Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/fqkGaUKO8jQgV43kpQCPk_QvAKY.roa
File: fqkGaUKO8jQgV43kpQCPk_QvAKY.roa (raw, json)
Hash identifier: hX2eXDOdterl33d5BLDKltIZDyu7ggsh0S/egGBhPp0=
Subject key identifier: 7E:A9:06:69:42:8E:F2:34:20:57:8D:E4:A5:00:8F:93:F4:2F:00:A6
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01978C1CBE885D7AC52CF7C37357E84E8413
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/fqkGaUKO8jQgV43kpQCPk_QvAKY.roa
Signing time: Fri 20 Jun 2025 06:53:03 +0000
ROA not before: Fri 20 Jun 2025 06:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 195.114.193.0/24 maxlen: 24
195.114.206.0/24 maxlen: 24
195.114.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:1c:be:88:5d:7a:c5:2c:f7:c3:73:57:e8:4e:84:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 20 06:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ea90669428ef23420578de4a5008f93f42f00a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:2a:44:b5:b6:fc:81:da:61:85:fc:9c:80:
f8:3b:6a:83:93:71:77:d8:33:a8:24:47:cd:2e:96:
4a:ff:45:6f:7f:ff:91:69:89:99:9e:b5:ec:cf:21:
fa:97:f5:71:3a:77:0e:78:a9:07:47:e4:3d:2c:83:
24:27:da:41:3a:1f:50:71:cd:d3:b0:da:a4:35:e9:
18:d7:79:a7:8a:11:68:66:7d:a6:34:9a:b5:57:a6:
1d:28:9f:08:d6:2a:40:ec:fa:e5:03:60:4b:08:d6:
cd:21:83:7f:af:c0:d1:f2:06:27:f5:fb:56:4a:be:
58:2b:42:fb:ab:1a:c6:cc:b4:6f:f9:7b:ab:b2:18:
0e:55:f0:91:45:ee:5d:89:45:eb:58:25:aa:c0:c6:
ed:5e:7d:3d:58:bb:90:d6:b3:09:50:ca:a0:62:91:
ab:15:6d:95:d4:e9:7d:73:a9:58:c7:22:3b:32:5c:
dd:b3:7c:9c:5e:9e:dc:6a:e4:17:92:f0:c0:dc:af:
e5:30:66:b8:29:4c:54:4d:3e:7b:fa:1d:a7:c4:96:
07:35:69:98:fb:dc:2a:6e:d4:95:81:e1:92:b9:b2:
0c:29:27:cd:10:a7:96:b8:57:f3:6f:13:6b:e3:8d:
fa:e4:7a:fb:2a:1e:bd:49:af:0b:cb:66:56:be:ec:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A9:06:69:42:8E:F2:34:20:57:8D:E4:A5:00:8F:93:F4:2F:00:A6
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/fqkGaUKO8jQgV43kpQCPk_QvAKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.193.0/24
195.114.206.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:e6:44:68:eb:dc:a0:1d:81:01:50:08:1d:34:19:87:df:5d:
70:2b:3d:d3:69:a1:03:fb:fb:ae:2b:96:0c:3d:3c:0b:04:20:
6c:dc:c4:cd:a3:3b:67:b5:f4:43:c5:a3:34:b2:de:1f:1e:9d:
2c:83:3c:c4:d6:58:83:3d:50:d0:2a:3c:5e:28:00:8a:13:3d:
c0:e9:6f:ae:0f:1e:29:41:36:23:d4:82:78:f1:8b:c8:a3:a1:
d5:a5:b5:d4:75:07:38:16:58:c0:13:3c:d3:96:27:71:21:6b:
c0:e6:45:4e:5d:88:88:e5:3c:f0:d1:df:98:78:c8:ff:42:d5:
ac:7b:8e:9b:a0:08:a5:31:1e:83:ff:25:23:94:d9:f4:67:0a:
a8:62:7d:25:63:0e:12:ef:a0:8a:99:be:f8:60:ee:d5:bf:23:
79:be:d0:9a:7c:38:c0:d6:ef:8c:1a:eb:25:98:e1:1e:9a:90:
47:08:1d:b4:6d:1f:22:bb:06:ac:52:97:68:04:83:c1:7e:57:
50:8f:f0:25:ee:40:c4:4d:43:00:bf:e2:9f:59:c5:69:76:bc:
3f:87:d1:20:66:88:38:f8:2b:68:c7:b7:46:f5:27:ff:a3:11:
51:ea:35:fb:86:18:0a:fd:d8:cb:3e:43:c2:70:62:0e:cd:9e:
ca:ef:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:54:24 2025 by rpki-client