Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/q8qrXNRiEcr4aeYusyGfWRCNc-o.roa
File: q8qrXNRiEcr4aeYusyGfWRCNc-o.roa (raw, json)
Hash identifier: fNwAaRi4GKP6j1uflJ8QDipwq3dLWCSiWkQcWVOgGg4=
Subject key identifier: AB:CA:AB:5C:D4:62:11:CA:F8:69:E6:2E:B3:21:9F:59:10:8D:73:EA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019722526751B4DB801E64605D45CA923D12
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/q8qrXNRiEcr4aeYusyGfWRCNc-o.roa
Signing time: Fri 30 May 2025 17:51:55 +0000
ROA not before: Fri 30 May 2025 17:51:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 74.112.152.0/22 maxlen: 24
205.237.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:22:52:67:51:b4:db:80:1e:64:60:5d:45:ca:92:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 30 17:51:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abcaab5cd46211caf869e62eb3219f59108d73ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:f2:86:34:fd:f3:70:e6:57:5e:06:c0:42:
cc:48:76:f5:67:bb:5e:43:03:eb:ff:c9:15:1c:73:
2a:3c:2c:9b:43:e5:2b:d6:85:3c:83:7f:0f:80:e9:
f6:66:8c:d8:eb:ff:ea:57:45:a8:b2:92:60:3b:38:
a8:59:01:30:c8:66:fb:2b:a2:0d:da:e5:71:18:50:
81:b9:9f:3c:49:39:36:4e:b4:50:1a:1d:ea:2e:7d:
f9:3f:0e:bf:be:1b:87:43:e3:1c:2e:a7:56:a6:10:
9c:fb:5f:83:f2:86:b7:27:7d:fc:7f:9a:a9:ab:bb:
ec:cc:4d:a7:1d:3a:71:b1:51:74:be:96:ec:c1:96:
e9:a0:9d:00:b3:dc:22:96:60:37:23:63:05:b1:48:
97:1e:ee:5f:c5:b7:a3:8d:39:e9:66:5b:95:29:4c:
05:ef:34:de:1c:a9:95:e8:90:7b:7f:4b:7e:8e:25:
e8:9a:de:06:32:be:46:0c:66:88:48:1e:23:05:51:
a2:ee:3e:26:dd:52:8f:3f:60:66:27:0a:74:22:33:
61:8f:37:cf:ca:fb:50:eb:36:e8:10:04:64:bd:20:
49:be:68:5c:16:c5:c4:7f:db:41:ca:05:0c:ca:73:
a1:9b:c0:80:9f:1d:bc:f2:fa:8f:54:6a:54:7c:5f:
30:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CA:AB:5C:D4:62:11:CA:F8:69:E6:2E:B3:21:9F:59:10:8D:73:EA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/q8qrXNRiEcr4aeYusyGfWRCNc-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.112.152.0/22
205.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
34:59:df:0c:0b:1f:71:28:3c:74:3a:6c:4d:ce:89:8a:4f:8e:
bb:00:b4:cd:05:46:a6:05:41:2f:85:9b:d2:a7:d7:53:50:e1:
64:90:8c:70:49:5e:29:e2:97:48:7b:cd:ed:77:d4:f7:13:70:
68:18:67:8e:82:32:23:a5:be:43:39:b7:19:bf:ff:de:a2:14:
be:d5:06:85:08:26:26:c0:79:c5:c1:aa:64:d5:ee:08:a5:23:
d6:7e:2b:cf:7d:4b:93:18:fb:56:33:2f:ab:2a:cb:1d:df:d8:
dc:d7:cd:0a:3c:c8:f7:53:31:64:5a:d1:ea:18:1f:07:99:50:
06:27:24:91:5d:4a:f8:c9:b4:7e:3c:c3:f1:5c:12:08:a1:98:
1e:15:c0:98:40:cc:a4:c0:11:6e:2e:2d:9c:bf:9a:7d:84:a4:
01:26:e6:e2:8d:73:ab:d6:c5:ce:04:5f:5d:da:d7:7f:a6:3e:
0d:10:5f:0b:d7:d9:66:33:fc:58:4c:90:92:10:b9:ac:25:31:
b8:79:3d:71:50:21:0e:54:89:fb:1e:2b:88:a2:00:2e:67:a8:
66:f4:82:90:98:db:f5:5a:50:f7:5b:ee:60:c9:42:9a:04:06:
a8:27:5a:f4:47:e4:7f:81:99:1f:6b:c0:8a:d9:ed:59:3e:49:
d3:cc:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:26:39 2025 by rpki-client