Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/4lqvUj_aarjM1QCov1WKcZ47cD4.roa
File: 4lqvUj_aarjM1QCov1WKcZ47cD4.roa (raw, json)
Hash identifier: CUeCuFIy+7/m+7Rp9JxCjE4itMo0nF9rOUfz1A83JwI=
Subject key identifier: E2:5A:AF:52:3F:DA:6A:B8:CC:D5:00:A8:BF:55:8A:71:9E:3B:70:3E
Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial: 0196D8B656B0920ACB93211F989F8E7A02B6
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/4lqvUj_aarjM1QCov1WKcZ47cD4.roa
Signing time: Fri 16 May 2025 10:49:10 +0000
ROA not before: Fri 16 May 2025 10:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216334
IP address blocks: 194.55.238.0/24 maxlen: 24
194.55.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:b6:56:b0:92:0a:cb:93:21:1f:98:9f:8e:7a:02:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Validity
Not Before: May 16 10:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e25aaf523fda6ab8ccd500a8bf558a719e3b703e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9b:a4:74:fc:a8:8f:dd:54:42:a6:f6:47:2f:
c4:5e:e2:bc:6d:5d:81:03:4d:80:6a:92:a5:89:2f:
6c:56:cf:77:51:47:50:96:31:e2:75:d5:11:0f:ee:
4f:10:3c:92:6a:31:52:24:16:ef:02:f9:c7:74:0a:
5a:d0:cc:48:36:c3:42:1b:71:44:ba:78:2e:8b:70:
7f:15:84:be:46:4b:ab:12:c9:58:b0:c7:3b:11:29:
0c:f8:3d:ab:ce:9b:a0:a8:88:e0:ac:43:a3:e4:a5:
7a:67:c7:af:a2:48:bb:f3:24:af:d8:2b:83:81:3d:
10:3d:af:15:eb:85:ac:cf:be:07:3c:5d:2e:92:57:
7e:26:4a:92:16:3b:57:7e:87:ad:ca:c3:35:04:41:
eb:44:9c:45:1e:c8:4e:17:55:bc:ea:55:38:53:04:
46:0b:eb:54:f1:2e:d5:ac:10:db:eb:71:ba:ae:b4:
cc:82:89:46:e5:37:d1:c6:61:15:c6:27:4a:f7:57:
86:36:0c:a0:3f:2c:99:11:54:29:1e:43:e4:43:8f:
c2:8f:0f:58:0f:6d:7e:93:b9:d7:02:45:4a:08:5d:
a3:5c:56:e7:3c:8c:20:71:bf:f2:e9:4c:8d:38:53:
eb:5b:15:32:57:9f:96:b7:c3:ca:0c:97:de:2b:c4:
73:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5A:AF:52:3F:DA:6A:B8:CC:D5:00:A8:BF:55:8A:71:9E:3B:70:3E
X509v3 Authority Key Identifier:
keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/4lqvUj_aarjM1QCov1WKcZ47cD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.238.0/23
Signature Algorithm: sha256WithRSAEncryption
49:30:97:5b:6f:90:48:4b:65:02:43:e8:b3:31:bc:35:db:0c:
7d:43:d4:d6:43:5a:4b:81:5b:95:1b:41:c5:f4:e8:f9:87:66:
0c:04:f3:4b:7d:22:2a:8f:97:b2:c5:c7:d9:8a:96:77:ef:ef:
e4:fd:a8:fe:ec:1e:fc:17:fc:78:10:d4:4d:d4:e0:d4:5f:1c:
5d:55:b9:ee:fb:a0:ff:58:b1:fb:96:2e:f3:8d:a1:ba:d6:ce:
09:ad:42:f1:9e:5d:72:df:02:ab:82:2d:28:18:d6:a1:21:e3:
03:37:fd:09:5c:13:97:5c:53:8a:aa:fa:df:fc:1d:89:33:da:
41:8b:8c:41:49:8a:fb:a6:0e:4f:b8:e2:0a:04:60:9e:69:40:
dc:1f:d7:2d:cb:a6:ec:9f:d6:5d:b9:e1:9b:20:87:51:e5:c1:
1a:0e:50:29:5c:4d:3a:af:9b:c2:e4:fb:19:f2:14:c7:97:01:
b3:4e:28:ba:aa:fc:33:d0:36:04:7f:8e:f6:17:aa:93:4c:fe:
f4:03:d6:b3:76:20:a6:ae:c5:fd:88:3b:fd:0d:d3:09:9c:8b:
0c:45:3d:8d:aa:73:fb:db:8c:41:94:68:d5:f7:fd:26:97:0e:
e8:9b:e2:30:c8:39:15:da:6e:80:b4:2b:ac:7d:64:c0:c7:9d:
fe:49:8b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:31:31 2025 by rpki-client