Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CEKjQgJ0rq3Ojjdbs394f-DOxSg.roa
File: CEKjQgJ0rq3Ojjdbs394f-DOxSg.roa (raw, json)
Hash identifier: /U3lHqxh+AgHa3OIVLzNRcSh1hwMrvwzXGkXZO5QTzU=
Subject key identifier: 08:42:A3:42:02:74:AE:AD:CE:8E:37:5B:B3:7F:78:7F:E0:CE:C5:28
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0196DAE78EFD1F98567809C176CA005F4738
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CEKjQgJ0rq3Ojjdbs394f-DOxSg.roa
Signing time: Fri 16 May 2025 21:02:10 +0000
ROA not before: Fri 16 May 2025 21:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 185.199.54.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 21:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:e7:8e:fd:1f:98:56:78:09:c1:76:ca:00:5f:47:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 16 21:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0842a3420274aeadce8e375bb37f787fe0cec528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:ce:15:d5:06:5a:b4:5b:70:b7:ca:2f:a2:
33:c0:27:6b:1d:a5:62:6c:ae:18:27:6d:bd:72:fc:
b8:a1:92:2f:19:6f:83:d1:ec:a8:77:e2:59:29:b8:
62:e8:01:23:a6:53:13:14:95:ae:21:54:d4:c4:90:
fc:56:00:aa:d7:b4:e0:61:64:ef:e1:78:9e:4e:a7:
b5:78:64:2b:09:20:0e:2b:76:16:89:8a:29:1d:54:
cc:4e:3d:5b:84:26:63:80:59:27:32:41:8d:81:84:
82:4a:c7:85:2f:1a:55:f0:77:0a:84:74:26:b2:22:
ee:42:7f:bf:26:32:0f:a2:f0:f3:98:f3:a7:cc:30:
36:d1:b9:e7:57:07:0d:cb:f9:03:a2:c0:33:e8:73:
c3:7f:e0:2e:44:ab:4e:d2:5e:f8:15:c3:38:8c:46:
df:a3:1d:b7:92:72:6e:4a:89:33:56:b9:df:08:d5:
59:3c:38:20:b5:eb:e2:ab:b2:40:4c:40:e6:73:aa:
2a:25:e3:b2:13:6a:6a:dd:e9:75:f1:3d:c7:b3:48:
02:7b:5f:0e:45:db:58:79:ed:95:b6:40:a9:5b:4f:
83:b8:16:ea:47:6f:57:ae:1f:20:1a:ca:d4:38:7e:
bf:b4:71:04:da:0c:0e:93:c7:c7:b3:28:e3:0e:62:
8f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:42:A3:42:02:74:AE:AD:CE:8E:37:5B:B3:7F:78:7F:E0:CE:C5:28
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CEKjQgJ0rq3Ojjdbs394f-DOxSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.54.0/24
194.76.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ad:76:9f:8a:43:35:39:48:7d:21:be:24:20:12:d8:8a:bc:
99:06:11:05:88:ae:63:4a:e5:e9:cb:fc:1b:9e:06:9f:a9:54:
c8:fb:c1:d3:5c:48:6f:0d:fc:1a:d6:74:e2:ad:5e:21:bd:be:
2b:0b:43:8b:1f:23:58:b2:14:73:a2:6a:aa:24:4d:b3:6c:53:
78:06:60:81:48:2e:2e:8e:dc:8a:20:c5:e6:e5:2f:f8:5b:8c:
3b:7c:3f:ff:a1:02:c9:ea:04:a3:0d:65:6c:bb:73:dd:26:a7:
c2:6b:13:10:4f:0a:c1:42:5d:96:4e:33:b4:1c:1c:f1:0b:5b:
cf:47:51:8c:13:b4:44:8f:9e:c1:58:1b:7b:24:f2:99:c6:37:
5e:35:fe:2b:0a:7e:d9:72:8d:3a:38:06:bf:01:8a:c3:4e:32:
8d:0a:bb:76:ca:dd:a2:83:7b:f0:83:96:34:ad:73:62:44:51:
23:34:fe:e6:a4:21:e4:b7:a7:20:b5:29:ea:e1:e0:5a:da:de:
12:0e:02:df:93:43:c9:18:25:59:7d:48:1f:b7:9c:2d:83:25:
b3:b9:f3:46:e3:e5:ac:5b:fd:e3:f1:58:41:df:c9:c7:fe:82:
72:85:1f:d7:76:08:17:54:49:e4:4c:74:f3:fd:71:57:ab:59:
5a:ef:fe:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:00:48 2025 by rpki-client