Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rKqfAwcHeWt963-Rodiv-mpgd2w.roa
File: rKqfAwcHeWt963-Rodiv-mpgd2w.roa (raw, json)
Hash identifier: OChG7U/euJ1pnlL+1g/v9Co6mHDf1BTcnEFr7TcUn5c=
Subject key identifier: AC:AA:9F:03:07:07:79:6B:7D:EB:7F:91:A1:D8:AF:FA:6A:60:77:6C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01964CA26B5E69DFA8CFD56B46525440FA3D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rKqfAwcHeWt963-Rodiv-mpgd2w.roa
Signing time: Sat 19 Apr 2025 06:00:34 +0000
ROA not before: Sat 19 Apr 2025 06:00:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216221
IP address blocks: 37.202.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:6b:5e:69:df:a8:cf:d5:6b:46:52:54:40:fa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 19 06:00:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acaa9f030707796b7deb7f91a1d8affa6a60776c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:12:50:2c:af:cf:e4:46:5c:da:80:4a:ed:
61:35:47:a4:6b:9c:37:eb:b7:7e:1b:f1:28:d8:da:
1a:07:3c:27:9a:bf:99:44:5b:33:81:a9:e8:1e:c6:
2a:ff:f3:5c:a0:f2:1f:72:97:66:06:51:af:d7:e4:
df:ec:26:6d:50:91:4c:67:60:d5:98:28:87:72:1d:
cd:48:27:30:5c:81:59:d2:b4:6c:72:e5:22:9a:8a:
d9:10:c9:7d:4c:d5:d1:0c:3a:d7:19:8c:b3:15:bf:
03:e5:9b:b2:5d:ea:1a:a5:4b:b6:08:ba:1d:54:69:
6d:46:72:08:11:8e:15:85:5b:2f:ca:f6:ac:67:d1:
78:e5:3c:30:d1:3e:23:ca:8d:05:d3:26:a4:58:4f:
dd:b1:79:2a:ae:6f:5a:c1:94:1f:1c:93:17:c7:97:
00:b7:97:e0:d4:43:7f:32:9a:cd:33:4e:2e:6d:05:
4c:c4:81:e0:43:7d:7d:16:59:c4:d5:02:12:60:a5:
a4:32:b7:f2:d7:66:60:d5:e3:df:6e:b3:b7:5a:a6:
2f:9a:57:f2:72:75:47:95:51:b9:06:49:7f:2c:26:
83:95:fa:da:16:00:ac:c3:e7:91:b8:a4:07:bf:68:
e0:0b:a6:43:c2:c4:a4:73:c2:b5:c3:e7:a3:3a:3e:
ac:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AA:9F:03:07:07:79:6B:7D:EB:7F:91:A1:D8:AF:FA:6A:60:77:6C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rKqfAwcHeWt963-Rodiv-mpgd2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:59:51:f2:f7:04:8e:52:c1:a5:2e:a3:65:52:79:50:d7:46:
49:35:cc:45:f3:e6:db:ef:cd:9e:3b:ba:38:7e:e0:9c:1e:a5:
53:76:5b:e2:e8:a5:6d:87:6a:4a:b2:81:7f:74:45:25:df:3e:
d7:7d:7c:31:b9:65:78:d1:16:ec:ed:35:9e:27:8e:e6:33:7b:
79:33:5c:dd:97:47:23:9e:ec:5c:0b:38:a6:9e:1c:02:f3:16:
ba:5d:fa:c5:06:21:2a:73:6b:d9:67:95:40:1b:76:0f:13:59:
35:d5:12:b6:a8:a4:b0:19:f7:2d:3d:50:43:61:f1:32:d6:a9:
4e:76:82:00:2e:77:3f:ff:5b:27:07:6a:33:0c:1a:0c:8a:ee:
a8:7b:b1:aa:b9:3d:20:9e:15:bb:b9:b0:14:77:2e:d2:97:90:
fb:f0:66:9c:f8:6a:06:ef:bd:32:00:96:b3:ec:9d:1f:ed:be:
ac:40:da:46:d2:fe:2f:ca:87:b7:01:07:e7:ef:ff:ee:53:b0:
23:75:3b:90:67:0f:ac:d4:d5:f1:36:e4:79:26:cd:4c:6e:6d:
e8:c8:f9:18:5c:64:0f:f6:81:69:c5:16:ee:c7:7f:1f:5b:d8:
a6:31:5d:45:71:16:a4:5f:18:2d:d6:7c:d0:42:3d:2d:0a:a0:
9d:9a:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:54:21 2025 by rpki-client