Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/k_0zEMHxmfACdt3JyIQe32n-3UE.roa
File: k_0zEMHxmfACdt3JyIQe32n-3UE.roa (raw, json)
Hash identifier: 1zpkXrC9Bl+aFyn5Yr4Xer+2HoYHjHajiHX7XweXMcg=
Subject key identifier: 93:FD:33:10:C1:F1:99:F0:02:76:DD:C9:C8:84:1E:DF:69:FE:DD:41
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 019661EE4664E43EC1112B412FF70A00B9E1
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/k_0zEMHxmfACdt3JyIQe32n-3UE.roa
Signing time: Wed 23 Apr 2025 09:15:27 +0000
ROA not before: Wed 23 Apr 2025 09:15:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49281
IP address blocks: 85.198.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:ee:46:64:e4:3e:c1:11:2b:41:2f:f7:0a:00:b9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Apr 23 09:15:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93fd3310c1f199f00276ddc9c8841edf69fedd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:12:c9:d5:3e:55:f1:1f:91:af:20:07:3c:
c8:6e:cf:ba:11:61:45:b2:09:4c:62:ee:95:b7:2b:
a7:b7:37:b3:c0:79:0c:8b:11:b7:75:57:36:43:63:
eb:79:8a:35:51:8a:17:d5:04:43:b0:fc:4d:86:b3:
a5:f5:66:48:35:11:45:f5:04:ae:75:3a:d8:9d:0c:
6d:47:42:f2:a2:ba:8c:b3:da:df:9d:a7:fa:52:28:
4e:29:b8:3a:ae:06:c3:4c:85:d0:39:4f:4f:a1:53:
84:a0:02:f9:75:31:23:e4:cd:3a:00:66:da:43:8b:
2a:c3:f7:42:f3:a7:02:6e:24:82:db:4f:23:88:88:
14:38:ce:85:37:fa:78:0c:73:74:03:d3:66:1f:9e:
7a:25:28:3d:04:08:4b:90:7f:cf:cd:b4:28:ce:d8:
2b:3e:d6:54:fe:55:cd:ff:81:04:ab:b0:b0:96:27:
00:9b:94:58:9a:ce:47:95:08:73:5b:a7:da:44:9d:
a4:7e:8b:55:b7:af:50:66:ac:5e:f9:70:e2:92:92:
57:20:e0:13:01:60:5e:f6:25:bd:86:77:ea:11:c5:
1c:13:6b:8b:5b:59:49:71:3b:6c:e6:ec:f2:2b:65:
50:ea:ed:02:2e:ce:a7:c8:26:50:0d:a5:5c:0f:62:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FD:33:10:C1:F1:99:F0:02:76:DD:C9:C8:84:1E:DF:69:FE:DD:41
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/k_0zEMHxmfACdt3JyIQe32n-3UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:33:f9:73:4a:77:c6:36:51:79:e4:ad:ef:19:1b:f4:d3:b7:
5c:18:39:86:c0:da:fc:e9:a5:49:8e:55:67:57:db:fa:d4:06:
a5:af:de:1d:64:c4:15:84:29:d6:9d:36:f2:2a:fb:e6:02:52:
ae:8f:ed:1f:6f:7b:2b:12:b3:89:ad:15:04:0e:be:38:95:f8:
cd:ba:7f:81:69:5b:d7:ea:fe:a5:54:08:df:91:e7:19:94:f9:
45:47:43:bf:10:65:bf:a6:dd:7d:eb:ab:f3:65:a2:30:30:f2:
4d:8c:62:ab:1d:39:1d:a2:54:89:a0:e0:a3:50:26:5e:5e:e9:
d5:45:12:6a:c2:67:50:81:6f:ce:89:99:e7:3e:9e:ac:a6:b2:
22:5d:5d:a6:d4:61:d5:74:71:50:40:ee:d4:62:4c:1d:e0:0d:
a0:82:92:b9:ef:86:46:86:4c:04:ff:a1:37:3b:aa:f7:41:ee:
9f:1c:52:ff:01:92:0c:88:83:1b:63:61:99:37:7e:51:1a:a5:
62:21:f9:9d:f2:4a:56:03:07:bf:b3:16:52:59:b3:52:85:4e:
64:03:88:cd:d3:6e:b1:f7:6b:66:e7:9e:2c:e4:b7:b4:5c:26:
b0:38:00:6f:4a:22:49:d5:88:ef:95:6b:21:ce:7d:29:ba:93:
27:45:15:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:57:34 2025 by rpki-client