v3 Authority Key Identifier:
keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/Aqz_ehMSCGzxFOJ8FvGbcOAmgSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.126.0/24
IPv6:
2001:678:454::/48
Signature Algorithm: sha256WithRSAEncryption
37:de:c2:4f:68:50:a2:55:5f:10:3e:c1:0a:a0:93:83:e7:58:
df:a9:98:b0:a9:c1:70:99:ee:89:75:6b:ab:c8:9a:09:14:21:
a1:7f:73:10:1c:76:0f:79:ed:38:af:29:ac:97:1d:9c:1a:9b:
e8:71:3e:fe:b9:40:97:b3:7b:42:7b:03:6f:6e:ba:63:25:82:
2c:e9:43:5c:fa:4a:66:07:ca:7a:e5:b8:34:cb:c3:c0:4a:9a:
a8:35:0f:09:ce:8c:78:20:6e:92:a6:28:2b:12:d0:a6:82:f6:
86:3a:52:da:bf:de:b7:d5:88:e2:ca:7b:91:36:37:5a:09:e8:
d8:c3:a9:e7:33:a7:ce:ea:99:de:68:15:a4:0a:e4:2b:6e:03:
45:7b:9a:0f:34:f9:02:dc:d7:5d:31:c2:e1:06:fd:38:7b:93:
fc:09:0b:59:57:57:8c:15:0a:da:c6:49:73:82:7a:87:d6:35:
9a:c9:59:ac:cb:1f:0d:93:fa:b5:94:01:96:23:fa:6a:d1:2e:
f2:3e:2e:4a:f4:3c:06:e6:68:0f:e1:db:62:25:90:86:ed:0b:
cb:ed:a0:18:dc:41:29:fb:22:8e:97:c1:a0:43:10:43:0b:5a:
a3:9d:f8:0c:92:49:de:31:04:03:17:3b:2f:91:8a:5e:d6:0e:
4b:78:af:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:35:13 2025 by rpki-client