Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/23RE10a8noL3iz6lnGD9G2SOce8.roa
File: 23RE10a8noL3iz6lnGD9G2SOce8.roa (raw, json)
Hash identifier: HcnY6nBuyi3+A7v+2u63PVG5+bedAphVEMnhj96wEZg=
Subject key identifier: DB:74:44:D7:46:BC:9E:82:F7:8B:3E:A5:9C:60:FD:1B:64:8E:71:EF
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0196A56A039264520A5FEE4B326D00E84C7C
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/23RE10a8noL3iz6lnGD9G2SOce8.roa
Signing time: Tue 06 May 2025 11:45:10 +0000
ROA not before: Tue 06 May 2025 11:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212742
IP address blocks: 37.202.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:6a:03:92:64:52:0a:5f:ee:4b:32:6d:00:e8:4c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: May 6 11:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db7444d746bc9e82f78b3ea59c60fd1b648e71ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:9f:77:97:70:9a:93:21:4e:3a:7d:b2:1b:
ea:36:41:9c:b2:f0:ba:6b:7a:ea:bf:a3:48:6b:1a:
f2:9d:70:86:40:c2:a5:76:a0:2c:05:44:f4:96:39:
33:e2:fe:f3:50:3c:43:a9:f2:14:83:00:cd:25:1d:
3a:ab:15:f5:6a:ce:c6:6b:64:d3:86:c9:64:28:37:
c9:e1:99:f1:ee:dd:fd:2a:89:ca:31:89:d6:33:2f:
27:f9:d6:fa:ab:ef:2a:9a:bd:c5:bb:61:d9:11:27:
3e:2a:fd:9c:76:68:a0:31:cf:80:70:f6:4d:f7:7f:
8a:fc:c4:23:18:35:05:47:cf:cb:13:1d:f1:a8:2c:
72:92:51:48:04:9d:e3:f3:b9:b6:7a:d1:85:d8:a2:
47:11:d7:e4:55:c9:cb:7d:7e:a8:d6:c8:71:5c:ac:
72:c2:16:91:fe:de:76:34:c3:75:39:ad:7c:5f:f1:
58:f2:3e:fa:f1:35:c3:16:25:0d:2b:bd:7e:73:0a:
28:24:9a:67:78:88:b4:db:36:0a:87:00:ad:08:60:
75:0a:2d:5e:69:9d:10:1e:97:87:90:94:bb:8f:5e:
32:da:5e:5f:3e:3a:51:a6:28:d7:9d:3a:63:1d:90:
1a:cb:2d:83:a3:c0:5c:e1:61:69:15:5c:31:46:c3:
c9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:74:44:D7:46:BC:9E:82:F7:8B:3E:A5:9C:60:FD:1B:64:8E:71:EF
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/23RE10a8noL3iz6lnGD9G2SOce8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:95:3c:3a:d0:8f:ce:dd:18:12:51:79:bf:20:2d:37:3a:1b:
2e:c8:2c:0d:c8:74:9c:a3:f2:8b:29:10:a6:8f:e2:95:a8:09:
09:c1:26:19:78:c1:4b:90:3d:c9:8c:3f:65:87:fd:d2:55:a6:
06:a3:d7:af:36:66:9b:25:12:9e:e9:6f:2a:69:b4:82:ec:f1:
08:46:7f:ad:88:b4:ed:76:4a:0a:8f:8d:be:10:5a:70:18:15:
12:b0:d5:95:8a:32:f2:f6:33:e7:0c:1a:b0:a3:c3:a7:4c:b1:
22:f8:0c:5d:6c:32:02:4c:5b:64:30:90:14:0b:7a:38:0f:48:
fd:7f:4c:bc:e4:af:cd:45:44:fd:a8:09:4b:e0:db:5d:58:de:
f0:6b:c6:a8:15:ed:16:82:44:81:a7:f3:bc:4a:bf:72:94:ac:
e7:60:5c:a3:1f:1d:21:d2:a3:0f:58:93:de:72:43:32:38:85:
18:d4:d8:d0:97:3f:93:b4:ad:f5:7f:2a:47:6b:d4:1c:c7:12:
00:ec:32:1e:a1:b9:5c:d2:ee:39:5c:34:b5:89:f2:28:36:40:
69:c7:15:3c:08:d9:7e:da:0c:f6:31:0b:27:b5:a9:64:c1:9e:
3a:3a:9d:e9:0e:27:d3:88:4f:1f:01:5d:47:8d:22:4c:96:2e:
00:a9:30:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:55:56 2025 by rpki-client