Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/c1fGsP0bCEH6cCis_UoQKhD3CSY.roa
File: c1fGsP0bCEH6cCis_UoQKhD3CSY.roa (raw, json)
Hash identifier: tV98uAPL9NGHun4KK73liMuNDYczrIrsIhzMw0qt0ig=
Subject key identifier: 73:57:C6:B0:FD:1B:08:41:FA:70:28:AC:FD:4A:10:2A:10:F7:09:26
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 0196ECC0F35FFF66B650D74528A3B2620D73
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/c1fGsP0bCEH6cCis_UoQKhD3CSY.roa
Signing time: Tue 20 May 2025 08:13:10 +0000
ROA not before: Tue 20 May 2025 08:13:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42648
IP address blocks: 195.248.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:c0:f3:5f:ff:66:b6:50:d7:45:28:a3:b2:62:0d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: May 20 08:13:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7357c6b0fd1b0841fa7028acfd4a102a10f70926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:40:72:38:64:d0:46:42:00:b6:cc:7e:b4:
59:77:c5:e8:c9:17:d1:26:3e:9d:23:f3:62:b4:83:
a5:0d:8b:4c:d3:ed:42:a9:0a:27:c5:7e:4f:3c:f7:
31:4c:d4:03:e5:e8:03:b0:be:cc:10:ff:41:ba:36:
ad:34:8b:b6:f5:b0:29:b6:bd:7f:70:47:fc:25:16:
d1:93:56:99:80:5b:f8:b6:1c:84:12:1d:2c:9b:a9:
79:34:3f:28:e5:43:99:e3:8e:d7:6f:71:62:dd:73:
1f:15:cf:cc:07:55:7f:2e:99:74:7c:1e:3e:98:4f:
0b:90:c0:27:b3:09:01:e8:30:a6:ab:b7:ca:51:fb:
69:97:e7:a8:63:1f:b0:a5:4c:49:8c:13:ba:63:a8:
2c:2b:f3:5a:8e:ab:27:cf:3c:74:66:70:5b:ac:10:
a3:4b:b6:89:0e:a5:d6:d5:b9:8a:96:55:db:6b:61:
51:30:ea:f6:8d:16:b8:98:44:99:6c:9c:a1:6a:de:
9b:d0:6d:f1:41:c7:62:b9:0e:3a:b3:fc:00:48:17:
d4:c7:7d:83:78:84:92:f5:fd:ae:45:db:ed:22:f5:
5d:96:0f:c3:ae:36:74:2a:56:57:35:9c:3c:3b:f1:
be:ed:20:07:94:7c:e1:db:0c:63:16:7e:82:27:f6:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:57:C6:B0:FD:1B:08:41:FA:70:28:AC:FD:4A:10:2A:10:F7:09:26
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/c1fGsP0bCEH6cCis_UoQKhD3CSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.225.0/24
Signature Algorithm: sha256WithRSAEncryption
29:80:fc:54:f8:8a:49:01:b3:fa:0d:b7:0b:2a:0d:2e:bf:e9:
37:ef:37:79:28:7c:96:95:ba:87:16:b8:46:4b:1f:dc:96:03:
b3:71:e8:24:96:60:61:a7:8d:ad:d5:e0:e6:6b:3e:7f:a1:8b:
7f:88:ab:5c:f9:7d:35:ff:53:35:05:f0:47:9f:66:4a:6e:0b:
ea:ce:ca:a4:32:61:11:2a:ea:da:cb:de:fe:8c:e9:9d:4e:c7:
ee:7a:dc:2f:bb:39:86:ca:c1:63:c0:4a:56:43:5e:df:2d:19:
cf:12:c2:4d:a7:3d:ad:bf:ed:2c:ed:4e:f8:4f:01:74:3f:c6:
fa:06:c8:74:37:c2:f9:ec:72:50:ce:83:9b:b2:15:be:f3:62:
da:b1:d9:fe:7a:af:51:fc:3e:69:e5:8f:37:18:47:27:a9:98:
b1:8d:1d:16:7f:ee:78:6a:cf:1a:ef:2d:bc:a6:2d:cd:87:09:
f9:b2:26:e2:ad:b2:59:27:58:04:d1:23:c6:4e:72:a8:37:db:
47:ec:92:fa:5f:97:d1:14:96:04:71:22:c5:6e:0a:ec:74:7b:
73:b9:02:c0:e0:6a:ef:8e:d7:f3:11:20:0c:26:4b:06:1a:9b:
ff:a8:c9:ed:dc:4c:34:be:3f:4b:48:73:38:4b:a0:11:7e:1a:
25:35:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:57:36 2025 by rpki-client