Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/q_Jte56LmcTovVbt7RpJvvzx75Y.roa
File: q_Jte56LmcTovVbt7RpJvvzx75Y.roa (raw, json)
Hash identifier: aiVx0X8zEjl87Dbgqgzg7n0jjNOIZypCG8UwERdTquk=
Subject key identifier: AB:F2:6D:7B:9E:8B:99:C4:E8:BD:56:ED:ED:1A:49:BE:FC:F1:EF:96
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0197220EA66D31FBBB545BEA3F1F19B374B3
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/q_Jte56LmcTovVbt7RpJvvzx75Y.roa
Signing time: Fri 30 May 2025 16:37:54 +0000
ROA not before: Fri 30 May 2025 16:37:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 79.172.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:22:0e:a6:6d:31:fb:bb:54:5b:ea:3f:1f:19:b3:74:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: May 30 16:37:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abf26d7b9e8b99c4e8bd56eded1a49befcf1ef96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:a4:b8:ee:4b:81:c3:39:89:f6:e2:70:f7:
d2:80:ee:9b:8a:81:07:b3:1a:18:b1:e5:64:8d:90:
52:3c:ef:c3:b3:ba:f0:ac:a3:3f:f5:fa:a2:c9:ad:
a9:5d:a0:1a:23:63:a9:7a:9b:be:18:29:3d:3b:ff:
df:6d:43:bc:1c:00:35:a3:f0:5f:60:89:5e:f8:b5:
e8:68:6b:2e:95:fa:75:6e:60:d1:54:97:53:bc:2c:
a2:49:3d:4a:be:a6:da:7b:68:72:99:b9:de:38:94:
a8:b4:1b:47:37:c7:99:15:fa:da:fc:45:32:99:a2:
f9:8a:2e:95:6c:6a:47:c8:c7:dd:6d:a5:51:23:30:
ad:fd:69:ed:24:eb:7f:2f:80:be:17:97:5e:9a:32:
be:3d:3a:b6:14:74:cb:d8:11:bc:13:c0:a5:c7:4c:
b3:da:a2:f9:88:5b:4a:23:c4:fe:db:9e:c4:e8:34:
23:c5:f3:fe:86:8b:7f:b5:ab:97:ad:9e:7f:60:54:
59:0f:50:80:cf:78:8f:e6:45:54:2d:17:30:66:da:
af:2d:7f:97:cf:77:25:06:45:8c:1f:39:42:06:86:
f2:30:f9:d1:9d:6a:78:33:15:23:89:95:8f:c2:19:
5b:4c:46:fe:89:27:aa:d1:e2:1c:81:63:ac:a3:9c:
b3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F2:6D:7B:9E:8B:99:C4:E8:BD:56:ED:ED:1A:49:BE:FC:F1:EF:96
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/q_Jte56LmcTovVbt7RpJvvzx75Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.214.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:21:a9:cd:63:4b:6d:ca:7c:f2:aa:e6:6c:2d:a4:de:10:58:
89:f5:4f:ef:ce:83:8c:56:ce:97:c1:1e:e2:31:84:d6:54:79:
55:89:d9:58:ed:d7:6e:82:04:f3:c6:db:6d:1c:ed:7c:39:80:
a9:ad:ff:8d:91:ee:73:53:b3:bb:b7:07:25:eb:1a:cb:19:88:
a8:76:87:70:f2:f3:bf:3e:56:24:4d:42:dc:94:14:05:2a:ba:
b4:a3:1c:83:b6:40:59:52:52:3e:99:0c:71:6c:87:34:81:fe:
34:14:68:dd:1c:7a:2c:0d:6e:08:0a:5a:bd:b9:9c:2f:0d:84:
82:32:37:bd:42:05:20:6c:42:ac:aa:51:24:36:88:0b:1b:70:
db:7c:d6:b3:ea:52:09:94:06:1e:f2:ae:e3:32:56:1a:e6:b4:
f5:ae:6e:1c:d8:07:58:7d:91:de:48:3c:a3:8b:f4:0d:55:62:
a1:18:c7:8e:32:dc:6b:07:15:27:73:83:15:d1:c1:61:0f:b3:
31:88:cb:26:e1:78:f7:13:1d:6c:ae:2f:af:d0:30:b4:a3:21:
30:0c:a5:c9:28:d8:5e:ef:0b:27:59:42:fe:3d:a6:49:a4:28:
58:5c:5a:46:ce:06:0f:52:75:c2:e5:3b:9e:51:5e:a8:8a:b5:
00:23:57:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:11:25 2025 by rpki-client