Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/J_xoJpVlUQZtO5xQ-ZJbdQWL7W0.roa
File: J_xoJpVlUQZtO5xQ-ZJbdQWL7W0.roa (raw, json)
Hash identifier: 6G5GWl1Jw65Lth4hieAeSDHM9k5/dMHA09XCXnp56S4=
Subject key identifier: 27:FC:68:26:95:65:51:06:6D:3B:9C:50:F9:92:5B:75:05:8B:ED:6D
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01963A51A2029B3626366FD80D59DE8C05D1
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/J_xoJpVlUQZtO5xQ-ZJbdQWL7W0.roa
Signing time: Tue 15 Apr 2025 16:39:10 +0000
ROA not before: Tue 15 Apr 2025 16:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54600
IP address blocks: 116.204.164.0/23 maxlen: 24
116.204.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:51:a2:02:9b:36:26:36:6f:d8:0d:59:de:8c:05:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 15 16:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27fc6826956551066d3b9c50f9925b75058bed6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0a:e4:25:71:75:8a:98:3c:f1:3b:82:c3:d0:
6f:84:33:7c:ed:7f:de:8c:40:94:19:9c:71:7e:bd:
d7:2a:ef:ce:82:8c:fc:31:1b:5c:05:16:16:03:85:
5e:f0:9e:08:16:9d:29:08:a0:c0:dd:e3:3a:45:66:
22:05:c3:71:45:dd:b9:bc:33:12:d7:13:08:23:3b:
5a:56:12:01:d5:03:af:55:26:65:e6:ca:49:ab:6b:
73:59:10:90:83:80:1c:26:53:4d:04:00:a8:4e:e5:
d1:51:c0:97:d1:57:f7:26:5d:5a:34:11:2a:5a:d3:
2a:a6:f9:6d:e5:99:69:da:f9:bd:a5:05:db:78:2f:
77:24:46:1f:ee:01:74:2f:0e:b0:3d:42:b1:21:06:
e3:93:54:82:a4:04:88:16:12:0d:7a:ae:ab:38:ba:
05:2e:2c:f8:a4:6a:f1:bd:a6:be:a1:78:22:ce:6f:
b0:39:61:e8:b8:96:c8:fa:54:c2:6d:4d:e1:56:d6:
4b:43:32:a2:88:85:eb:fd:e8:8a:40:83:9d:7b:33:
f1:2b:ef:c4:3b:c2:41:27:8a:83:12:8e:74:b6:e9:
30:8b:67:23:a9:fc:14:7c:f8:aa:31:08:3d:5c:ab:
01:09:eb:5c:c9:60:4b:23:34:f1:c4:63:66:02:63:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FC:68:26:95:65:51:06:6D:3B:9C:50:F9:92:5B:75:05:8B:ED:6D
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/J_xoJpVlUQZtO5xQ-ZJbdQWL7W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.204.164.0-116.204.166.255
Signature Algorithm: sha256WithRSAEncryption
3c:97:70:17:7a:4b:ca:ae:79:19:0c:46:17:48:e8:45:00:23:
04:e3:68:41:48:ad:d4:ba:27:f1:87:06:e1:e6:e0:6f:90:f4:
44:29:e1:2a:6b:90:db:45:c0:a6:7c:05:19:a4:47:39:5a:48:
cb:62:af:80:6c:68:bc:9b:ce:ac:4e:4e:e6:30:9f:86:3a:f3:
2e:ef:e8:74:3f:1d:f7:99:d7:4f:47:6e:d3:0c:ac:da:ca:d7:
23:a8:58:50:27:90:92:ae:da:9e:6e:c8:b3:e0:f9:b1:82:d1:
2b:b2:0a:de:2e:67:80:a6:90:4f:d4:85:bf:87:1f:37:07:67:
d9:d6:63:88:75:be:93:8e:df:58:cf:d8:6a:7f:6e:38:b2:63:
7f:2f:0e:24:9a:f9:f3:0b:60:e7:8e:a0:35:37:a6:bb:92:b1:
9f:4d:97:1f:e1:6a:c0:3b:00:c2:a3:da:5a:a8:2c:cb:54:4f:
53:7a:7e:35:7a:bf:86:df:50:6f:ac:18:70:a7:fd:ae:4d:b9:
43:b0:86:96:d3:62:84:f6:b1:35:03:fb:7c:ae:ca:7c:51:64:
8b:32:7f:64:99:8b:af:ba:ae:4f:fe:d4:07:75:55:4c:04:9e:
f9:71:3d:46:68:40:ad:f9:2c:ce:06:f2:95:d9:d4:6c:da:74:
72:db:c8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:41:09 2025 by rpki-client