Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/F-vKFwnquIw9vHj26sT4MOF8_aE.roa
File: F-vKFwnquIw9vHj26sT4MOF8_aE.roa (raw, json)
Hash identifier: RG/y0uuCqJ1Cb/1Lt0VGILeEY9raFqhpVLmiGAGYlcY=
Subject key identifier: 17:EB:CA:17:09:EA:B8:8C:3D:BC:78:F6:EA:C4:F8:30:E1:7C:FD:A1
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 0196F7035CB907FA33C3601196DA965E04BF
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/F-vKFwnquIw9vHj26sT4MOF8_aE.roa
Signing time: Thu 22 May 2025 08:01:54 +0000
ROA not before: Thu 22 May 2025 08:01:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20115
IP address blocks: 84.37.32.0/20 maxlen: 24
84.37.176.0/20 maxlen: 24
84.37.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:03:5c:b9:07:fa:33:c3:60:11:96:da:96:5e:04:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: May 22 08:01:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17ebca1709eab88c3dbc78f6eac4f830e17cfda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:9e:44:8a:9e:53:08:81:99:f2:ca:ff:61:
b4:e2:73:bb:f8:6c:40:9f:12:49:8e:63:67:7b:60:
90:5d:22:fd:b7:50:dc:f9:a6:84:ff:83:53:80:25:
7c:36:71:d3:47:a3:34:a5:15:dc:61:8b:13:31:c3:
b0:57:41:5e:6a:c8:39:ff:8b:3d:09:98:fa:0c:19:
2a:ab:c7:1b:11:f0:8b:bb:c5:34:28:27:b6:e3:df:
d9:d3:56:ec:eb:20:5c:96:f0:13:34:85:37:41:cd:
4d:75:93:2e:60:a9:a5:58:3d:a7:fe:d6:6e:bb:18:
40:97:d0:38:67:80:c1:b5:11:55:0e:e3:ef:78:b8:
af:39:3d:36:aa:e7:c3:06:a7:27:00:b9:b1:ab:51:
46:f7:99:d4:00:b1:5f:ff:2d:c1:0c:82:79:22:93:
a3:f6:05:b0:e5:65:65:8e:5a:45:47:29:a0:01:4a:
ad:2e:9d:9e:36:2b:82:a7:5f:fc:ba:d7:a4:f9:98:
d8:3a:65:d6:45:26:1b:a4:3a:1f:ce:72:c8:3c:36:
6e:70:33:13:4a:86:bc:bd:c3:6d:44:8b:b9:10:e5:
7a:f2:18:6f:51:d4:9d:35:e0:e1:ae:31:eb:07:ee:
50:4d:94:8c:ae:55:6c:30:3e:e1:fa:5d:35:ed:d0:
62:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EB:CA:17:09:EA:B8:8C:3D:BC:78:F6:EA:C4:F8:30:E1:7C:FD:A1
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/F-vKFwnquIw9vHj26sT4MOF8_aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.32.0/20
84.37.176.0-84.37.255.255
Signature Algorithm: sha256WithRSAEncryption
68:2c:28:e4:ba:88:a7:95:6b:92:60:94:c8:08:01:61:48:39:
fd:34:cd:aa:8a:46:71:26:3e:92:cf:8a:80:01:e5:1e:47:a7:
27:5b:4e:8c:cd:85:3d:ff:12:91:3b:43:fd:4d:6e:47:ca:e2:
2b:9b:b1:83:76:d2:c2:c1:03:30:1c:6c:ac:e1:85:cb:08:0b:
65:65:79:39:f1:d6:ad:1f:11:88:6d:96:f8:1c:d5:b4:9a:3c:
cd:f6:76:76:ef:66:41:a7:3c:fd:39:56:31:94:24:e0:56:b3:
e8:08:68:61:07:51:c3:d9:2d:41:5f:10:3e:17:1d:fa:09:1c:
bf:8c:da:b0:11:19:ce:e6:bd:1b:78:cb:8e:9e:64:e6:90:eb:
18:0a:1a:ac:5b:0a:e1:9e:40:1b:11:39:4c:63:58:cc:74:5e:
84:94:aa:79:1b:2c:7b:9e:a2:e0:8f:3c:8e:61:3b:1c:16:d1:
27:bd:c5:72:8c:58:23:ff:da:c4:97:aa:4e:71:79:b4:85:a8:
43:a1:c0:2d:00:52:bd:63:df:40:d6:fa:7c:bd:74:99:e0:0c:
9c:f7:b0:1c:3a:77:ae:b5:56:79:a4:62:25:ce:1d:49:23:39:
b6:cc:38:6e:9d:7f:33:b1:b2:8f:f1:97:d2:35:5b:83:0c:b5:
d6:ad:a5:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:07:58 2025 by rpki-client