Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/qbXFcFrCgqGjdgTwc98zkJBFxig.roa
File: qbXFcFrCgqGjdgTwc98zkJBFxig.roa (raw, json)
Hash identifier: +vH/YytPmiVwFk5IDzKmh91Z65dk/PdQ1UpGi8PAwbA=
Subject key identifier: A9:B5:C5:70:5A:C2:82:A1:A3:76:04:F0:73:DF:33:90:90:45:C6:28
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0196C4BB4B3879CD544A9195EF057B72898B
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/qbXFcFrCgqGjdgTwc98zkJBFxig.roa
Signing time: Mon 12 May 2025 13:42:10 +0000
ROA not before: Mon 12 May 2025 13:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 188.94.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:bb:4b:38:79:cd:54:4a:91:95:ef:05:7b:72:89:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: May 12 13:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9b5c5705ac282a1a37604f073df33909045c628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:fb:44:39:b4:f4:ce:ac:d5:99:00:03:c6:
5e:ae:fd:0f:fc:fa:9f:ba:83:2f:03:f9:88:2b:36:
5c:42:57:55:9d:cb:30:bc:70:cc:17:11:a1:35:82:
69:ab:22:68:af:79:11:91:d2:06:0a:ea:13:1d:1a:
bb:e0:6c:b6:c8:29:9b:53:51:7c:ff:fc:2a:42:30:
43:a3:37:d6:f4:21:21:b9:92:70:c0:95:63:cf:e0:
b7:98:c8:5a:2c:05:2d:a9:e4:1f:e4:30:af:e2:06:
a2:80:a5:55:9d:0a:ef:1b:54:40:cd:12:6b:34:6e:
67:54:f3:98:c9:23:b1:da:a1:33:90:43:64:6e:0c:
f0:f7:71:c9:85:a5:0f:ac:6a:eb:8a:bc:de:9a:af:
51:75:b9:21:0f:18:b7:36:3f:6e:b7:76:e6:3b:82:
36:b7:0b:3a:21:40:dc:44:7b:10:6c:0b:77:3b:ba:
cf:3c:28:3f:03:32:8f:20:c0:0d:97:bd:54:9f:76:
94:e3:17:77:b6:96:ab:a7:15:6f:34:f5:3e:7e:e5:
d2:13:4c:cc:20:c7:6a:c0:36:e0:09:23:c4:6f:79:
05:9e:56:15:c4:59:90:33:41:7a:e8:b9:7d:af:fa:
b2:2f:32:3b:c6:1a:4f:84:4c:b6:43:c0:c8:16:7c:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B5:C5:70:5A:C2:82:A1:A3:76:04:F0:73:DF:33:90:90:45:C6:28
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/qbXFcFrCgqGjdgTwc98zkJBFxig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.191.0/24
Signature Algorithm: sha256WithRSAEncryption
67:73:44:d8:dc:e4:7a:80:85:c4:2c:dd:a0:68:5e:d8:fe:9e:
5a:f3:89:e9:6c:48:e3:d2:f8:54:82:c6:40:a0:39:79:f0:3e:
ba:ca:ee:fb:8c:cf:52:57:bc:c7:c2:e0:c2:fe:80:c8:db:93:
b4:f9:27:6c:0f:b2:40:14:de:9c:6c:85:6a:c0:a4:8d:70:19:
f0:ca:17:5c:65:67:4d:d6:43:82:81:d7:d0:da:14:0d:0e:c6:
10:bd:e4:54:80:97:e1:23:31:c2:f5:bd:3d:fc:47:b2:f1:de:
bf:e3:f2:f8:57:7a:9f:26:6d:be:68:af:40:50:3a:ef:96:25:
cc:f8:9a:0e:f1:c6:01:1d:23:6f:b2:73:a0:15:b7:9e:f5:4a:
f2:33:8a:b9:b8:ff:80:dc:56:50:1f:49:da:db:19:db:20:c6:
07:4e:69:95:d8:3b:dd:db:06:e8:a9:57:94:6b:2f:3d:73:6a:
d7:6b:fd:a5:89:cc:3f:06:6c:3e:e6:73:f3:c5:32:44:d5:f9:
2c:da:d7:d8:57:3c:81:24:0a:2a:46:d9:43:be:e5:06:84:c9:
af:b4:52:d1:f0:cd:6d:50:07:ee:24:14:8a:9c:c8:79:9d:60:
00:d5:d0:c6:6a:88:b7:04:40:e3:7e:5d:ac:14:1f:d3:6f:5b:
6a:7d:c3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:11:45 2025 by rpki-client