Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/qvAnmXcBOFfeCa3JFR-PCy90vjw.roa
File: qvAnmXcBOFfeCa3JFR-PCy90vjw.roa (raw, json)
Hash identifier: KUI/zPJ8dYjBGu+bRTRU02zEiXdxMuyzzzZ32uyXdYo=
Subject key identifier: AA:F0:27:99:77:01:38:57:DE:09:AD:C9:15:1F:8F:0B:2F:74:BE:3C
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 0196730B4E352602FC79CFA03E75DEDEDCD4
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/qvAnmXcBOFfeCa3JFR-PCy90vjw.roa
Signing time: Sat 26 Apr 2025 17:00:42 +0000
ROA not before: Sat 26 Apr 2025 17:00:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 193.35.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:4e:35:26:02:fc:79:cf:a0:3e:75:de:de:dc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Apr 26 17:00:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaf0279977013857de09adc9151f8f0b2f74be3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:00:a5:24:a6:4c:f3:0f:cb:8b:3d:9e:fd:
1f:48:e1:98:9d:4b:2d:fa:8a:f4:88:7d:a3:bc:69:
64:cf:14:8b:2a:00:79:96:b9:57:d3:8c:8e:f0:82:
cb:9a:69:68:ae:a7:9e:4b:d4:eb:00:e2:20:7d:87:
32:7b:b4:f8:ea:2f:da:df:c0:84:ef:18:ab:44:2d:
3d:3c:7c:d9:4a:1b:73:da:87:61:18:79:c2:56:8e:
40:f3:51:f1:d0:80:7e:01:ff:e5:1d:a8:5c:23:ef:
bd:cf:17:81:17:4a:9a:c0:21:c0:1b:0f:ec:a9:fd:
23:86:89:54:bd:dd:3b:cc:6c:bf:a4:17:5c:bb:96:
c5:24:08:0b:00:53:82:a7:09:c0:96:1f:2f:64:7e:
cb:07:d8:6e:35:0d:63:a5:18:8f:5c:5c:5d:f6:8d:
49:c4:58:c3:64:d0:61:45:68:a1:ad:57:9d:b7:d1:
3b:a5:ae:27:b9:e0:bb:c6:61:bf:0e:58:9f:b7:48:
22:81:6f:ee:7b:f5:ff:ee:2f:65:73:c0:db:7c:62:
3c:ec:dc:57:bd:e6:7c:19:67:3a:2b:cc:da:36:04:
77:96:b9:3d:ae:35:65:88:9c:c2:fb:6c:63:6f:86:
71:93:36:f6:57:29:b5:d9:10:a7:f4:81:71:00:82:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F0:27:99:77:01:38:57:DE:09:AD:C9:15:1F:8F:0B:2F:74:BE:3C
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/qvAnmXcBOFfeCa3JFR-PCy90vjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.230.0/24
Signature Algorithm: sha256WithRSAEncryption
18:67:a0:33:93:9c:7e:26:61:d1:e1:67:37:c4:a8:88:6f:b6:
ae:b9:e8:5a:0c:d8:8e:40:bb:99:17:d9:aa:33:c1:b7:1c:e6:
30:aa:bd:31:7c:c0:40:69:c4:35:b1:95:a2:c2:99:0e:56:be:
5f:be:61:48:24:0b:71:37:3d:7a:2c:bf:bf:6d:70:cd:c7:9b:
ca:b8:46:34:1f:c2:0a:a6:b9:d6:7f:00:46:1d:9e:9b:c8:31:
ac:52:85:e8:40:95:3f:b4:82:75:f7:44:65:a4:fb:f1:16:16:
36:7e:32:73:c9:47:06:b7:7d:b0:b9:42:d0:35:fd:cd:01:8d:
87:be:9a:8a:27:f6:11:d5:f5:8c:31:26:8c:8d:a4:fc:0a:21:
12:f4:4b:a7:3a:4a:d6:a3:3e:1e:c6:8f:af:ea:1a:11:59:d4:
7d:f6:83:70:b9:42:ab:a3:49:7c:c0:35:4e:98:ab:bc:dd:67:
12:be:64:5a:72:3b:68:30:1f:ca:26:d1:4a:2f:94:be:da:c1:
51:b3:54:25:30:05:ea:b9:61:57:f0:a8:93:e9:ac:8f:87:9d:
b5:4a:22:de:4f:21:e1:ae:f2:a2:89:60:72:41:62:2c:da:1f:
e9:15:64:e6:5f:39:c8:33:26:a9:44:02:7a:55:f9:84:a3:6d:
b8:03:b1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:00:52 2025 by rpki-client