Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/F8W0QKbleYbmz2EN1Tis7Vds59A.roa
File: F8W0QKbleYbmz2EN1Tis7Vds59A.roa (raw, json)
Hash identifier: GzkXVUL6jOXjlFMqb78IJPo96A7wfBUt8lug7KgSDew=
Subject key identifier: 17:C5:B4:40:A6:E5:79:86:E6:CF:61:0D:D5:38:AC:ED:57:6C:E7:D0
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 019635126312ECC33011C37E4B8D2CB311FC
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/F8W0QKbleYbmz2EN1Tis7Vds59A.roa
Signing time: Mon 14 Apr 2025 16:11:59 +0000
ROA not before: Mon 14 Apr 2025 16:11:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199816
IP address blocks: 194.180.197.0/24 maxlen: 24
194.180.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:12:63:12:ec:c3:30:11:c3:7e:4b:8d:2c:b3:11:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Apr 14 16:11:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17c5b440a6e57986e6cf610dd538aced576ce7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:eb:80:c9:f8:9a:63:3e:67:e6:4c:94:cc:
cd:3a:70:63:eb:38:ca:14:91:ff:e7:84:2d:6f:e4:
c6:49:38:9b:4c:09:f5:6c:9a:2d:22:55:36:6b:f6:
39:f5:f6:4d:d9:b0:92:3b:d6:0b:4f:3b:2a:9d:a0:
39:13:0b:82:4b:f3:47:3c:90:83:3a:1e:4f:71:c0:
11:3f:6a:7b:77:30:19:a4:ed:98:79:89:cb:7e:bc:
85:0b:46:3d:83:f7:f2:22:0e:a1:aa:7a:78:d4:2f:
a4:1a:e9:50:f6:46:b8:ac:81:c5:14:b2:c1:10:11:
0e:bc:96:80:f4:4d:5d:7f:91:36:b2:43:31:4c:54:
d3:90:19:97:e1:d9:4b:f1:e4:6b:0f:d2:78:92:ae:
95:12:af:75:fe:d8:73:08:b0:91:c5:6d:a6:d8:d1:
fa:b6:22:b7:a7:39:d8:81:a6:f7:0e:9b:78:45:6f:
98:d4:ae:9f:ca:2e:f7:aa:62:58:ff:66:15:af:ac:
d2:00:e9:5a:31:2d:a9:88:f6:10:63:e5:8e:d9:3e:
ac:d2:58:0a:03:d7:1d:53:6b:b9:58:85:e1:6c:7f:
8b:38:a7:2f:de:8f:bb:3f:a6:b9:89:f7:a5:92:de:
7c:ab:51:d3:71:72:95:86:57:cd:7b:81:cd:01:99:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C5:B4:40:A6:E5:79:86:E6:CF:61:0D:D5:38:AC:ED:57:6C:E7:D0
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/F8W0QKbleYbmz2EN1Tis7Vds59A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.197.0/24
194.180.219.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:31:1a:08:4a:7e:2c:77:d5:35:0b:da:89:ad:fd:07:e5:b1:
e6:cd:ac:4d:f9:be:cd:06:eb:46:fe:c9:6c:5d:ab:c5:5f:1c:
86:06:28:45:10:01:76:5b:75:56:77:af:69:0e:ee:0e:d8:7e:
86:a7:00:43:fa:eb:8b:ea:99:30:cb:72:66:e0:52:1c:bb:05:
c4:9d:9a:01:bc:d0:58:16:af:52:de:fd:2e:53:ab:08:0c:9e:
f5:e2:a3:5d:f4:3c:9b:e1:96:88:47:25:25:29:81:82:ba:5b:
0d:0f:ab:38:46:70:5e:bf:4d:d2:bd:4d:d0:24:a0:9e:24:29:
86:bc:eb:a5:f0:a2:f9:ab:19:75:c9:6f:ff:53:9e:62:91:b8:
8b:ea:57:bc:a9:d9:ea:04:40:b6:e8:30:04:c6:6a:1f:da:36:
9f:13:70:b4:8d:9b:b3:12:18:54:48:55:1a:83:29:05:a4:ee:
2c:bf:5d:ea:a6:ae:cf:2b:29:69:d2:db:80:24:4d:94:bf:0b:
e5:74:6c:a2:f7:5d:a4:06:d1:ac:d3:eb:23:f7:e8:f3:1c:c2:
3b:bf:aa:2e:28:16:29:12:b2:93:6f:f5:63:62:4a:a5:fa:14:
4d:7f:8a:b2:98:70:cf:06:46:10:20:f5:db:dd:92:28:7f:7e:
5a:fd:61:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:24:29 2025 by rpki-client