Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AR1U-o6oikG5S9IuxC8ZAQe4Zy0.roa
File: AR1U-o6oikG5S9IuxC8ZAQe4Zy0.roa (raw, json)
Hash identifier: QXquCj99CRvUb5NM604UTbelj6b0eQb4VIYnFIQyC8w=
Subject key identifier: 01:1D:54:FA:8E:A8:8A:41:B9:4B:D2:2E:C4:2F:19:01:07:B8:67:2D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0196AC3005A69BE6F46B7A8F480547BE1408
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AR1U-o6oikG5S9IuxC8ZAQe4Zy0.roa
Signing time: Wed 07 May 2025 19:19:10 +0000
ROA not before: Wed 07 May 2025 19:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210457
IP address blocks: 193.23.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:30:05:a6:9b:e6:f4:6b:7a:8f:48:05:47:be:14:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 7 19:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=011d54fa8ea88a41b94bd22ec42f190107b8672d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:a8:97:dc:be:8f:52:f1:11:6d:26:88:bf:
69:57:1c:96:94:81:7d:5b:b2:36:ab:c0:ed:be:8a:
19:66:6f:c4:c3:33:43:c6:49:14:5e:45:7a:31:f1:
8a:01:6b:31:30:16:40:16:7f:db:ff:4f:8a:87:86:
9f:97:02:f5:b4:e6:c4:81:ed:d1:3d:03:b8:2b:fa:
73:07:39:54:35:28:27:9d:d4:14:c9:b9:02:38:2f:
a9:52:fa:a9:7c:1f:c3:c2:b7:b5:71:aa:19:73:ea:
57:89:45:af:29:e5:7b:c5:88:a4:37:9a:d6:09:b4:
e2:55:4e:95:0b:5c:7c:83:c5:30:fa:43:9f:37:3e:
05:95:e9:20:18:69:de:ef:65:8c:1e:6f:a9:36:6b:
ea:94:48:25:0f:e1:a1:c4:21:6c:37:00:6e:db:26:
08:03:2f:c0:0e:3f:d3:fb:15:9c:f2:b1:dd:b9:b4:
db:d6:43:f8:c3:a7:b1:cf:6f:c2:53:0f:09:f0:88:
96:e5:05:a3:9c:b6:0c:96:4f:cb:f5:b8:90:6c:d5:
1f:3a:36:f0:da:b6:d1:40:71:93:40:ac:7d:a9:d2:
65:70:b8:e4:05:a7:32:d1:5b:11:43:03:19:74:66:
85:50:f2:66:1f:02:a5:fb:50:28:fd:0c:e7:97:bb:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1D:54:FA:8E:A8:8A:41:B9:4B:D2:2E:C4:2F:19:01:07:B8:67:2D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/AR1U-o6oikG5S9IuxC8ZAQe4Zy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:4c:54:d5:c1:4d:67:c0:a9:23:a2:e8:a4:20:58:49:6e:d0:
32:d6:1e:40:82:b4:fe:e4:61:c6:8d:df:01:ae:23:c7:13:2a:
77:90:c9:3d:06:3e:ac:a7:91:52:7e:06:84:61:3e:de:cd:d8:
e5:4b:e8:53:a8:bd:72:43:2a:83:d6:61:07:d7:9f:e8:d7:58:
74:19:f5:41:ab:bb:76:9d:27:82:57:aa:16:dc:f9:14:db:aa:
c1:6f:30:80:22:2f:35:ee:ba:39:0e:44:77:65:07:02:15:bb:
c5:e4:b1:c1:d1:71:0b:8b:f7:7d:39:37:51:54:0c:4c:13:7a:
af:6d:a3:de:b3:9b:08:26:67:81:1c:7b:b6:d0:04:0d:d6:68:
a2:a1:a6:e5:fa:3e:74:06:66:d6:1b:6a:c1:fd:8a:44:a8:5b:
3c:ac:4c:d4:fa:a2:67:db:db:1c:79:f7:7f:c8:25:bd:e3:5c:
19:92:50:b8:a9:75:79:57:e4:2e:f3:4a:94:5e:0a:dc:f5:2f:
e4:59:2a:b1:76:ae:a5:17:b4:e7:44:5c:30:77:72:e5:35:f2:
59:ff:11:4b:44:69:f9:99:15:d2:50:70:3a:4c:68:76:f8:94:
3f:42:ea:ca:e2:4c:3f:f0:a0:9f:aa:f0:c0:be:2e:49:e6:c7:
dd:9d:24:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:10:25 2025 by rpki-client