Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa
File: rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa (raw, json)
Hash identifier: 2H+IeYUnWlwSyufBzTPesu0/NN+MSp0WuweXrOO7518=
Subject key identifier: AC:1F:5C:19:0D:D0:6D:96:44:0C:29:DB:9D:EC:41:3B:78:3E:6A:AC
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0196958653A46C72A69B514236AFFEC1C988
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa
Signing time: Sat 03 May 2025 09:42:10 +0000
ROA not before: Sat 03 May 2025 09:42:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 185.217.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:86:53:a4:6c:72:a6:9b:51:42:36:af:fe:c1:c9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: May 3 09:42:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac1f5c190dd06d96440c29db9dec413b783e6aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:28:fa:32:97:53:49:62:4a:58:eb:2e:23:
51:b6:28:8b:49:d0:c1:f6:7b:a9:90:45:dd:a5:b8:
ce:2b:05:8a:73:54:6f:dc:da:02:1d:25:3d:a7:a1:
b9:05:e6:cf:dc:f1:d4:cc:56:f2:4a:97:49:b4:90:
57:cf:47:91:1b:06:82:51:6f:47:5d:1c:87:12:5e:
a5:62:ac:3d:16:5a:71:5f:17:7c:35:34:df:89:c8:
e4:45:01:e5:08:79:33:6f:3b:c5:4b:53:c7:1c:e6:
00:9a:f0:57:a4:7e:f0:c3:1a:9d:86:df:2f:8b:7f:
a4:7b:e9:87:e8:b6:7a:69:61:7b:dd:01:1a:e6:1b:
b1:c5:c8:40:73:28:e2:59:7c:25:c4:d8:86:cf:9a:
1f:44:86:b7:4a:99:28:09:39:2e:38:87:f9:44:57:
8d:7c:36:09:52:30:39:b5:c5:df:0d:1f:a4:38:43:
3e:eb:29:67:84:15:5b:e6:37:85:a1:b9:ff:0b:a6:
35:86:55:f1:28:39:01:2b:5b:55:ff:4f:b2:e6:0f:
b6:f1:17:96:4a:70:d9:d0:1c:88:cb:97:67:8d:ec:
94:36:18:52:d6:cc:50:a4:cd:38:68:01:0d:33:cb:
3a:f0:c6:39:b7:ed:d5:ec:25:c4:1a:37:e3:66:3d:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:5C:19:0D:D0:6D:96:44:0C:29:DB:9D:EC:41:3B:78:3E:6A:AC
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.194.0/24
Signature Algorithm: sha256WithRSAEncryption
32:3f:2d:2c:3a:eb:ad:87:3d:38:00:a5:be:18:9e:29:96:1b:
a4:42:14:a0:72:31:95:a2:d6:0c:95:5e:4a:98:71:74:2e:7e:
97:49:64:14:36:80:de:ee:51:74:2d:ab:50:3b:62:b8:04:1b:
64:05:39:19:d2:ae:20:cd:50:75:f6:c6:6f:82:62:bd:43:d4:
12:92:27:4c:c7:c4:40:46:89:88:90:d7:20:c3:f0:80:d3:cf:
c2:a6:12:1a:a8:8b:2c:c8:72:55:82:79:38:d4:b7:74:a9:2b:
f6:22:32:6d:b2:a5:82:b7:01:4d:70:83:37:a2:49:92:ea:af:
c9:77:d5:b9:20:0c:8c:d4:fa:07:6d:75:be:64:5d:e6:33:b9:
61:89:64:3b:ed:e9:82:53:b2:da:db:49:7e:43:1e:23:d8:ec:
9f:cb:87:d4:42:4b:ff:1b:35:4d:7e:34:8f:27:f6:26:14:8d:
5e:77:ee:f2:35:3c:70:7b:80:42:9b:f1:44:8e:45:3e:96:52:
de:fe:b6:d2:6d:73:30:de:35:ce:57:fc:a4:f5:67:d8:90:f5:
a3:7c:56:ec:21:cb:66:71:20:48:e1:bd:98:93:fd:d0:dd:90:
8e:7c:87:26:f2:dc:51:c7:df:dc:ac:dd:55:8b:c2:33:4f:1c:
85:37:c4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:29:06 2025 by rpki-client