Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/SHVliV8XMe3mR6yqOziT6sX58YQ.roa
File: SHVliV8XMe3mR6yqOziT6sX58YQ.roa (raw, json)
Hash identifier: ouvpuTM11fktVQq0dMf++ddinkq79NWzu4p4qqeE2Yo=
Subject key identifier: 48:75:65:89:5F:17:31:ED:E6:47:AC:AA:3B:38:93:EA:C5:F9:F1:84
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0196D3A41F5EBBF7E9DDDB603832FF670CC2
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/SHVliV8XMe3mR6yqOziT6sX58YQ.roa
Signing time: Thu 15 May 2025 11:11:10 +0000
ROA not before: Thu 15 May 2025 11:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43581
IP address blocks: 89.23.105.0/24 maxlen: 24
89.23.106.0/24 maxlen: 24
89.23.110.0/24 maxlen: 24
185.230.190.0/24 maxlen: 24
185.230.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:a4:1f:5e:bb:f7:e9:dd:db:60:38:32:ff:67:0c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: May 15 11:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=487565895f1731ede647acaa3b3893eac5f9f184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:8e:4e:70:2f:7c:68:2f:e6:63:74:e0:8f:
b3:2c:11:b7:72:16:59:00:ef:c7:46:7d:a9:4a:9e:
1a:88:a5:e7:fc:5e:8e:60:52:97:3a:f0:a6:69:1c:
02:e2:bc:db:4e:d0:b9:61:5e:66:32:77:ea:e4:a6:
c4:6b:b6:c7:f5:50:58:90:79:bf:44:6e:f0:1c:12:
34:1d:a9:fe:d7:06:2f:12:40:54:4c:fc:c4:43:99:
46:05:38:f3:db:c9:64:bc:f0:c7:49:fa:bc:3b:85:
94:e6:dc:fe:dc:61:52:d4:11:aa:b9:14:a8:11:ae:
df:96:93:fd:c2:fe:b0:dc:fb:ac:98:19:24:b2:7b:
da:0c:a3:9c:89:2f:f7:c4:cf:49:94:44:13:b5:c1:
0d:ab:0a:53:97:cf:15:bc:f8:b0:64:36:46:9b:75:
0f:75:68:c7:8c:2f:ba:a6:b8:ab:a0:71:c7:09:f6:
60:77:63:d8:15:b9:e1:b2:3e:02:aa:29:32:ed:3d:
91:f4:2a:14:bb:12:ea:cd:d1:b9:32:50:7e:6b:c6:
ca:50:ca:44:aa:80:7e:12:a7:ae:d4:55:a6:9c:4f:
10:49:66:79:32:0c:53:13:5f:ce:28:85:15:7e:cf:
16:27:34:36:28:c9:7f:70:50:a4:17:2d:d7:71:be:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:75:65:89:5F:17:31:ED:E6:47:AC:AA:3B:38:93:EA:C5:F9:F1:84
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/SHVliV8XMe3mR6yqOziT6sX58YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.105.0-89.23.106.255
89.23.110.0/24
185.230.190.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:04:2e:fe:c8:0e:ff:15:4f:56:d1:f6:72:66:3c:81:1b:9c:
32:c8:44:92:5b:97:ae:2d:26:81:c3:aa:04:d8:25:31:30:71:
4d:74:81:1c:4c:67:72:3b:bf:ad:25:74:08:77:c8:e8:b5:16:
fa:f6:34:ec:3b:06:f0:95:a0:4a:d0:44:d0:85:4b:26:ee:fd:
9c:b2:bc:80:02:92:a7:67:6e:59:95:2f:88:cd:4c:60:f8:8d:
a8:20:0f:1a:4e:4b:05:6a:f5:5c:44:83:d5:92:bb:ce:f2:6b:
aa:16:2d:24:20:6a:5c:17:93:39:24:6e:6f:88:91:d2:e4:ad:
4f:4c:b2:c5:b8:37:f8:9c:aa:65:a3:1a:51:9a:78:38:d8:6b:
c1:dc:46:bf:ae:5d:cd:d8:4a:7a:df:98:78:49:c0:da:cc:d6:
cf:a5:33:ef:5e:30:7c:eb:d6:34:61:07:fb:1f:a5:c0:24:d1:
87:d0:9a:e9:5f:f8:22:45:75:c8:3a:d6:ad:ba:02:8f:d0:09:
6b:04:bf:c8:63:d7:3e:b8:f6:83:af:d9:a4:bc:af:c7:f2:e8:
53:ae:ae:9f:77:1b:dc:d6:6d:af:18:78:3d:a8:8f:e4:54:66:
b0:84:ce:23:8f:e4:f1:8a:25:23:18:1f:7d:bd:2b:d7:46:10:
36:82:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:49:11 2025 by rpki-client