Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/asGcSQns56fV1692zV3Ch_oG4Kg.roa
File: asGcSQns56fV1692zV3Ch_oG4Kg.roa (raw, json)
Hash identifier: 5dHMVFt5oYiYTS73IJtgkzio0zBGi60UjdzaO/dGRQI=
Subject key identifier: 6A:C1:9C:49:09:EC:E7:A7:D5:D7:AF:76:CD:5D:C2:87:FA:06:E0:A8
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0196F1E0A7415306E2C21355A29A381C8028
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/asGcSQns56fV1692zV3Ch_oG4Kg.roa
Signing time: Wed 21 May 2025 08:05:54 +0000
ROA not before: Wed 21 May 2025 08:05:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 93.88.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:e0:a7:41:53:06:e2:c2:13:55:a2:9a:38:1c:80:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: May 21 08:05:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ac19c4909ece7a7d5d7af76cd5dc287fa06e0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8e:73:45:0a:f8:d4:4e:b0:54:2b:7b:7f:4e:
05:89:71:de:7f:b1:f8:a4:0a:e0:f2:17:91:c2:a0:
17:1c:8c:99:23:9e:98:26:76:26:7b:3a:02:03:21:
74:f3:06:2b:5a:5f:ec:2f:95:44:a8:9a:a0:f6:b8:
af:99:16:94:6d:d4:cd:1a:3b:e8:b8:29:d7:fc:27:
80:34:d5:bb:7d:22:85:71:db:8d:f4:d8:69:aa:29:
32:c6:e3:91:de:0d:18:9a:0e:f7:c0:77:ad:73:8d:
28:41:ae:c0:d8:e2:37:90:44:ee:3a:04:10:7b:3c:
db:98:f0:88:6c:6b:7c:08:98:12:0e:0c:8c:25:db:
af:c3:36:b4:39:27:81:c1:94:31:76:a5:0c:c9:a6:
37:4f:bd:19:26:35:f9:bd:d7:b3:9b:2c:54:dd:57:
6a:a6:0c:ac:10:61:23:9c:de:8b:e1:1a:37:c8:59:
e8:12:84:06:62:46:af:9a:62:07:6f:81:3a:19:01:
1b:b7:b9:fc:d5:67:6b:cc:43:65:29:0a:19:c8:a3:
88:47:19:6d:0e:2c:94:52:e5:39:3b:83:cc:a6:5e:
11:16:ea:7c:45:4c:c3:86:f3:8b:ec:41:1d:8e:10:
42:1b:5f:20:d8:e2:db:c3:55:d5:76:5e:9c:e3:b1:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C1:9C:49:09:EC:E7:A7:D5:D7:AF:76:CD:5D:C2:87:FA:06:E0:A8
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/asGcSQns56fV1692zV3Ch_oG4Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.144.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:e5:94:0f:eb:d9:2c:fd:f4:57:7c:32:ee:47:2c:08:7b:1c:
e1:c3:15:4c:6e:0d:88:05:7b:35:07:d8:16:e1:2a:45:bd:64:
e5:15:9a:b3:fa:9a:40:a9:36:27:2c:87:e1:2a:90:d9:62:0d:
99:b8:8c:f4:78:19:b1:fd:79:8d:0f:87:90:10:f8:a9:ea:39:
b2:4b:6f:c1:36:34:28:ba:23:f2:e4:8e:96:af:60:09:e3:1f:
fc:dd:41:0b:2e:37:a9:dd:e4:00:aa:b7:93:ff:ff:50:77:2d:
bd:86:26:33:75:c4:8f:e7:b7:0e:6a:b0:70:61:bf:7d:fb:c6:
24:9a:c1:dd:bc:e9:25:a9:b7:0c:eb:0f:ed:bf:7f:44:fd:da:
b0:96:1c:42:dd:81:22:7b:cd:78:36:e0:8d:a8:8f:84:87:17:
dd:20:85:ff:f4:d6:85:6b:e2:ca:9b:57:e3:07:c6:01:7e:91:
1b:ff:83:b1:a8:20:4f:8b:57:f9:85:0a:ff:d0:fa:63:31:f9:
20:58:04:f7:fd:79:6b:fb:e0:fc:0f:3f:6d:44:91:d6:14:f8:
1b:4c:75:48:43:e9:d9:fc:f1:a4:cc:11:f3:29:f6:a0:0a:31:
3f:78:e6:68:e9:70:d4:7d:ef:09:d6:25:42:c7:ec:9f:aa:d5:
69:3b:09:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:57:44 2025 by rpki-client