Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kQFkmSoT8s_PJVG02xi6zhdXA6U.roa
File: kQFkmSoT8s_PJVG02xi6zhdXA6U.roa (raw, json)
Hash identifier: 72VPBcYJzP7E974Udk/0IUxgg2LMnnBtbQMx33CmMs0=
Subject key identifier: 91:01:64:99:2A:13:F2:CF:CF:25:51:B4:DB:18:BA:CE:17:57:03:A5
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0197215123180954C41273EF3334CDDC4803
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kQFkmSoT8s_PJVG02xi6zhdXA6U.roa
Signing time: Fri 30 May 2025 13:10:54 +0000
ROA not before: Fri 30 May 2025 13:10:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207986
IP address blocks: 188.130.150.0/23 maxlen: 23
188.130.150.0/24 maxlen: 24
188.130.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:21:51:23:18:09:54:c4:12:73:ef:33:34:cd:dc:48:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: May 30 13:10:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=910164992a13f2cfcf2551b4db18bace175703a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:37:b0:ae:0c:d7:b3:a6:4e:84:e8:c5:84:ba:
21:e9:7d:cd:05:01:f3:ff:25:9d:07:42:3c:8c:29:
d6:42:47:ab:db:4b:8e:de:bc:2b:5a:df:17:4c:33:
ed:a5:00:92:2b:75:be:43:e5:d0:7a:e7:58:94:46:
d6:7f:68:cc:84:e6:7e:38:35:9f:a2:0d:e8:d6:77:
91:dc:0c:cb:06:46:62:e2:e7:a2:57:40:87:95:d9:
29:33:fe:7f:78:e5:38:0c:7f:b2:82:22:60:6d:c5:
a6:25:54:8b:6e:94:0c:3e:57:15:c7:63:24:42:06:
ab:ab:db:91:b3:2f:74:8f:4b:7f:02:f8:e1:92:b4:
ab:66:5e:7a:69:8a:1a:61:95:e4:c6:be:8c:b6:96:
f4:4e:8e:1e:0f:76:e3:63:91:00:15:07:57:6c:98:
92:8c:1d:49:e0:48:d7:d3:55:ee:8b:5d:76:81:92:
0c:30:a8:b8:d1:62:fb:b9:15:76:89:21:c1:b8:88:
85:e0:49:8a:26:8f:03:83:a0:8d:1a:ce:30:82:ef:
f8:68:26:4a:09:9e:17:e8:c9:e9:d1:f2:2b:23:a8:
da:fc:d9:d3:8f:a5:e2:c2:bf:e2:0a:a5:0f:50:08:
64:ba:1a:6c:07:01:d5:ce:be:46:8c:3b:75:ed:3f:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:01:64:99:2A:13:F2:CF:CF:25:51:B4:DB:18:BA:CE:17:57:03:A5
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/kQFkmSoT8s_PJVG02xi6zhdXA6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.150.0/23
Signature Algorithm: sha256WithRSAEncryption
28:24:2a:04:8f:a6:44:f7:af:80:5b:ee:da:26:ec:fe:42:01:
60:a7:b3:8a:88:0c:7b:cb:e8:1b:90:72:ec:0c:dc:11:06:9d:
e6:01:6f:6d:ee:f4:44:8b:28:a0:e8:84:d8:81:87:37:53:5a:
eb:22:29:1b:cc:08:a2:c5:1a:46:fb:36:d2:d6:84:b9:34:93:
07:d6:e1:f0:03:0d:2f:88:86:36:82:f5:06:19:cd:7e:97:22:
41:8d:63:7d:da:f6:7d:06:65:b6:be:4d:06:e7:01:e5:d7:00:
19:b3:16:b5:cd:e6:4b:4c:52:48:b1:c5:15:95:6a:5d:4b:d4:
2b:30:79:42:07:05:35:2b:13:00:04:54:aa:b1:a1:db:d9:b6:
0a:da:22:6e:d0:4f:33:37:91:02:9c:ed:d9:23:61:b0:6b:70:
f7:70:23:6d:dc:be:66:1e:52:35:76:1c:6a:d9:96:20:08:d2:
1e:4e:39:89:86:ac:e6:cb:ff:41:00:e3:31:a0:ec:81:15:ad:
44:f3:9b:95:c1:4d:bf:88:1e:4e:6b:b5:95:a7:b7:54:9b:5a:
b2:a4:b9:d8:93:40:f6:3b:95:42:0a:5f:d7:c7:70:8e:9d:f2:
6b:b2:a1:67:a1:01:7a:3c:bb:1c:53:57:d3:87:d9:2e:ff:eb:
b4:c0:0e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:31:32 2025 by rpki-client