Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/rF6Gqj7_srm_DIMIqHN-GdQzygE.roa
File: rF6Gqj7_srm_DIMIqHN-GdQzygE.roa (raw, json)
Hash identifier: 2gAliij8n2m8vHu7/1GlcWyJj1a4KLcr3RlOnjXIB4I=
Subject key identifier: AC:5E:86:AA:3E:FF:B2:B9:BF:0C:83:08:A8:73:7E:19:D4:33:CA:01
Certificate issuer: /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial: 01967D0D5FC64173C6AF9B5E80926DACE86D
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/rF6Gqj7_srm_DIMIqHN-GdQzygE.roa
Signing time: Mon 28 Apr 2025 15:39:10 +0000
ROA not before: Mon 28 Apr 2025 15:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206755
IP address blocks: 185.177.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:0d:5f:c6:41:73:c6:af:9b:5e:80:92:6d:ac:e8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Validity
Not Before: Apr 28 15:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac5e86aa3effb2b9bf0c8308a8737e19d433ca01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:5b:a1:48:f0:1b:7a:77:27:3e:7c:94:a2:
ea:fc:44:b4:99:8f:62:a5:4a:34:c6:50:23:d1:02:
20:45:7e:9f:8e:04:80:84:9b:73:30:06:ee:99:12:
66:68:33:ff:eb:62:af:5d:01:41:eb:ac:be:07:59:
43:4e:ac:59:f2:6e:9f:bc:39:68:19:a1:61:16:a0:
80:89:5d:c6:58:a4:e5:0a:95:69:6f:9a:53:3e:db:
40:16:14:df:79:b3:ba:8b:f2:e9:6e:53:34:9a:82:
6a:ee:bb:0e:25:68:7f:17:23:ae:01:12:fe:e8:4d:
32:d0:f3:10:34:cc:59:09:03:06:4a:4c:94:f4:d9:
cf:8e:82:1b:b3:18:f8:a8:9b:55:e9:24:52:12:af:
b2:8d:ba:36:0e:b2:0c:13:fe:e6:ce:89:81:69:4b:
88:8e:05:57:a0:22:b5:36:3c:da:75:29:51:80:e9:
d8:56:57:2a:87:29:89:ca:c3:66:77:9e:99:f3:db:
6f:00:c0:da:48:a5:4e:e4:b2:8b:63:2b:f6:ab:c7:
e0:e6:4e:9c:7e:7b:c2:40:2e:f5:97:af:95:5e:be:
eb:3f:0a:b8:5c:cf:c6:f5:f2:a5:e1:ad:56:57:11:
4e:6f:16:a2:af:81:f2:44:55:ec:f1:dc:b5:75:4e:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5E:86:AA:3E:FF:B2:B9:BF:0C:83:08:A8:73:7E:19:D4:33:CA:01
X509v3 Authority Key Identifier:
keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/rF6Gqj7_srm_DIMIqHN-GdQzygE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.58.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3b:8a:10:32:31:df:cd:77:2f:a3:de:82:33:22:ac:12:9f:
7a:ef:a2:69:c8:41:52:1b:22:3b:ea:51:48:fc:44:c8:67:69:
f8:31:a6:c9:d4:97:7e:cf:70:dd:47:71:78:b6:df:0d:48:80:
ff:b2:75:26:0b:18:68:63:76:7d:84:54:4a:cb:60:4b:d8:54:
ae:d1:06:a6:01:28:a3:e7:56:31:c7:01:e3:85:0d:b0:3c:03:
ec:5f:c4:95:f4:19:81:2e:f9:4e:7c:b8:ab:f4:3b:21:0c:01:
fa:80:5d:9b:b9:b1:f6:a6:16:9f:4c:c6:9d:84:6d:6c:c3:0c:
d4:9a:0e:32:f5:d3:f2:a3:90:ad:b1:c2:4d:78:19:c1:b0:e1:
2e:92:8a:aa:ea:88:b6:43:cc:73:94:de:df:ac:2c:f0:33:79:
b0:ba:d8:12:03:82:4b:d2:83:8b:69:14:5e:ce:49:f2:f2:ac:
35:8d:0d:e4:c7:d8:50:99:1e:2c:76:2d:d9:06:8d:a8:86:6a:
f7:7c:59:15:0c:b9:b5:9f:ce:d9:5f:93:d2:4f:13:36:04:8b:
98:04:e8:ad:b6:a7:ad:68:f3:5f:4b:1e:ce:4a:57:83:b0:b3:
6e:10:dc:82:7e:e8:f8:94:13:42:02:51:a5:f3:0b:3c:1a:2e:
e0:6e:76:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:24 2025 by rpki-client