Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/aTpXXC3KXcSwtDcwh6F3niPkHWU.roa
File: aTpXXC3KXcSwtDcwh6F3niPkHWU.roa (raw, json)
Hash identifier: ustcN0bW+oUtpGBdM/dRdF4t5dwpSRMOI1Anoza5nkA=
Subject key identifier: 69:3A:57:5C:2D:CA:5D:C4:B0:B4:37:30:87:A1:77:9E:23:E4:1D:65
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 0196A72521BF4B6C41478944D62CD12F7108
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/aTpXXC3KXcSwtDcwh6F3niPkHWU.roa
Signing time: Tue 06 May 2025 19:49:10 +0000
ROA not before: Tue 06 May 2025 19:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210636
IP address blocks: 80.244.4.0/24 maxlen: 24
194.76.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:25:21:bf:4b:6c:41:47:89:44:d6:2c:d1:2f:71:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: May 6 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=693a575c2dca5dc4b0b4373087a1779e23e41d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:71:65:91:2b:e1:23:a6:bf:a6:9c:26:96:
6f:d7:2d:0b:d4:07:c1:1d:53:87:1e:d0:42:02:e5:
ff:c9:ca:51:8d:56:e0:90:ca:d1:bc:8d:6f:73:1d:
18:41:c5:ff:39:9c:4d:67:b0:86:2f:75:50:11:89:
76:cd:ab:e5:45:31:e6:f6:5e:67:dd:4b:7a:67:86:
bc:70:b5:00:44:5c:75:5b:3f:6c:93:a9:81:87:33:
59:14:60:6c:33:b0:7a:7c:43:ba:9b:d4:e7:ff:f5:
23:47:56:12:0d:83:6d:49:03:90:f1:e8:0b:89:2e:
e2:ef:3f:4e:db:56:17:14:cd:13:78:e6:bb:58:51:
a0:3e:44:b2:34:14:0d:05:d5:c9:bf:63:20:30:d5:
3b:67:a9:9b:27:f0:14:82:29:85:7f:6c:ac:29:0e:
4a:a6:79:43:17:9f:d7:d7:23:f3:f0:9d:08:cc:a0:
28:34:5f:f8:50:31:bc:0d:0e:38:ee:b8:31:54:e8:
fe:92:5f:a6:da:1e:ce:40:d9:0f:de:82:fd:47:b4:
cc:ae:f5:ca:21:57:3c:84:8b:26:04:96:90:9d:98:
23:4e:7f:1b:09:06:8e:be:0a:6a:3f:b4:df:fc:c9:
a0:88:34:73:2c:99:15:80:14:12:04:91:e9:0d:04:
bf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3A:57:5C:2D:CA:5D:C4:B0:B4:37:30:87:A1:77:9E:23:E4:1D:65
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/aTpXXC3KXcSwtDcwh6F3niPkHWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.4.0/24
194.76.186.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6d:48:67:ee:f6:68:b4:82:52:53:cc:33:68:e2:af:6f:2f:
9c:7c:d0:f4:29:eb:6f:9a:d1:b8:7e:47:b5:9f:55:02:8d:67:
18:db:2b:3d:5b:4b:28:09:7e:e3:a4:e7:e0:b1:d3:ce:f0:9e:
5f:ad:65:c1:72:92:8a:e0:75:4e:43:d3:d7:eb:41:06:01:58:
22:2f:a0:fd:1a:24:4d:2e:f5:62:7b:62:9c:78:52:a8:ae:9d:
8d:b5:a7:7a:c3:c6:ef:d7:c4:3c:3c:78:06:c9:08:68:80:9c:
6e:6d:dc:46:bd:9c:1e:b8:ce:56:19:27:66:8f:46:bb:58:6a:
f6:be:ce:79:6d:f8:5b:c8:c1:4e:08:63:f1:94:ba:37:c7:f3:
b4:26:6e:cb:f0:ba:bd:64:6d:80:95:51:27:7b:a7:1f:33:5c:
ea:bd:14:48:6b:c4:65:1a:56:a1:1a:3b:80:c1:f3:90:11:56:
a7:3a:ad:0d:8b:ad:fb:39:18:36:a2:67:c6:5b:94:8e:1e:20:
36:09:fc:69:99:38:63:16:b9:56:96:d8:d7:0b:90:cd:96:a4:
ce:fb:e7:bb:72:09:3c:08:3f:1e:22:21:73:da:cc:38:0e:89:
15:eb:85:4e:39:d4:10:c1:fe:11:ed:1d:20:78:54:29:e7:da:
a8:77:ad:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:37:28 2025 by rpki-client