Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/QVhK2fvbKpXcmrjp7H6z_EkkVRQ.roa
File: QVhK2fvbKpXcmrjp7H6z_EkkVRQ.roa (raw, json)
Hash identifier: OsX42YWLb/xupxzQu7af5C3oGi/EIsV+i9iPTy5PezE=
Subject key identifier: 41:58:4A:D9:FB:DB:2A:95:DC:9A:B8:E9:EC:7E:B3:FC:49:24:55:14
Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial: 01969BC300D4C1EAA54A57BE6F556D2A485D
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/QVhK2fvbKpXcmrjp7H6z_EkkVRQ.roa
Signing time: Sun 04 May 2025 14:46:10 +0000
ROA not before: Sun 04 May 2025 14:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202651
IP address blocks: 193.219.112.0/24 maxlen: 24
195.7.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9b:c3:00:d4:c1:ea:a5:4a:57:be:6f:55:6d:2a:48:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Validity
Not Before: May 4 14:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41584ad9fbdb2a95dc9ab8e9ec7eb3fc49245514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:71:5c:b9:c9:98:08:bd:35:f9:25:56:03:
7b:1b:c4:52:09:c3:16:b3:a5:7f:28:dc:e5:c9:02:
4d:87:98:d8:29:4f:0e:0a:39:e9:9a:de:44:6c:ec:
a9:af:89:0b:98:ce:d2:4a:34:8e:32:30:a6:2c:a9:
96:bb:df:b2:82:00:93:40:37:07:98:32:63:95:1c:
e0:60:b8:57:8f:c6:c7:00:8a:3b:e9:bb:fb:47:97:
28:ce:ee:44:7d:eb:67:a1:99:fa:7e:39:b0:de:c7:
9f:69:e0:8c:e5:f4:01:e7:54:c3:84:31:3c:ed:b6:
0b:3f:31:c3:2b:3c:25:2e:b4:02:8a:b3:d2:01:13:
5d:e3:cf:74:37:d0:74:4a:12:62:3f:6d:8c:07:7e:
0f:5b:4c:f3:f5:e8:2f:00:16:fa:fd:90:07:e3:ab:
28:02:5b:69:12:df:29:ed:14:7c:b7:fa:a8:e9:a3:
28:a8:31:37:45:6d:45:2e:6e:92:58:f5:9f:14:0c:
7d:e2:96:69:37:36:02:5a:f4:ec:ac:49:d7:d8:6c:
1f:b6:83:a6:e6:21:6b:a9:2d:11:c0:36:cc:eb:2d:
bc:06:ec:db:ae:28:29:39:ae:7e:41:27:d8:99:32:
91:ec:a5:23:3a:d2:21:f9:24:55:0e:79:99:af:52:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:58:4A:D9:FB:DB:2A:95:DC:9A:B8:E9:EC:7E:B3:FC:49:24:55:14
X509v3 Authority Key Identifier:
keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/QVhK2fvbKpXcmrjp7H6z_EkkVRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.112.0/24
195.7.8.0/24
Signature Algorithm: sha256WithRSAEncryption
88:79:1c:b6:33:8f:01:7a:63:a0:97:a4:d9:2f:a2:07:b3:72:
d9:ed:56:52:2a:da:c4:15:86:e8:dd:67:78:ed:33:82:2e:aa:
40:47:94:88:c7:3a:4d:31:33:31:e9:21:47:23:bd:ea:e9:ec:
3e:d9:a4:2f:bd:5b:ae:e6:9d:18:d5:62:3b:40:05:07:20:09:
70:b4:9b:d9:c3:d5:22:70:84:e3:e7:b8:04:85:4c:11:fc:94:
85:86:da:60:fb:00:1b:c6:c6:90:61:1b:fc:d5:9f:07:34:6f:
c9:cb:db:ba:52:bc:a2:da:71:b2:1d:40:cb:36:06:26:16:f5:
fb:df:19:49:9c:42:32:e6:9d:e7:14:e1:f4:5a:11:cf:2a:bd:
a6:56:1b:f7:2d:2d:d9:ac:3f:27:08:a6:25:6c:57:bc:fd:7d:
8e:ed:22:a5:5d:45:13:c7:09:96:39:b0:62:70:95:9e:bc:c8:
03:d6:c8:69:27:eb:92:df:26:e8:21:08:c7:d3:02:e0:96:71:
06:60:f7:8a:66:dc:3f:e0:59:ac:0e:2a:97:1c:d3:bd:93:a3:
b9:e7:7a:83:f4:a5:dd:a1:e3:a4:fa:bb:2a:4c:cf:3f:97:43:
73:cf:fc:0c:7b:a1:41:98:b2:84:1e:03:51:b3:d8:08:67:bf:
fb:88:92:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:09:29 2025 by rpki-client