Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/p9HNpLognCCdHpHcYdvL_iHpKxE.roa
File: p9HNpLognCCdHpHcYdvL_iHpKxE.roa (raw, json)
Hash identifier: ZQpCWRnEBpNVDW3N93TuNSYypf5jM4Miv6wnoSLZgOc=
Subject key identifier: A7:D1:CD:A4:BA:20:9C:20:9D:1E:91:DC:61:DB:CB:FE:21:E9:2B:11
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0196A9B1E7545AFCEF9156223B4317E9CB7A
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/p9HNpLognCCdHpHcYdvL_iHpKxE.roa
Signing time: Wed 07 May 2025 07:42:10 +0000
ROA not before: Wed 07 May 2025 07:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199959
IP address blocks: 45.141.60.0/24 maxlen: 24
185.227.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:b1:e7:54:5a:fc:ef:91:56:22:3b:43:17:e9:cb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: May 7 07:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7d1cda4ba209c209d1e91dc61dbcbfe21e92b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:aa:c8:b5:81:b1:d6:45:3a:d6:2d:a3:1f:
5d:0d:f5:c5:1f:4c:43:26:e6:9d:03:34:7f:40:11:
48:87:e3:f3:f7:c9:67:20:bb:f5:74:d0:ac:ea:48:
a8:0a:ea:44:67:d5:4e:21:c0:af:f3:9c:3e:9a:fa:
d3:2a:10:5a:5f:95:82:76:f6:19:00:ff:28:0a:eb:
dd:2c:91:1b:af:30:64:fd:78:76:0d:fc:6f:50:66:
e5:4e:34:98:b4:50:0e:17:de:7a:c4:b8:25:0b:d5:
70:da:9a:84:d4:36:45:18:3e:79:d9:ab:46:ce:2f:
01:a7:1e:7e:b2:c4:5f:30:b4:b9:01:8b:4a:6f:f6:
1f:39:d3:46:bd:73:12:e9:a6:eb:11:48:a2:1d:13:
5c:ea:6f:97:6d:e5:46:75:37:b5:11:78:59:89:13:
e1:f3:1a:73:c4:ed:26:c5:1f:bc:69:ed:c5:4b:a0:
e4:b4:0d:57:57:3e:bc:7b:73:59:31:b7:38:5d:a5:
23:9b:37:02:85:cb:57:4a:91:9a:8a:aa:82:65:76:
43:ff:9c:5f:a3:07:f0:15:c2:7a:ca:24:04:a1:99:
d6:ed:4a:4d:c0:03:ed:09:f6:63:5c:7d:b9:57:00:
b5:c0:64:3c:2f:75:64:de:5f:e5:fd:57:11:e1:b7:
75:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:CD:A4:BA:20:9C:20:9D:1E:91:DC:61:DB:CB:FE:21:E9:2B:11
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/p9HNpLognCCdHpHcYdvL_iHpKxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.60.0/24
185.227.83.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c4:fa:98:65:a6:da:0f:37:07:d4:b2:2c:13:b3:a1:b0:f1:
8c:fa:24:a2:80:35:e3:25:ff:60:d8:c6:f8:87:f6:61:ea:3b:
f5:c4:84:20:90:75:65:bc:30:74:35:e0:b6:c2:55:ff:87:36:
50:5b:e2:d6:7e:53:4e:4b:8c:ec:0c:eb:cd:58:27:0d:97:2c:
2e:cf:86:a2:70:7f:e0:c9:e0:06:14:27:4a:e5:b7:9f:30:31:
ee:75:87:62:d6:8a:14:97:b2:a8:61:ab:47:d1:48:f2:05:5b:
c3:8f:bc:f7:f3:82:a9:c0:6b:f0:0f:f0:62:45:38:3f:73:53:
f1:85:cc:bf:67:26:99:4e:0d:fd:6f:cd:05:a8:c7:0b:3c:76:
04:fb:43:17:5a:3e:bf:94:68:d1:66:ba:fb:1a:cd:f9:44:25:
11:39:15:51:83:d1:d0:78:58:f6:e9:54:a7:7f:04:0b:7d:5c:
40:5a:96:b4:2b:a1:59:11:da:c5:e6:74:a4:f0:65:9c:de:75:
63:29:94:81:ad:45:12:1f:48:f1:49:a5:7c:74:db:79:7d:37:
b0:c5:32:cb:a8:87:ed:dc:c1:97:df:13:ee:53:af:65:1c:4d:
cb:d9:05:b9:82:67:54:b9:83:cd:be:bc:95:6a:b2:20:ad:46:
e6:6a:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:48:17 2025 by rpki-client