Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/l97G9jaBN-qHrDN7DkyKrqKoSiQ.roa
File: l97G9jaBN-qHrDN7DkyKrqKoSiQ.roa (raw, json)
Hash identifier: pYmK8m4+v035mWqb8xrqiW0aOQn5kR+fljYQ5QD7bKs=
Subject key identifier: 97:DE:C6:F6:36:81:37:EA:87:AC:33:7B:0E:4C:8A:AE:A2:A8:4A:24
Certificate issuer: /CN=123c3de61011de07101e14dc0727395171cb03ab
Certificate serial: 0196BF236717B32FE62C38A812E732582419
Authority key identifier: 12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/l97G9jaBN-qHrDN7DkyKrqKoSiQ.roa
Signing time: Sun 11 May 2025 11:38:10 +0000
ROA not before: Sun 11 May 2025 11:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211235
IP address blocks: 185.122.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:23:67:17:b3:2f:e6:2c:38:a8:12:e7:32:58:24:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123c3de61011de07101e14dc0727395171cb03ab
Validity
Not Before: May 11 11:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97dec6f6368137ea87ac337b0e4c8aaea2a84a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:01:24:75:ab:5b:07:fd:83:5b:ba:e9:1b:e9:
0d:fe:d7:d3:f0:91:3c:0e:30:f9:89:ba:89:89:52:
7e:f2:9f:82:a7:f5:dd:1b:1e:6f:57:21:c8:7a:96:
49:9d:fb:6a:b8:a7:54:95:3a:93:c0:09:74:fc:81:
06:ee:9a:6c:4a:b0:86:6f:7f:d5:a0:34:b1:26:a3:
1d:06:13:55:03:77:e6:d1:cc:a5:aa:e0:77:11:4c:
96:0a:aa:22:f7:22:21:00:97:30:4f:21:d5:36:c2:
62:b1:9f:fe:22:1b:d8:a2:fa:ec:f7:45:55:f6:e9:
c6:0e:71:8d:9c:46:fb:2e:85:5d:61:fe:0c:61:22:
e0:c2:71:6b:a7:81:6b:09:94:e2:e0:7f:50:5c:20:
e2:9a:0c:3e:e0:1d:d2:a4:e1:ed:4b:c9:92:3d:b4:
da:de:6f:5d:e1:46:ac:22:b4:7d:d8:4b:0d:33:4d:
e7:47:e1:21:a4:2c:af:60:97:ea:5a:21:36:98:33:
02:97:50:27:ee:0f:a6:50:d2:bb:53:c2:27:25:03:
e9:73:2a:4c:a7:c3:0b:f8:ab:ba:51:f7:9e:87:f2:
42:42:4f:6f:70:bd:0e:a1:ae:40:7b:55:41:c3:f0:
9c:d1:9b:65:64:2e:b1:7b:73:cd:65:f4:67:8b:05:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DE:C6:F6:36:81:37:EA:87:AC:33:7B:0E:4C:8A:AE:A2:A8:4A:24
X509v3 Authority Key Identifier:
keyid:12:3C:3D:E6:10:11:DE:07:10:1E:14:DC:07:27:39:51:71:CB:03:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ejw95hAR3gcQHhTcByc5UXHLA6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/l97G9jaBN-qHrDN7DkyKrqKoSiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/229650-8a01-4370-991e-b504c9ae9bbc/1/Ejw95hAR3gcQHhTcByc5UXHLA6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:b6:a2:0d:31:26:18:40:d6:74:bf:30:03:46:72:05:26:26:
c3:8d:6c:a1:95:7e:6e:ce:12:67:ba:11:c9:2f:6a:4f:e3:51:
f4:67:17:5f:40:70:27:d8:f2:0d:6b:18:81:af:d7:63:38:18:
52:b3:23:57:ae:22:fa:86:84:85:4f:56:fc:51:4f:5e:7a:77:
8c:27:03:c2:95:88:70:14:37:65:87:4a:83:cb:ca:71:46:fc:
4e:96:5f:3d:00:50:4e:1f:99:3b:ec:cc:dc:00:6e:c8:ec:87:
59:8e:03:74:cc:61:db:5e:8d:d9:f1:6b:28:c2:ff:d1:4d:23:
ab:30:49:51:b7:ff:71:31:19:ad:e4:93:66:85:ed:c0:17:98:
37:39:a0:b6:2d:c5:87:11:8e:7f:42:2f:66:fb:37:74:92:1d:
c0:0e:ce:7d:0f:ed:9a:1c:07:fc:07:35:b2:0f:86:5d:69:c6:
63:89:f2:9e:47:13:c6:ba:1c:68:77:7a:52:3a:50:a1:7f:48:
d3:e3:1e:42:24:40:b8:f5:57:6d:95:1a:39:39:1f:b6:10:e3:
8a:0f:71:9c:2f:0a:84:4e:72:92:ba:95:db:de:27:15:67:d7:
42:58:4a:0c:90:b5:09:f1:60:54:a5:7d:08:79:0b:50:ae:4f:
10:e7:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:32:18 2025 by rpki-client