Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/xHVOnj8EcbFBen1MyRZoj--uhBk.roa
File: xHVOnj8EcbFBen1MyRZoj--uhBk.roa (raw, json)
Hash identifier: P4+RXZYamg4bOLBzEuVlQBy3U8VEBU2eNpWSAyTMkyI=
Subject key identifier: C4:75:4E:9E:3F:04:71:B1:41:7A:7D:4C:C9:16:68:8F:EF:AE:84:19
Certificate issuer: /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Certificate serial: 0196644B2E8FBED59D2E320FB254341C7245
Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/xHVOnj8EcbFBen1MyRZoj--uhBk.roa
Signing time: Wed 23 Apr 2025 20:16:10 +0000
ROA not before: Wed 23 Apr 2025 20:16:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197701
IP address blocks: 192.166.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:64:4b:2e:8f:be:d5:9d:2e:32:0f:b2:54:34:1c:72:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Validity
Not Before: Apr 23 20:16:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4754e9e3f0471b1417a7d4cc916688fefae8419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:56:92:c4:71:75:de:7a:1e:f2:76:61:43:
da:c5:9d:4a:6c:76:1d:e6:6f:92:5c:4d:e5:50:d9:
7b:84:e7:15:61:09:d0:23:cd:a7:9d:1b:47:38:54:
db:79:80:f5:55:bc:61:57:45:b6:2e:c1:2c:f5:ef:
98:d4:67:b1:8e:40:79:50:a7:a3:5f:25:d7:86:c2:
ed:b2:9d:7e:cb:a7:c0:ea:6f:9c:df:2f:11:00:58:
3e:0c:1a:46:0c:3c:e5:33:3f:d8:61:a4:94:0e:0d:
c9:38:ff:47:01:20:88:41:09:08:fd:68:b5:a9:a1:
aa:71:04:35:c0:3b:2a:51:62:87:e0:4c:e2:09:f7:
13:d0:e2:db:4c:10:b1:54:28:a4:73:af:33:a0:f4:
3b:02:b7:fc:87:b6:2d:5b:b3:9f:a4:ea:04:95:37:
e2:c5:e1:cb:b4:11:7b:c4:03:67:23:4e:d3:76:8c:
ea:b9:43:00:70:51:31:51:a3:fe:9f:e5:08:ad:39:
50:78:06:c2:57:d7:06:5e:a1:9f:ff:39:2a:d8:85:
fe:3f:5c:b2:ed:48:e5:13:75:33:36:97:50:1a:1e:
0d:73:c5:f4:c1:77:ea:a8:53:76:bc:c8:24:a2:86:
5a:65:31:07:bd:fa:79:08:6a:88:fb:e5:7a:ad:9f:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:75:4E:9E:3F:04:71:B1:41:7A:7D:4C:C9:16:68:8F:EF:AE:84:19
X509v3 Authority Key Identifier:
keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/xHVOnj8EcbFBen1MyRZoj--uhBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.255.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:62:83:76:78:5a:6b:8c:c0:2f:14:5c:85:1a:4b:b3:50:bd:
2a:58:7e:8a:81:b6:a2:1c:d5:da:07:2a:18:bd:ee:6f:ae:45:
12:5f:b0:79:8a:bf:f2:46:75:1b:ef:c7:7e:66:f1:9c:29:18:
98:e8:94:23:62:c2:3a:d1:f6:ce:8a:c7:72:f2:0d:4c:cf:87:
89:ef:f4:d2:dd:e3:fb:13:43:e9:35:67:55:f1:55:10:a1:6c:
ff:c5:49:57:be:fa:28:c6:bd:26:d5:1b:21:79:9e:65:20:5c:
00:51:3d:a2:0e:3d:10:06:58:31:de:8e:5e:03:0d:98:e9:c7:
80:73:bf:5b:bf:3d:d2:b7:2c:d4:21:16:0f:98:8d:63:7e:70:
4f:97:12:c2:fa:73:72:cc:20:22:2e:2b:5a:1b:b5:5e:4d:ce:
78:2f:b3:c1:4d:22:11:1a:22:53:c3:63:e7:b7:b0:be:e7:0f:
ed:d8:ab:95:46:0a:9c:3e:ac:32:ec:b9:ea:b9:46:c0:ef:75:
98:4a:ea:d4:0d:ed:dc:92:d9:25:3c:7f:03:5d:24:3c:dc:db:
49:a6:0e:00:92:f6:68:63:15:60:a4:9e:79:89:56:35:f9:0a:
94:e7:a4:34:84:97:a1:f6:8c:58:75:26:a5:80:3f:1e:53:03:
be:bd:79:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:50:08 2025 by rpki-client