Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BC_QkjvxkRjXiNwvcVV2RzdOWGI.roa
File: BC_QkjvxkRjXiNwvcVV2RzdOWGI.roa (raw, json)
Hash identifier: NE5W3PPuMty8trMhah9QJG0dTWB7x7ZEKBIK/Dwe0tU=
Subject key identifier: 04:2F:D0:92:3B:F1:91:18:D7:88:DC:2F:71:55:76:47:37:4E:58:62
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196366E74B4AFDB31C5DE06200A108F3FAC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BC_QkjvxkRjXiNwvcVV2RzdOWGI.roa
Signing time: Mon 14 Apr 2025 22:32:10 +0000
ROA not before: Mon 14 Apr 2025 22:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 5.231.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:6e:74:b4:af:db:31:c5:de:06:20:0a:10:8f:3f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 14 22:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=042fd0923bf19118d788dc2f71557647374e5862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:21:b9:f0:66:55:26:82:ed:9b:5e:63:cc:9b:
cd:19:7c:f7:83:ee:2f:e5:40:aa:aa:82:8e:84:4d:
5b:27:84:eb:84:90:e5:ed:67:96:31:7c:e6:e0:aa:
62:a9:f4:6d:21:83:9a:f7:39:92:4e:4f:4e:9b:fa:
18:6c:97:79:72:37:cf:0e:59:7c:9f:f3:71:18:f2:
bb:89:c0:76:b3:7f:02:5e:9d:44:f0:53:24:9d:25:
a0:fe:48:3c:6b:00:5f:95:36:10:97:aa:4a:1b:51:
bb:96:b2:aa:c6:b8:34:b3:fd:60:66:ab:f4:eb:3c:
78:47:c2:1c:4b:fb:ce:77:ca:a4:4f:cb:d8:a1:56:
92:86:39:c1:32:3c:e3:bb:e0:e3:78:96:2d:1c:29:
35:ca:9b:c0:d4:54:3e:5b:9f:1b:83:d5:83:1a:29:
99:11:ac:5a:a4:a5:07:17:ad:be:9f:23:0b:1f:75:
ef:e7:8c:55:04:33:c5:77:fc:f9:98:e9:83:2d:57:
00:ce:af:bc:68:26:c7:c7:68:03:3c:f9:e8:dc:ef:
95:c3:b5:c8:ca:2b:1b:2f:48:99:2c:5b:45:12:71:
2d:99:22:c5:12:96:97:31:5a:99:f3:f8:09:d7:d0:
27:7c:70:30:f7:1d:0a:fb:e6:6b:c3:50:ee:55:2e:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2F:D0:92:3B:F1:91:18:D7:88:DC:2F:71:55:76:47:37:4E:58:62
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BC_QkjvxkRjXiNwvcVV2RzdOWGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.227.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a2:8a:8f:e3:85:8e:19:19:19:fc:3d:01:e8:cb:80:c9:03:
b1:8d:ba:8b:c8:2a:1d:e0:1b:df:60:e8:f4:df:19:d7:87:f8:
e6:6b:ff:c5:20:30:08:4e:92:5c:e7:8f:b3:9b:6d:df:fd:6b:
47:de:f8:2e:c8:37:51:b5:de:7a:01:52:c9:3b:d9:a3:7b:1d:
1a:37:e4:a6:4f:cb:73:ca:0c:17:31:d1:a7:5b:af:95:40:2a:
63:5f:40:68:20:93:b1:3f:7a:78:e1:66:b3:f7:db:58:f6:13:
e0:89:ea:83:99:41:f1:48:1b:7f:49:fb:86:47:45:9d:c0:54:
82:40:da:ba:53:6e:61:a0:a8:1f:50:40:46:77:38:27:bf:e1:
04:c7:22:50:35:61:c5:6e:d3:7a:21:c9:49:cd:cc:9e:d3:04:
52:70:9d:77:8f:72:87:0e:c1:af:95:99:f9:f4:16:79:1c:fb:
dd:1f:e8:85:e4:a7:31:93:5d:9a:40:2d:ba:6a:f1:3e:3e:04:
0e:44:98:48:cc:48:9a:d3:b2:08:09:e4:ee:45:3b:7a:28:6d:
51:bb:59:85:d9:5d:87:96:ae:8d:11:b4:f4:33:2a:b0:75:52:
29:6b:1f:33:d9:74:4c:94:06:a5:74:df:ac:59:ed:f4:05:49:
38:e3:bd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:17:06 2025 by rpki-client