Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/iO7A1owMbqCMA0Lg3ovjgVWh5Dg.roa
File: iO7A1owMbqCMA0Lg3ovjgVWh5Dg.roa (raw, json)
Hash identifier: nx9vqvzmG0weAt/3Wd6gNUhHUSRbH2clt0yaQ7fWpF4=
Subject key identifier: 88:EE:C0:D6:8C:0C:6E:A0:8C:03:42:E0:DE:8B:E3:81:55:A1:E4:38
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 0196AF8C9E5766A1F90BF6972DB70960DAE2
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/iO7A1owMbqCMA0Lg3ovjgVWh5Dg.roa
Signing time: Thu 08 May 2025 10:59:10 +0000
ROA not before: Thu 08 May 2025 10:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207163
IP address blocks: 93.96.192.0/19 maxlen: 19
93.96.210.0/24 maxlen: 24
93.96.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:8c:9e:57:66:a1:f9:0b:f6:97:2d:b7:09:60:da:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: May 8 10:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88eec0d68c0c6ea08c0342e0de8be38155a1e438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:00:1f:66:0d:81:dd:24:4b:5d:1b:2c:6a:
99:f5:03:59:12:f4:75:09:eb:7c:0c:5d:a2:d5:b0:
60:bc:15:d5:2f:0a:99:17:30:4e:9c:6e:7b:00:99:
40:b1:62:83:ca:06:dd:db:a2:13:25:ad:19:46:05:
9e:67:0e:c2:95:87:fe:00:67:72:73:bf:91:8c:be:
94:74:64:23:e0:c4:f9:76:88:7e:96:7c:ba:6d:e7:
fb:b9:99:f4:b3:c4:0a:6b:6d:ce:f0:d1:27:65:c5:
18:9a:e6:fa:92:78:55:52:03:6c:49:35:45:2e:2f:
90:2c:fc:da:99:bf:8f:b8:69:e5:cb:3d:98:d0:4c:
69:61:a5:bc:de:14:45:07:e1:17:de:68:a7:83:86:
e1:7a:4a:8a:f4:ca:17:c7:de:f2:ca:88:12:2d:45:
bf:75:06:eb:d5:45:2e:03:68:88:df:1b:92:ce:e8:
86:91:8a:76:59:4d:b4:55:fa:f5:de:60:06:96:19:
24:dc:27:08:a2:0e:7f:57:75:20:f9:af:05:5a:88:
a6:74:2f:a9:6b:ad:68:b7:52:88:eb:a8:5e:31:44:
77:5d:9e:a1:bb:45:6a:48:ec:1c:b4:5b:46:5e:73:
ff:e9:30:5a:a8:d4:da:d3:74:ec:33:68:78:ad:09:
5d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EE:C0:D6:8C:0C:6E:A0:8C:03:42:E0:DE:8B:E3:81:55:A1:E4:38
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/iO7A1owMbqCMA0Lg3ovjgVWh5Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.96.192.0/19
Signature Algorithm: sha256WithRSAEncryption
78:2f:08:64:2f:f6:db:d3:3e:bd:88:02:20:98:73:f6:b7:63:
76:71:3c:73:67:21:75:07:54:86:be:0c:f1:fa:65:bb:10:66:
b0:9c:b7:3d:69:6e:50:6a:d5:77:20:03:05:1a:54:75:82:4a:
72:d1:34:4e:64:0c:0e:e2:32:96:fc:2a:6e:f9:aa:82:8e:b3:
16:78:5c:fb:83:e2:12:16:de:ef:71:b4:37:e7:ef:3a:f7:b9:
c4:6b:b3:ed:57:17:41:3f:3b:b3:65:4d:6c:37:77:7d:84:4d:
52:a4:0a:9e:dd:5e:b9:3b:17:d2:1b:6e:e1:5e:10:50:76:25:
18:89:60:41:7c:8d:14:dc:06:1f:20:8e:ba:f2:ca:6c:91:c9:
e5:bb:93:7b:06:8d:96:30:78:c6:f3:46:58:c7:18:1d:32:90:
91:93:fb:9d:31:16:e9:9a:bf:32:38:67:23:8d:de:63:e6:d9:
f6:36:af:b2:1f:37:fd:4b:c7:19:f7:75:2a:f5:26:87:d3:69:
d0:30:ab:6b:1b:6b:44:17:20:40:8f:4d:1e:5a:d9:6f:d9:58:
59:58:36:fc:39:c8:21:b7:f9:7e:6a:ff:64:7e:1b:e4:ff:59:
cf:df:8f:c3:b4:94:b1:cb:7e:1e:94:0d:4c:f2:eb:8e:79:d7:
4a:95:ca:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:57:14 2025 by rpki-client