Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/FqbcQiC4rQi46n3g99F_M1_Ys0A.roa
File: FqbcQiC4rQi46n3g99F_M1_Ys0A.roa (raw, json)
Hash identifier: OyV3G2Aag4lQbsbY7+qaGlD0xVR3rH5K5z5yPW9zjfE=
Subject key identifier: 16:A6:DC:42:20:B8:AD:08:B8:EA:7D:E0:F7:D1:7F:33:5F:D8:B3:40
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01975D6E967A9B0550FAFA87E6AFF0D2A83A
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/FqbcQiC4rQi46n3g99F_M1_Ys0A.roa
Signing time: Wed 11 Jun 2025 05:20:17 +0000
ROA not before: Wed 11 Jun 2025 05:20:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 92.62.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:6e:96:7a:9b:05:50:fa:fa:87:e6:af:f0:d2:a8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jun 11 05:20:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16a6dc4220b8ad08b8ea7de0f7d17f335fd8b340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:44:dc:87:bd:aa:a6:1b:93:f9:d7:87:33:a6:
2c:90:09:40:ff:66:b3:6a:d7:47:13:5c:82:65:96:
69:d8:f2:db:5b:42:70:15:c7:dc:5d:9e:33:68:e4:
d0:9c:68:ff:b6:42:ee:d6:e7:17:7c:19:8f:9a:cd:
81:27:23:6e:a0:e5:5c:75:b6:6e:a1:bf:5f:7c:5b:
98:2e:4d:63:d7:ff:fd:51:ad:b6:14:f0:6a:e8:65:
5b:12:54:a6:d2:4a:e7:a9:99:39:3b:fa:dc:5a:71:
fb:6b:52:df:e6:1f:2e:e3:7d:cb:81:5e:80:91:b1:
5f:9f:4a:97:f2:f0:28:ed:de:6e:a3:e6:0c:2f:b2:
53:4c:02:d5:ce:80:e8:f2:11:b3:64:1b:1e:1e:46:
df:e4:e5:3b:d9:5b:fa:4b:0b:47:4f:ea:67:c0:8d:
66:2c:41:cd:a5:07:72:f0:1c:24:f4:5e:cc:f3:85:
cc:20:30:79:e6:6a:6f:f2:35:38:cc:cc:d7:d5:79:
46:fe:45:2d:66:bc:fa:26:f7:7e:01:4a:98:17:e8:
82:73:bf:42:18:9f:50:55:78:72:ad:ef:03:85:b0:
e4:34:37:af:b4:8e:35:e5:73:6f:ef:bf:d8:c7:a7:
0d:c9:35:65:cb:18:6b:eb:03:ca:4c:40:dc:21:9c:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A6:DC:42:20:B8:AD:08:B8:EA:7D:E0:F7:D1:7F:33:5F:D8:B3:40
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/FqbcQiC4rQi46n3g99F_M1_Ys0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.240.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0b:62:e7:92:d0:55:dc:bc:6a:42:76:18:b0:5d:6b:64:c8:
ba:b8:77:4b:ee:f5:27:ce:71:ed:d0:2c:61:af:9c:c2:5f:36:
f4:5a:1b:a5:c0:c8:29:b7:6e:d0:38:cb:82:7f:dd:e4:25:ec:
8c:d3:d1:14:26:04:49:3a:75:cd:b0:ad:c5:4d:df:6f:20:7d:
56:48:0c:ee:db:25:98:72:df:21:18:46:5a:96:df:50:37:98:
a8:7f:21:db:f0:fb:c8:df:86:d5:68:5f:ab:32:4b:a8:2a:ff:
07:72:7b:8b:eb:d9:25:21:ff:f5:8f:72:e5:44:e6:eb:2c:a9:
ef:e0:a9:52:78:26:46:88:02:6e:35:b2:cd:13:19:3a:49:65:
49:b5:dc:8e:e5:0b:05:01:0e:5a:09:9f:4d:2f:64:dd:4b:e1:
2e:fd:1e:f4:3e:b7:36:be:c9:2a:d4:63:ab:05:a0:86:12:4c:
1c:c0:4d:1e:fb:43:4e:dd:98:21:de:24:5d:d7:9b:f7:5a:fb:
dc:70:91:cf:aa:18:85:2c:5a:be:a7:fe:d4:3c:16:57:f0:4c:
71:89:f2:39:09:cf:47:a0:52:f8:50:2b:e7:06:0e:b2:9e:4e:
2e:55:e4:b8:9e:f9:c1:3f:99:d9:91:89:5e:4d:62:8b:0f:92:
72:e9:06:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:30:19 2025 by rpki-client