Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/qfnG_e86V0mqyvP7hB8G6R3EaEQ.roa
File: qfnG_e86V0mqyvP7hB8G6R3EaEQ.roa (raw, json)
Hash identifier: ZDOFrngSukki8Z+3+0Se2IUikxMo18wvSpXj/whXJG8=
Subject key identifier: A9:F9:C6:FD:EF:3A:57:49:AA:CA:F3:FB:84:1F:06:E9:1D:C4:68:44
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019695437D565E17D0790E1FEEEE74AFB8DD
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/qfnG_e86V0mqyvP7hB8G6R3EaEQ.roa
Signing time: Sat 03 May 2025 08:29:10 +0000
ROA not before: Sat 03 May 2025 08:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215671
IP address blocks: 5.22.200.0/24 maxlen: 24
5.22.201.0/24 maxlen: 24
5.22.202.0/24 maxlen: 24
2a06:bd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:43:7d:56:5e:17:d0:79:0e:1f:ee:ee:74:af:b8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: May 3 08:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9f9c6fdef3a5749aacaf3fb841f06e91dc46844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c5:04:a4:89:ac:b4:ae:40:bd:38:ee:e5:66:
61:65:71:79:cb:fb:4d:36:1d:e3:de:79:1b:8c:ad:
9d:eb:57:57:fc:f7:88:0d:03:69:08:a1:cf:53:f6:
bd:37:2c:df:da:37:c4:88:ca:91:ca:ac:9c:11:23:
67:46:8b:0d:a0:b7:f7:42:ec:04:70:04:65:ef:37:
8e:fc:cd:e6:16:f6:66:0d:3c:d7:82:c8:9b:4e:ab:
e0:f3:a5:84:49:2c:35:c6:04:51:5e:eb:d8:20:30:
b6:2c:ba:c0:05:34:8e:f7:6c:0e:20:35:b0:2a:8b:
cc:53:48:40:ce:f5:a8:d7:8e:b0:0b:3a:7a:95:a5:
96:2e:85:6e:d3:91:fc:55:e6:a7:e4:bb:46:2e:d4:
50:37:ef:3e:26:1a:d1:a4:fc:d4:d8:ae:4f:41:ad:
32:e3:f1:6c:27:b3:8f:dc:e5:b0:7f:2d:a5:d7:e7:
21:ac:45:79:d7:89:d8:0c:ed:4c:28:e2:5e:fb:87:
d3:d4:fd:a3:d1:ae:6c:dc:8a:8f:bc:a3:45:7f:a2:
fe:3c:74:e6:b5:cd:7f:e1:e7:9e:d8:ec:8c:22:ee:
3e:71:1e:ef:b3:5b:ba:bc:f1:2b:49:90:59:8a:1a:
14:01:73:e5:16:d8:54:2b:5a:ca:75:66:17:0f:7f:
2b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F9:C6:FD:EF:3A:57:49:AA:CA:F3:FB:84:1F:06:E9:1D:C4:68:44
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/qfnG_e86V0mqyvP7hB8G6R3EaEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.200.0-5.22.202.255
IPv6:
2a06:bd40::/29
Signature Algorithm: sha256WithRSAEncryption
3b:92:e4:3a:0e:67:1b:41:81:04:e3:e0:01:7e:ec:7c:11:41:
f1:49:e5:e3:22:0a:13:d2:a4:c0:95:37:c1:32:ba:50:c6:4c:
56:68:b9:4f:fc:99:0c:cd:de:09:97:f5:f8:6b:1f:0e:c2:c8:
cb:46:96:1d:07:55:9d:18:ad:0b:fd:fa:d5:5a:db:5b:a8:0a:
3a:38:83:ff:a8:3f:9f:22:62:6e:72:37:f7:20:b7:4f:6d:c9:
2d:a4:9f:22:44:45:03:d5:03:31:98:c9:fa:9a:17:85:2c:2f:
2a:2a:17:6a:f8:e7:49:ff:09:5b:96:fa:00:4a:82:85:2d:38:
14:ed:1a:09:e7:c7:87:bc:ad:92:0c:c8:3d:04:3f:95:b6:cb:
8c:81:1e:8d:1e:99:2e:71:1c:82:8e:18:4a:02:b0:2f:39:f0:
b2:ce:45:25:8d:22:08:25:78:8c:5a:95:77:4f:9c:ce:4e:7b:
54:75:89:87:46:e2:fe:3e:87:07:a6:38:a5:c1:d7:fa:99:c5:
a1:09:4f:3f:bf:44:e4:bd:d8:44:41:e0:17:69:59:f2:b9:7f:
65:ac:32:1c:f4:f4:65:dd:0c:32:79:f2:57:13:19:92:0f:e0:
54:7c:82:46:89:cc:7d:97:cb:c0:97:10:1a:39:5a:21:bf:ef:
76:53:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:49:08 2025 by rpki-client