Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/ngGxELy2wl8gCNyQvaYYMnYRe3s.roa
File: ngGxELy2wl8gCNyQvaYYMnYRe3s.roa (raw, json)
Hash identifier: 1vlbZmpTbwG9jf+Nzc2gP7ednTVheAhVKYYb/whXWvI=
Subject key identifier: 9E:01:B1:10:BC:B6:C2:5F:20:08:DC:90:BD:A6:18:32:76:11:7B:7B
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019722C12E9685A858458F102607D509DF59
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/ngGxELy2wl8gCNyQvaYYMnYRe3s.roa
Signing time: Fri 30 May 2025 19:52:55 +0000
ROA not before: Fri 30 May 2025 19:52:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203020
IP address blocks: 45.142.24.0/24 maxlen: 24
103.111.0.0/22 maxlen: 32
185.153.124.0/22 maxlen: 32
185.233.124.0/22 maxlen: 32
194.113.94.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:22:c1:2e:96:85:a8:58:45:8f:10:26:07:d5:09:df:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: May 30 19:52:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e01b110bcb6c25f2008dc90bda6183276117b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:2e:8f:d9:ee:28:35:16:c7:99:a6:c2:6e:
49:e8:8a:95:d1:de:6e:6c:11:50:2f:05:00:ae:19:
16:a9:69:a6:98:d6:29:1d:3e:b8:fe:69:d3:c2:4e:
60:13:5d:36:92:7f:3a:49:f5:18:7a:1a:28:61:93:
bf:19:3d:5f:67:0f:a9:4c:06:1c:94:3e:83:1c:b5:
2f:ab:05:96:4a:4f:25:43:b5:aa:f0:6e:9b:0b:f0:
f1:ed:b9:02:b8:35:c8:31:53:95:f0:5c:4d:8f:0d:
2c:84:cc:83:12:de:60:e2:58:a1:a8:a7:32:e4:11:
14:cf:93:75:4a:df:38:30:f9:61:2c:d5:92:0f:93:
69:1d:ef:94:b5:94:c4:0e:cc:1a:1e:00:d1:b8:1a:
f2:b4:dc:c7:6f:5f:aa:33:f1:c6:fd:75:f6:12:e4:
26:57:f2:8c:c3:cb:2e:5e:b6:66:13:d9:28:db:76:
2e:bb:12:c9:fc:06:b6:da:f5:c7:6c:f3:91:37:87:
cf:db:e2:ad:5a:37:d6:f7:8e:e1:d7:54:dd:1c:10:
61:6d:88:cc:c2:b3:74:e6:6d:63:51:bd:f6:23:94:
35:7e:5b:58:1c:4e:b7:b9:dd:6f:8a:b0:a6:18:73:
23:4d:4c:bf:55:92:85:d6:cd:bf:8c:8e:38:2a:49:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:01:B1:10:BC:B6:C2:5F:20:08:DC:90:BD:A6:18:32:76:11:7B:7B
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/ngGxELy2wl8gCNyQvaYYMnYRe3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.24.0/24
103.111.0.0/22
185.153.124.0/22
185.233.124.0/22
194.113.94.0/23
Signature Algorithm: sha256WithRSAEncryption
69:52:1b:f0:4c:b4:84:ba:0c:0d:d3:90:cb:90:1c:05:cd:7c:
59:b1:2b:f4:38:7f:e9:04:40:00:57:05:af:25:7b:53:e1:47:
81:e8:2e:65:37:ce:e9:5d:50:c9:99:82:7d:27:bd:6c:8c:13:
24:57:52:3d:55:de:ab:de:cc:ab:ef:ea:27:50:7f:9d:7c:82:
8f:a9:0a:51:fd:ca:dc:14:5a:a1:7c:8a:fd:8e:0e:f3:fa:69:
b1:b6:79:db:79:a5:14:78:ec:03:a1:94:8d:25:b0:6f:ab:c1:
05:c9:c5:cc:6f:aa:b8:dc:e8:a6:5c:1b:ca:f0:88:4a:7b:7e:
ec:52:0d:4d:2a:fa:ff:c3:37:5e:86:90:47:12:57:21:2f:fa:
eb:56:2b:a2:c0:c3:31:54:48:c9:7f:d8:eb:fa:39:26:19:48:
63:ea:b9:e3:94:ae:a2:af:8e:93:a1:22:e3:e6:44:26:11:cd:
f6:57:a8:12:04:3d:b8:06:67:c1:1a:ac:12:9b:22:3f:9e:67:
11:0d:ad:9d:d8:0d:26:b1:e4:aa:54:21:68:66:32:0a:ea:c2:
ba:69:a7:64:8d:86:62:60:06:c3:6c:bd:24:d9:1e:3f:ad:90:
39:fb:f3:ef:71:df:83:67:52:8c:2a:b4:a0:1c:a5:b0:0b:ae:
fc:97:15:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:58 2025 by rpki-client