Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/qz5SiI2sXR-WRnnucFhvQnfELA8.roa
File: qz5SiI2sXR-WRnnucFhvQnfELA8.roa (raw, json)
Hash identifier: 09Gy5OXgCKUY990X5d6V3JFErPSBHGwRclvnCE7zIxk=
Subject key identifier: AB:3E:52:88:8D:AC:5D:1F:96:46:79:EE:70:58:6F:42:77:C4:2C:0F
Certificate issuer: /CN=391b36bf39d2bc7f078e0279991876709c85acd9
Certificate serial: 01973F2E24398CDAA9B1F7F7025EBB960571
Authority key identifier: 39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/qz5SiI2sXR-WRnnucFhvQnfELA8.roa
Signing time: Thu 05 Jun 2025 08:21:17 +0000
ROA not before: Thu 05 Jun 2025 08:21:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207775
IP address blocks: 185.137.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:2e:24:39:8c:da:a9:b1:f7:f7:02:5e:bb:96:05:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391b36bf39d2bc7f078e0279991876709c85acd9
Validity
Not Before: Jun 5 08:21:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab3e52888dac5d1f964679ee70586f4277c42c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:0f:10:36:43:96:92:b9:a7:62:e9:3b:e1:
a7:00:de:a1:ca:53:3d:8b:5c:e6:fb:1c:cb:73:59:
f8:44:f0:ea:13:85:92:a7:f7:fd:c5:46:a5:3f:c8:
c8:24:96:54:65:36:24:54:d9:d4:d6:04:bf:7d:91:
13:45:71:e2:11:ef:c8:cf:05:57:e0:af:06:8f:b0:
42:7d:51:d6:9d:ae:97:00:3d:15:01:5e:d3:3e:c6:
ca:d7:a3:a0:e3:54:4d:21:19:22:81:df:59:fa:7a:
0b:4e:91:b6:64:89:06:2e:a1:e8:a9:51:b1:dc:75:
19:10:11:c3:d3:ea:ad:98:87:ff:5f:fb:97:f3:77:
f3:ad:cf:e0:d7:a8:a2:ab:90:70:83:7d:80:06:c8:
c1:b0:d9:c4:53:f9:69:2a:91:f9:bd:49:e3:d0:6a:
e0:dd:d2:6e:a2:a7:12:b9:2f:0e:1d:fd:12:57:65:
bd:ac:46:71:bb:80:3f:4f:89:aa:bc:57:52:27:3a:
c2:9d:12:82:18:ae:19:63:92:6c:27:7a:66:06:1a:
ff:37:42:94:e2:50:35:50:4b:40:c0:d9:66:5f:14:
a0:96:e4:f3:fc:3c:0a:8e:74:d2:08:a8:96:71:22:
d1:7f:26:b6:b3:36:4e:b0:3d:93:95:da:de:63:13:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3E:52:88:8D:AC:5D:1F:96:46:79:EE:70:58:6F:42:77:C4:2C:0F
X509v3 Authority Key Identifier:
keyid:39:1B:36:BF:39:D2:BC:7F:07:8E:02:79:99:18:76:70:9C:85:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORs2vznSvH8HjgJ5mRh2cJyFrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/qz5SiI2sXR-WRnnucFhvQnfELA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/083e2f-0f05-4258-bf99-1ddad6f36af0/1/ORs2vznSvH8HjgJ5mRh2cJyFrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.97.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c5:7c:74:8e:4a:28:35:e8:3f:f2:44:0e:63:0a:4c:e7:28:
c1:f4:e9:34:c2:fd:1b:6b:05:4a:c9:60:2f:28:3c:17:64:6f:
aa:f5:48:28:4f:82:50:4d:a1:71:65:1f:91:47:fc:5d:36:44:
46:ab:41:68:d0:2e:15:e0:24:4a:45:70:14:89:eb:cb:bc:60:
cb:4e:ac:ba:e8:35:d8:83:34:8c:5d:05:0e:a2:4a:4c:2d:4b:
22:3e:72:bb:b1:d8:02:8d:8c:39:9f:4e:d3:85:85:36:be:38:
e4:12:e3:e0:68:17:74:ea:65:42:ae:96:03:8d:38:8b:a0:76:
3f:54:6e:e3:e6:da:ff:f2:f2:0b:28:0f:bc:7b:a9:d7:b2:76:
86:ce:59:2c:ed:23:86:bf:f4:4e:4b:6a:b0:bb:d3:64:24:41:
41:7b:eb:79:33:79:f6:bb:b2:dc:93:02:df:f2:f7:1c:07:ee:
d3:aa:61:06:cf:dd:ae:e0:69:51:74:2b:c3:dd:77:a3:cc:94:
cf:40:17:d7:02:52:92:4b:cc:bf:67:ee:c9:eb:f6:c7:9c:2b:
48:37:f2:88:0e:db:23:09:65:dd:61:f4:14:69:ab:94:af:38:
74:ea:fc:c6:22:af:c5:20:16:f1:64:a8:13:ff:69:80:74:f1:
e5:d1:07:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:12:31 2025 by rpki-client