Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/cAOyRg3i4jSSe1RkcXpSb5S1Zpw.roa
File: cAOyRg3i4jSSe1RkcXpSb5S1Zpw.roa (raw, json)
Hash identifier: Hr2RGOEI6iDPXQ9AQc/grgU2ycWC6iOC4KKgX9lIoGQ=
Subject key identifier: 70:03:B2:46:0D:E2:E2:34:92:7B:54:64:71:7A:52:6F:94:B5:66:9C
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 019671DF6EAB1CFB5361EEB2FBB6E0B2143A
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/cAOyRg3i4jSSe1RkcXpSb5S1Zpw.roa
Signing time: Sat 26 Apr 2025 11:33:10 +0000
ROA not before: Sat 26 Apr 2025 11:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6205
IP address blocks: 104.247.191.0/24 maxlen: 24
185.73.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:df:6e:ab:1c:fb:53:61:ee:b2:fb:b6:e0:b2:14:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Apr 26 11:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7003b2460de2e234927b5464717a526f94b5669c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:06:e9:ea:f9:92:f3:70:98:10:9e:f4:7c:54:
aa:fd:c0:56:90:eb:22:00:07:7d:08:ae:3c:03:32:
d7:02:f6:ad:95:78:18:96:87:24:bf:89:82:2e:55:
7d:a5:1c:3a:43:6c:66:8a:49:37:98:50:55:a0:eb:
ab:09:f2:6b:6b:53:06:d0:a0:53:e1:98:24:2f:23:
7a:a9:44:0a:da:3c:b2:06:73:17:36:e8:7e:b3:2f:
36:de:3c:6d:32:40:d8:8c:8a:03:8b:d6:6c:91:6a:
0c:fa:b8:be:95:1b:72:6f:a6:e3:4c:10:7c:be:f5:
0c:16:db:24:7c:63:3e:44:0b:fa:39:60:82:a2:a3:
fa:ba:e5:f0:66:7f:85:91:05:ff:06:91:ba:67:09:
25:7d:0a:9e:bf:94:36:92:66:9c:e6:68:f5:12:90:
96:d1:4e:3a:cb:73:2e:39:37:03:24:26:40:10:58:
e0:57:e8:d6:e4:17:0b:81:50:a3:5b:c7:ea:4b:50:
1f:4f:b1:1f:4e:15:5c:62:de:e1:53:84:3c:0d:82:
f0:e8:c5:c7:e8:4d:34:d6:2f:b0:f6:fd:0e:e5:b9:
3e:6c:ef:04:5c:cf:79:8f:9b:18:94:7d:1d:83:ee:
b0:39:bd:9f:6e:21:93:9e:88:98:6c:44:ab:5b:8a:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:03:B2:46:0D:E2:E2:34:92:7B:54:64:71:7A:52:6F:94:B5:66:9C
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/cAOyRg3i4jSSe1RkcXpSb5S1Zpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.247.191.0/24
185.73.131.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b4:a5:1a:b2:71:70:ca:fc:fc:03:ef:4e:8c:81:15:1c:63:
03:9a:6f:d6:6b:2f:16:d5:01:e5:44:43:7d:97:36:ca:1e:00:
ff:5a:56:58:a3:87:c5:79:08:29:a7:62:c3:ba:1e:f7:72:86:
8d:95:ea:68:03:34:0f:48:9c:8f:28:6a:a0:b2:ba:1e:ed:56:
93:2b:ad:95:26:7b:f1:74:81:b3:7e:e4:ac:8a:f7:f3:b1:07:
e3:98:4f:23:8c:0f:3b:93:71:79:c7:f0:ef:2b:db:7a:fb:55:
cc:41:bb:e1:72:de:79:43:db:8f:e4:85:d3:72:a6:05:c5:9f:
24:c3:b1:a2:c2:7e:0b:1b:ee:9b:5c:7a:35:1e:db:2a:0f:46:
32:1b:7c:1b:8a:4c:27:6a:05:9d:03:07:cf:a3:7b:28:52:8b:
14:72:c9:93:77:5e:27:fc:d8:c2:76:92:13:f5:9d:57:1a:66:
c6:bb:5f:8f:64:14:b2:dc:4a:66:5b:da:3e:23:a1:98:63:3c:
54:46:21:c1:80:e9:68:56:2d:42:4d:dd:da:7a:ad:25:44:ee:
1b:d0:01:bc:6c:cc:fa:25:90:27:cd:03:2f:fa:ed:07:10:b9:
f7:48:bc:1b:80:f6:74:42:07:5b:d5:83:c1:31:4e:bb:be:45:
d3:77:5d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:35:13 2025 by rpki-client