Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/1-QaESH-Y2QhPqcpSoi8t5RQnRzA.roa
File: 1-QaESH-Y2QhPqcpSoi8t5RQnRzA.roa (raw, json)
Hash identifier: tm4k5KqgYtwGTZCVOd0pYNB6yIwBE4zoDNRsM5SfEu8=
Subject key identifier: F9:06:84:48:7F:98:D9:08:4F:A9:CA:52:A2:2F:2D:E5:14:27:47:30
Certificate issuer: /CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Certificate serial: 01973133598E8BA860BACA2D4F15BDF9F4B2
Authority key identifier: 42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/1-QaESH-Y2QhPqcpSoi8t5RQnRzA.roa
Signing time: Mon 02 Jun 2025 15:12:18 +0000
ROA not before: Mon 02 Jun 2025 15:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214914
IP address blocks: 83.174.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:33:59:8e:8b:a8:60:ba:ca:2d:4f:15:bd:f9:f4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Validity
Not Before: Jun 2 15:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f90684487f98d9084fa9ca52a22f2de514274730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:12:1c:3d:9d:dc:02:1d:09:22:1b:98:30:e0:
72:91:01:59:bf:68:32:d5:9b:d3:b4:61:5a:fb:b3:
00:da:39:2b:f1:b8:4f:5b:fe:93:e6:08:85:b9:ff:
02:66:a5:2a:0c:d7:19:3f:0c:00:23:8f:1d:18:f7:
02:b0:26:f6:f6:3c:70:24:2e:47:fa:ed:0f:89:4c:
a5:c4:27:de:6a:b4:79:bc:7a:af:e2:78:83:b0:33:
5f:71:3d:28:a9:0b:84:04:e9:e1:5e:54:66:38:00:
90:c4:5c:56:50:9b:cb:05:57:7e:07:84:86:8f:99:
4d:84:8c:79:fb:20:e2:aa:81:7b:6e:bb:b2:e1:3e:
27:a7:a6:a3:57:37:56:5a:67:03:c5:37:34:e7:48:
a7:b4:36:0c:e9:ac:63:c2:b5:77:22:a6:74:ee:b6:
70:16:c8:30:de:ba:64:db:13:33:1b:58:8d:bc:c0:
fc:2e:5d:41:a6:ed:ad:a4:68:fe:58:4c:61:1e:ff:
30:c2:a2:73:4c:8f:ce:2e:ed:e2:d7:dc:7a:c4:0e:
21:02:89:db:7d:a4:da:eb:9f:04:35:18:e3:61:c5:
06:ab:ac:e6:af:0d:13:20:15:c4:e3:11:a7:27:e8:
6d:3d:7e:7d:0d:ca:44:30:7d:dc:21:3f:99:2f:af:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:06:84:48:7F:98:D9:08:4F:A9:CA:52:A2:2F:2D:E5:14:27:47:30
X509v3 Authority Key Identifier:
keyid:42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/1-QaESH-Y2QhPqcpSoi8t5RQnRzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.174.155.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:9c:f5:cc:18:0d:d4:6d:b4:17:17:eb:6e:17:24:70:55:56:
1b:59:cc:49:c3:36:f6:c4:16:33:5d:b9:73:7d:5c:40:0b:c8:
ef:b2:81:a8:61:02:cb:6f:2a:fa:0f:b7:4d:e6:0c:5c:ab:3a:
30:b6:b5:0e:9c:4d:5e:da:b9:89:29:3b:60:bf:c3:a1:2e:82:
74:42:a9:2e:39:fe:cc:b4:b2:d4:36:f7:b8:0d:a4:cd:44:39:
dd:87:91:7c:66:93:91:7c:f3:13:0c:c2:df:7b:70:9f:54:ae:
5a:01:75:57:d7:09:13:8e:c3:f2:e9:4e:2d:74:b6:90:f3:94:
10:9b:3a:bb:cc:9c:ee:96:09:6d:15:22:4a:72:bf:8a:40:ff:
cf:81:da:05:78:68:66:ea:4a:af:a9:ed:0a:4d:32:ee:8f:ca:
65:1d:e1:f8:94:0b:ab:c5:b4:3e:95:a1:8c:9c:a6:51:ab:67:
72:32:3a:cb:83:e2:d7:36:e3:99:f3:ee:90:5c:51:98:07:04:
d1:23:df:61:a9:1c:30:3e:44:9a:f0:2c:1e:c7:a0:7d:27:c7:
8b:f8:60:2b:40:10:a3:7b:4a:dc:df:fe:18:f2:ea:dd:9e:cd:
81:e0:74:35:b5:64:55:91:a1:da:8c:05:c2:b9:3d:04:25:ac:
a9:c6:dd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:41:18 2025 by rpki-client