Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/m2QQfUK06vFb9PgOjuRKEEy3_-M.roa
File: m2QQfUK06vFb9PgOjuRKEEy3_-M.roa (raw, json)
Hash identifier: r2c9NdRmbfXSJX1yrfGNpKRrDXEdWsNsnb45Hs3S/N0=
Subject key identifier: 9B:64:10:7D:42:B4:EA:F1:5B:F4:F8:0E:8E:E4:4A:10:4C:B7:FF:E3
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 0196D38E25D34F0132858469E1264DCD9FDF
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/m2QQfUK06vFb9PgOjuRKEEy3_-M.roa
Signing time: Thu 15 May 2025 10:47:10 +0000
ROA not before: Thu 15 May 2025 10:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8311
IP address blocks: 193.178.31.0/24 maxlen: 24
193.178.33.0/24 maxlen: 24
193.178.52.0/24 maxlen: 24
193.178.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:8e:25:d3:4f:01:32:85:84:69:e1:26:4d:cd:9f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: May 15 10:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b64107d42b4eaf15bf4f80e8ee44a104cb7ffe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:b7:d6:c7:69:f4:07:35:42:89:4b:eb:c0:
a4:85:2b:13:89:07:d4:b3:7b:b0:0b:cb:d7:15:22:
df:2e:58:83:c0:cc:9a:6f:22:f3:c8:c6:89:de:05:
7e:e1:38:6e:f9:dd:fd:85:c0:e8:dd:22:4a:0a:28:
bb:a5:f2:00:8c:a3:bb:06:1f:8b:e6:b6:ef:9e:d1:
87:bc:04:03:e7:e7:50:2e:9b:4f:62:43:a3:f1:2a:
1a:13:55:e8:80:32:12:cd:68:e8:e9:f8:eb:7f:d7:
ad:27:3c:e5:1c:66:87:84:1a:39:c6:2e:2a:9b:eb:
03:0f:6c:69:14:ca:f0:e9:16:fc:54:13:e5:fb:ba:
a1:1a:09:62:bc:ed:9c:58:ab:20:12:b4:9c:eb:82:
64:f0:b9:c2:37:1f:ab:3c:32:5c:fd:2c:0a:50:b6:
54:12:73:4f:1b:80:72:0a:ac:2f:c4:b4:f5:d3:df:
c2:db:0a:e7:0e:f2:c4:93:27:46:bb:a6:13:49:8e:
8f:03:c7:89:ee:8f:a8:83:d8:98:44:98:55:a4:3e:
0a:61:7e:c5:c4:42:cc:c3:cd:31:71:ee:9f:57:4c:
cc:38:b4:0d:3e:96:a0:28:53:82:cb:83:a2:49:c7:
2d:0a:57:2c:c5:fb:02:34:35:92:a7:26:cb:87:d1:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:64:10:7D:42:B4:EA:F1:5B:F4:F8:0E:8E:E4:4A:10:4C:B7:FF:E3
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/m2QQfUK06vFb9PgOjuRKEEy3_-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.31.0/24
193.178.33.0/24
193.178.52.0/24
193.178.115.0/24
Signature Algorithm: sha256WithRSAEncryption
55:45:77:95:8d:35:d0:dd:6c:c2:5a:78:fa:7b:3d:bb:1b:13:
c3:b4:c9:96:24:bb:09:85:bd:cc:ec:3a:51:ae:5e:c0:34:b5:
1c:0b:e8:09:2d:e9:36:69:22:03:a5:b1:4e:29:dd:84:18:83:
75:83:1b:48:84:0a:4b:5a:bd:ce:4d:02:35:69:ae:88:af:a4:
ff:65:23:05:ce:6e:17:b3:44:f4:fb:2c:59:4a:e2:97:b0:91:
69:2e:ad:c3:2f:2a:58:37:8d:f9:fc:69:9d:59:c5:6c:53:74:
aa:08:63:53:47:7e:3b:d9:4d:94:23:08:3a:71:d8:6d:a4:94:
e6:36:40:34:6d:18:72:be:74:ba:6d:bc:87:a2:2d:74:d0:0a:
bd:2b:cb:08:0f:7b:07:77:7e:ae:a8:8b:5e:2f:4b:63:e5:23:
4b:3a:7b:93:8a:70:5f:80:66:75:c6:22:9f:60:98:ad:5e:b3:
b2:47:b1:3f:ce:25:f6:f5:2c:73:89:74:d9:c3:c7:ac:d3:d8:
4d:e7:23:9c:4a:1a:25:f7:a7:7f:8e:9e:73:4f:11:20:33:50:
30:e2:67:1e:1d:3b:35:fb:d7:94:9f:97:ac:e5:e5:79:1c:aa:
96:c7:78:bc:53:47:c2:95:b3:a6:7b:41:98:75:69:7e:5a:b7:
4c:74:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:45:21 2025 by rpki-client