Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/q6uLwCPUOFh0yPpYrfw-G5laCq4.roa
File: q6uLwCPUOFh0yPpYrfw-G5laCq4.roa (raw, json)
Hash identifier: P69J+km/g8LXq0BVXp4jTkXxFAbXvFeOKCLpK5Pw804=
Subject key identifier: AB:AB:8B:C0:23:D4:38:58:74:C8:FA:58:AD:FC:3E:1B:99:5A:0A:AE
Certificate issuer: /CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Certificate serial: 0195BCD54AB566C9E0A6DE80A82495E132B3
Authority key identifier: 2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/q6uLwCPUOFh0yPpYrfw-G5laCq4.roa
Signing time: Sat 22 Mar 2025 07:50:49 +0000
ROA not before: Sat 22 Mar 2025 07:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204457
IP address blocks: 195.170.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bc:d5:4a:b5:66:c9:e0:a6:de:80:a8:24:95:e1:32:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e112e2c61d2a80e7c4385c60858c91d75f31e7b
Validity
Not Before: Mar 22 07:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abab8bc023d4385874c8fa58adfc3e1b995a0aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:5d:bc:e4:c3:06:f4:5b:20:15:61:23:be:
8e:68:71:f5:29:09:a9:82:6c:b5:86:01:80:9a:46:
e0:d3:e5:78:e8:eb:77:cc:8b:d1:19:92:7d:7b:44:
d6:a2:1f:36:02:63:1b:a0:74:04:e9:4a:c8:9c:73:
41:de:d0:64:c6:50:4c:97:27:aa:de:4f:98:b8:1b:
17:5a:1c:b3:e8:c8:65:65:97:cd:7d:3e:5f:c5:c5:
11:6c:cd:70:72:4c:c5:9f:0d:08:1f:39:40:b8:d1:
38:41:65:c2:09:cf:80:a5:38:c9:68:da:ae:83:84:
0f:4f:75:7a:49:cb:73:66:aa:ad:1b:af:3b:f0:9b:
b6:42:5f:4b:f7:fa:2a:1a:20:66:0d:8a:19:a4:62:
bc:cf:7c:91:98:7a:dd:1b:e9:8a:e9:b6:9e:af:57:
55:a1:ae:18:d1:f2:dd:3b:da:0e:84:5a:eb:72:89:
34:29:f1:a1:48:ec:94:32:4d:9c:6f:59:01:29:87:
0b:7c:b3:c9:dd:51:e4:c6:16:43:a4:24:fb:2f:d9:
40:6d:b9:c5:2b:59:7a:40:c6:d6:2c:6d:e1:30:95:
9a:e6:81:86:98:44:35:d8:53:d2:95:31:51:0f:e8:
39:db:01:b6:34:eb:a8:6a:40:6e:cb:d6:a1:5b:f8:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AB:8B:C0:23:D4:38:58:74:C8:FA:58:AD:FC:3E:1B:99:5A:0A:AE
X509v3 Authority Key Identifier:
keyid:2E:11:2E:2C:61:D2:A8:0E:7C:43:85:C6:08:58:C9:1D:75:F3:1E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhEuLGHSqA58Q4XGCFjJHXXzHns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/q6uLwCPUOFh0yPpYrfw-G5laCq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f79e8e-6625-45e9-bb9a-96d22861a922/1/LhEuLGHSqA58Q4XGCFjJHXXzHns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.186.0/24
Signature Algorithm: sha256WithRSAEncryption
89:78:3d:d5:e3:c8:33:08:32:d8:64:12:d9:d3:d5:c9:af:9c:
7f:ea:2a:c6:a8:dd:72:82:ad:05:67:dc:46:07:78:88:32:87:
0a:11:69:8a:88:11:4b:32:d2:36:e0:a2:6f:c5:44:66:f3:7d:
4d:de:1c:1c:bd:ed:55:0e:a8:9a:2b:f9:9e:85:2e:94:16:62:
3e:bc:ee:74:41:d9:f9:2a:64:80:e5:ec:1f:95:d2:06:4a:2d:
d6:c7:b7:df:87:f2:3e:fa:4e:41:7d:c1:b2:4b:cb:82:c0:73:
30:12:7c:23:a2:65:7a:c4:4f:f1:97:82:06:76:a6:ed:06:ab:
71:37:04:ec:08:c6:49:74:5b:11:b5:cf:df:fa:70:9c:d1:3b:
0d:d4:ec:a6:ad:ca:35:e4:c9:34:c8:a8:99:1b:30:ae:32:e0:
a7:be:01:8b:41:45:16:54:06:e1:1f:96:3a:ea:85:ef:d0:8a:
5c:6a:b1:3a:42:11:f5:a3:8b:da:75:84:84:53:15:e6:b5:8a:
b4:54:4f:ad:d7:ca:80:38:35:f9:29:2e:9b:3c:62:07:5f:4e:
9f:71:fc:e0:63:f1:30:7d:b3:68:ec:7c:30:bc:5e:be:49:a2:
5d:a7:97:7e:f2:a4:38:48:04:99:d2:96:4f:2f:ce:5c:9f:f0:
cb:1b:25:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:17 2025 by rpki-client