Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/pLpqca7Uyo2VN4c7iG8bk7Tvby0.roa
File: pLpqca7Uyo2VN4c7iG8bk7Tvby0.roa (raw, json)
Hash identifier: 1CC5QDG9ExxRePRPfGaAzhbKQ4GWSPEJPxG3XPFJoGQ=
Subject key identifier: A4:BA:6A:71:AE:D4:CA:8D:95:37:87:3B:88:6F:1B:93:B4:EF:6F:2D
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01967B465B9AD3CC51ED965903530FA24B74
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/pLpqca7Uyo2VN4c7iG8bk7Tvby0.roa
Signing time: Mon 28 Apr 2025 07:22:10 +0000
ROA not before: Mon 28 Apr 2025 07:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 85.115.210.0/24 maxlen: 24
213.145.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:46:5b:9a:d3:cc:51:ed:96:59:03:53:0f:a2:4b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Apr 28 07:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4ba6a71aed4ca8d9537873b886f1b93b4ef6f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:de:05:fe:fb:66:80:3c:0c:0d:56:83:1b:
6d:94:9f:47:bf:25:77:f6:57:00:b0:f3:a7:2b:c4:
4e:55:34:a0:67:8e:f5:68:65:f5:b8:9f:63:ae:2d:
51:1b:e0:00:e8:3d:ef:2f:c0:97:53:da:43:ce:92:
60:f1:1f:bb:85:47:04:de:f5:09:6f:40:b8:66:4d:
39:86:80:bf:91:e3:c9:9c:db:50:7d:42:e6:8a:db:
e4:c9:f5:93:7c:9c:4a:72:60:fc:03:11:aa:3f:0d:
ac:f0:f6:01:5c:36:10:14:92:84:e7:8f:52:44:6d:
47:51:af:fd:9d:3c:14:5c:7f:39:cb:4f:88:27:83:
1d:63:2f:fc:34:79:ac:4b:ac:e7:6b:e2:7c:f1:17:
16:a6:ad:40:9e:a0:16:0a:e6:12:36:bb:12:29:23:
ca:57:ab:4e:b1:94:bb:f7:89:3d:1c:e9:49:15:f0:
4f:5b:a0:1c:54:2a:c2:05:b7:91:90:41:27:2f:b3:
3d:19:33:be:57:71:55:39:81:4b:d2:6a:52:bd:fc:
85:1c:fe:2d:39:e2:5c:0b:3f:e9:ce:64:cf:16:fe:
61:9f:00:aa:84:f3:c1:3e:26:70:23:67:f9:49:15:
bc:ba:9c:73:62:d0:bc:5b:a9:db:55:ac:aa:e8:62:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BA:6A:71:AE:D4:CA:8D:95:37:87:3B:88:6F:1B:93:B4:EF:6F:2D
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/pLpqca7Uyo2VN4c7iG8bk7Tvby0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.210.0/24
213.145.69.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4d:0f:bb:15:18:98:99:d2:02:b2:20:75:85:01:64:85:af:
e9:4c:02:79:18:d0:a5:e5:0d:dd:a8:b3:b8:c3:91:0d:6f:ed:
34:ba:1a:12:2c:e3:42:0e:e2:e6:20:96:21:dc:75:51:5d:33:
ea:05:9f:01:85:16:71:ae:82:88:e7:e4:87:93:fe:d7:eb:e6:
95:8b:f4:55:b4:2c:48:c5:ac:6e:ce:80:ae:b8:93:1e:b3:04:
cc:cb:73:9d:97:62:aa:8e:0b:94:34:69:b0:79:f6:7e:7e:38:
31:f0:dc:9a:5f:0b:b7:4a:ca:26:9f:be:25:2f:d7:50:eb:3b:
60:c1:c8:b1:0a:8d:4a:9f:c4:3b:8e:6e:f7:4b:31:1f:cc:d9:
77:9a:78:cc:5c:1d:e8:25:27:ec:74:ae:8e:86:d0:63:12:73:
4c:f9:88:39:1a:cc:62:3c:c4:9f:07:de:36:60:51:c5:79:13:
3b:1b:98:2f:4d:1b:cf:cf:33:95:3f:67:a6:f9:80:8d:64:aa:
b2:07:31:79:20:16:e5:b3:31:be:35:8c:b7:bf:cc:c2:0b:b8:
05:37:5e:c9:45:1f:c7:41:80:c7:3a:7f:4a:7b:d5:52:cf:f6:
44:6d:c3:c0:9d:d3:f5:ad:b0:8d:ed:88:2e:bf:38:15:67:62:
94:ed:51:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:24:55 2025 by rpki-client