Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/Q63VjVLDUPnmuHnw2k7_RU2ecDo.roa
File: Q63VjVLDUPnmuHnw2k7_RU2ecDo.roa (raw, json)
Hash identifier: hbZpJJlkwNtwiNGl+GRL8rkQ+0B/zJwYAf2+pY47R10=
Subject key identifier: 43:AD:D5:8D:52:C3:50:F9:E6:B8:79:F0:DA:4E:FF:45:4D:9E:70:3A
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 0195F23F9D7CD3BB72BA1FD82F94D93F4719
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/Q63VjVLDUPnmuHnw2k7_RU2ecDo.roa
Signing time: Tue 01 Apr 2025 16:46:50 +0000
ROA not before: Tue 01 Apr 2025 16:46:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 64.190.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:3f:9d:7c:d3:bb:72:ba:1f:d8:2f:94:d9:3f:47:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Apr 1 16:46:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43add58d52c350f9e6b879f0da4eff454d9e703a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:2a:26:33:14:bb:ab:da:92:b7:1a:53:78:
53:de:cf:ac:99:21:d2:06:87:bf:ac:7b:07:03:05:
66:ef:a7:42:b2:a0:f9:78:26:35:1d:4c:e0:fd:e3:
8a:7b:36:52:c0:a3:78:79:6f:d6:91:a9:72:2a:71:
8a:05:fe:03:48:a9:47:2d:11:d9:5e:26:cf:9e:ea:
19:13:74:81:6a:73:00:0b:62:01:dd:69:cf:95:99:
74:a8:92:3a:d2:67:1f:a7:e2:0a:22:8d:e3:e5:f7:
b2:76:cc:10:f2:f5:93:e6:5d:2c:b2:44:f6:40:77:
33:bb:78:bd:04:db:38:b3:ba:36:f3:3f:77:e1:57:
63:52:4f:b6:d6:6c:94:47:88:63:93:30:94:d6:88:
91:00:95:fd:68:a5:3b:40:4a:f6:41:9c:d5:87:37:
54:dd:35:ae:7f:4a:3c:f9:d5:07:ac:c1:3c:fd:36:
f3:d3:26:be:15:49:c6:a3:40:d9:ea:37:7a:02:34:
67:32:e7:bf:86:09:db:f9:6a:d6:68:7e:c4:86:ce:
09:71:bd:2e:e8:84:ef:67:af:3b:93:81:98:92:28:
83:d0:e8:41:d3:5e:ab:00:79:3c:56:9b:b6:20:40:
31:4b:d2:ff:f6:70:41:c9:23:1d:f1:3e:ad:71:fe:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AD:D5:8D:52:C3:50:F9:E6:B8:79:F0:DA:4E:FF:45:4D:9E:70:3A
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/Q63VjVLDUPnmuHnw2k7_RU2ecDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
05:45:1a:32:52:5c:c8:df:72:89:92:b1:f6:d5:01:d5:16:1e:
ef:ab:0a:93:e0:58:d4:ec:a3:77:04:72:c0:8e:78:74:10:ea:
08:c2:4f:8a:5b:82:49:fd:7b:5a:75:96:e5:10:24:13:46:30:
8b:2e:8f:54:8f:00:3f:17:13:3e:f4:28:0f:60:6f:61:39:19:
89:fd:fb:c9:f2:a2:eb:2f:9c:db:bb:11:2d:cc:5c:df:10:32:
fe:35:22:a5:c8:00:7e:9d:20:97:a6:71:32:5b:84:c1:91:a7:
6e:e4:07:a8:84:ba:73:c8:2d:c8:4d:db:4d:1a:54:e8:c3:8c:
3c:79:b7:35:98:15:41:03:07:f7:2a:84:72:71:5d:15:e0:b3:
15:27:41:c6:3e:fd:46:60:cc:d1:01:e6:97:45:88:58:5d:6d:
27:5d:7a:e1:75:60:a2:df:98:0d:7c:f9:5a:ec:17:1d:05:26:
a4:39:52:a7:fb:83:38:1b:30:e8:68:92:db:b0:f2:6f:bd:62:
42:7d:ef:93:5a:43:9f:e0:4f:6b:27:fe:e1:1a:d8:31:ab:c8:
c8:9b:8f:cf:5d:8c:c0:19:5e:8c:71:55:d1:c9:c7:81:0d:a0:
d0:cf:32:65:69:b6:21:31:41:5c:f1:8c:bd:84:dd:ce:a7:29:
be:f6:93:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:56:14 2025 by rpki-client