Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/0qAbgoW4LJAElFdWt9cFuw-rgn8.roa
File: 0qAbgoW4LJAElFdWt9cFuw-rgn8.roa (raw, json)
Hash identifier: L8maPhEmT2n7X8a6uusm8vsVOaPlCBJtXIkemnm/t10=
Subject key identifier: D2:A0:1B:82:85:B8:2C:90:04:94:57:56:B7:D7:05:BB:0F:AB:82:7F
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019652EE49DE67EA8BAD48A1344BCCFD8E70
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/0qAbgoW4LJAElFdWt9cFuw-rgn8.roa
Signing time: Sun 20 Apr 2025 11:21:10 +0000
ROA not before: Sun 20 Apr 2025 11:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214922
IP address blocks: 87.236.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:ee:49:de:67:ea:8b:ad:48:a1:34:4b:cc:fd:8e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Apr 20 11:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2a01b8285b82c9004945756b7d705bb0fab827f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:eb:c0:e8:9e:54:fa:1d:6c:7b:22:9f:6f:
32:36:82:f1:46:3d:78:07:fc:17:6b:74:f9:42:df:
d2:8e:97:11:67:2a:d1:85:d2:c3:f1:33:6d:e8:c5:
ac:4b:e8:2a:7f:7f:16:19:e4:9d:91:74:78:a3:74:
85:5d:dd:d8:16:32:ea:23:b9:39:81:a1:2b:6e:bd:
d1:a7:62:bd:07:1b:64:09:77:47:de:4c:32:b6:9f:
1b:c8:7c:ef:fb:88:89:da:08:0c:91:09:ba:03:ea:
4e:c2:14:ee:66:23:3f:07:82:fc:bc:df:20:ad:89:
03:d9:a7:f2:70:33:3b:7d:dd:72:f0:32:9d:90:3e:
cc:55:ac:f9:80:c8:ef:14:27:a1:5b:7c:44:0e:e5:
a4:3d:bb:4d:3d:a7:0d:5a:b2:6e:80:0a:0d:cd:1c:
aa:d5:81:ee:f0:ee:f0:12:27:5c:6b:23:3c:60:07:
da:4f:96:d7:5f:85:32:5e:c4:73:30:2d:7b:a1:18:
6e:00:9c:c6:15:b5:58:27:29:3d:df:53:16:d0:30:
5a:2e:44:81:59:71:43:86:1d:0b:9e:6b:10:56:a3:
76:74:ab:da:fd:fc:2f:55:e7:8c:98:c6:e0:87:94:
79:0a:34:08:22:e1:10:8f:11:d2:67:eb:13:03:44:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A0:1B:82:85:B8:2C:90:04:94:57:56:B7:D7:05:BB:0F:AB:82:7F
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/0qAbgoW4LJAElFdWt9cFuw-rgn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.208.0/24
Signature Algorithm: sha256WithRSAEncryption
41:24:13:c0:73:1f:3a:e8:15:35:9a:61:f8:53:4d:03:9d:fe:
63:f6:34:6a:d2:6d:30:9a:ff:72:49:44:da:a1:d7:ae:1e:be:
89:51:56:01:6b:e9:1a:4f:e3:d1:d2:99:65:1d:7f:2d:51:c5:
ac:df:5a:cc:e5:f6:5b:8c:34:6b:1b:7b:40:c5:20:2f:19:86:
01:af:a1:6a:b5:de:d5:0e:9a:94:ef:af:3f:b5:96:d5:d5:1c:
5c:d7:f0:28:36:6c:a4:3c:89:16:ea:47:24:47:c2:88:fb:80:
e4:1c:a4:a8:d7:cc:d2:7f:ee:84:57:33:6e:d9:dd:26:54:89:
f0:52:b3:52:55:71:db:98:09:d4:c0:4a:e2:af:d4:bd:34:f5:
5b:5f:52:14:85:d6:bc:1d:a4:ad:33:dd:94:fb:c4:38:0c:f1:
75:00:04:9d:84:48:30:46:41:9b:81:35:7d:4e:59:a5:ea:55:
79:41:81:de:0c:49:ca:cb:53:5a:21:89:ca:bf:63:08:00:34:
7b:c4:53:86:6e:e2:0e:d3:0a:ea:6b:39:e5:07:08:a8:d8:3c:
cc:75:a3:d9:26:bf:05:8c:13:33:3d:64:51:b1:43:a3:09:42:
c2:7f:9b:25:21:14:2e:6d:ea:7e:e6:08:f5:71:6e:ed:10:c0:
af:1a:f9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:39:43 2025 by rpki-client