Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/0qvu7Ik4qOydod-67-aS8UYVRt4.roa
File: 0qvu7Ik4qOydod-67-aS8UYVRt4.roa (raw, json)
Hash identifier: 9dnShS1pPGDLKB9HEL/30IZt5FlagVMcCMwGrXSyfAg=
Subject key identifier: D2:AB:EE:EC:89:38:A8:EC:9D:A1:DF:BA:EF:E6:92:F1:46:15:46:DE
Certificate issuer: /CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899
Certificate serial: 019661BBA81BBF1D6557801D9F39D280825A
Authority key identifier: 55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/0qvu7Ik4qOydod-67-aS8UYVRt4.roa
Signing time: Wed 23 Apr 2025 08:20:10 +0000
ROA not before: Wed 23 Apr 2025 08:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43541
IP address blocks: 185.75.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:bb:a8:1b:bf:1d:65:57:80:1d:9f:39:d2:80:82:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899
Validity
Not Before: Apr 23 08:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2abeeec8938a8ec9da1dfbaefe692f1461546de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:5a:8d:99:99:85:66:c8:4f:58:b6:35:92:
28:f5:75:ff:ef:b1:73:a0:93:69:8f:ee:72:72:6b:
04:ed:ec:1f:bb:a6:17:91:0c:e0:11:11:fe:a3:33:
0b:08:c0:cb:59:f0:81:e0:76:4a:59:44:e9:a0:07:
5b:e5:b4:3b:0c:8e:9e:17:06:4c:19:11:18:4b:9a:
5e:ce:93:ba:db:d0:72:83:fc:28:c1:b5:98:d5:1f:
08:30:1b:20:d1:2f:79:b1:18:05:44:25:78:52:3f:
52:af:74:db:18:07:8b:b5:72:ab:20:04:57:75:63:
79:84:4d:75:f7:a3:c7:09:9d:55:f2:4d:0c:4c:bc:
14:fa:f7:6a:83:66:f2:ab:8a:2b:53:73:2f:2a:3c:
13:2a:af:44:3b:09:a2:3f:aa:a5:04:f4:3e:f2:7c:
90:9f:31:c9:fe:4b:8f:d0:76:64:21:d9:6f:30:34:
49:13:5b:34:0d:ae:8c:e8:75:1d:c0:f7:95:a8:89:
82:88:7e:93:04:7b:cc:85:25:ea:44:52:24:85:92:
ce:8b:a7:69:fe:66:4c:84:aa:a6:49:a1:1c:7c:af:
c7:b9:e9:f6:da:39:c0:b7:ad:a4:3b:98:45:27:c8:
37:b4:6c:2e:c6:5b:b0:33:2c:34:70:6a:59:07:53:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AB:EE:EC:89:38:A8:EC:9D:A1:DF:BA:EF:E6:92:F1:46:15:46:DE
X509v3 Authority Key Identifier:
keyid:55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/0qvu7Ik4qOydod-67-aS8UYVRt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.178.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a7:55:3f:b1:70:6c:5d:48:fb:17:ac:8e:d2:7b:57:0f:3c:
44:b8:94:dc:db:97:84:f4:33:ba:28:24:99:87:f6:f8:bd:7c:
9b:28:f4:35:a4:f6:48:32:1b:e7:2f:fa:67:19:4e:94:02:07:
a4:2d:6c:3c:cc:4e:e7:90:76:b0:3f:89:76:77:b2:07:63:17:
38:2a:57:88:20:e5:ea:1c:96:fe:3a:8f:ff:5e:a2:66:fa:2d:
65:43:b6:5a:1f:03:23:82:b8:2b:cd:a3:3e:3b:b9:fd:38:4c:
94:de:3f:8e:f4:2e:f1:8b:56:2a:dc:13:d7:9f:38:b1:94:47:
88:18:81:fe:a4:c3:85:67:28:29:8b:09:63:82:c5:89:c4:77:
b2:b5:f6:45:df:ad:c4:b9:57:00:e4:ae:47:7f:12:d8:d7:5d:
33:8d:e8:c7:ff:bf:2c:38:05:26:ce:fc:98:8c:ae:b5:18:0e:
58:c8:a7:26:51:36:77:ce:ea:92:d8:27:b8:79:e6:49:15:4a:
44:49:97:77:e5:82:ac:d5:db:71:b2:2e:51:24:71:bb:97:a4:
25:15:9b:25:f8:f8:02:79:8e:b5:35:43:69:f8:63:df:e5:60:
a1:2f:0e:39:35:5b:ad:10:79:ae:3c:67:a2:1b:d0:82:49:e8:
d2:23:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:42:32 2025 by rpki-client