Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ql9sQfvjHiSR39UEkaXr0MrzSV8.roa
File: ql9sQfvjHiSR39UEkaXr0MrzSV8.roa (raw, json)
Hash identifier: 8ydPDvbndSc8kSg8ArX7sEjiLi9mJOtr9Gfcff4ctEI=
Subject key identifier: AA:5F:6C:41:FB:E3:1E:24:91:DF:D5:04:91:A5:EB:D0:CA:F3:49:5F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01966765DA7CDD84058A74511CD04EEBE444
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ql9sQfvjHiSR39UEkaXr0MrzSV8.roa
Signing time: Thu 24 Apr 2025 10:44:10 +0000
ROA not before: Thu 24 Apr 2025 10:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 45.88.137.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:65:da:7c:dd:84:05:8a:74:51:1c:d0:4e:eb:e4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 24 10:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa5f6c41fbe31e2491dfd50491a5ebd0caf3495f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0c:78:b0:e0:cf:84:a5:f6:1e:d1:a5:d9:3b:
17:1a:ad:34:47:5e:2f:5c:9c:e9:b0:54:79:f7:08:
9a:73:ec:27:a8:aa:85:23:21:95:a0:f3:b8:36:ce:
01:b3:2d:8c:03:04:69:c6:30:88:7e:5d:cb:5d:bb:
ce:77:57:7a:57:38:eb:8d:48:07:e7:22:cc:0c:1f:
14:85:64:ee:a7:fa:87:4e:a9:33:02:6a:3b:40:dc:
a6:de:62:c3:cc:f8:7d:dc:44:a0:f5:c5:b8:f8:e8:
c2:ea:f3:af:54:b0:4c:19:0a:95:a6:21:0d:67:e2:
d2:f0:b5:22:88:00:39:a7:d0:0d:f1:5d:bb:3e:ac:
8c:7c:f8:ea:86:20:2c:b1:f8:75:1e:da:4d:77:e1:
7e:e9:2a:69:72:a7:6a:9a:e0:bb:78:5d:81:8a:2d:
d5:26:a6:b2:01:ab:b8:b0:94:18:fc:45:6c:13:d8:
38:67:89:47:97:7b:d9:de:69:5f:a0:14:20:97:14:
8e:8f:05:a7:0e:2d:7c:33:ee:44:cd:a5:b2:11:dd:
0f:ff:70:4e:83:a6:4a:d2:8c:50:bc:71:d3:fb:a2:
98:77:02:b0:19:35:99:35:95:93:32:a1:eb:c7:0d:
6c:ac:bd:38:bb:9e:ee:dc:87:cf:e3:67:fb:eb:ab:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5F:6C:41:FB:E3:1E:24:91:DF:D5:04:91:A5:EB:D0:CA:F3:49:5F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ql9sQfvjHiSR39UEkaXr0MrzSV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.137.0/24
195.177.93.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:96:22:44:85:76:4f:89:99:1e:62:9d:08:d6:ff:81:a4:9b:
80:e6:44:6e:72:29:67:cd:11:c1:52:50:b1:28:f8:42:5e:bd:
2e:2c:44:be:55:ae:74:ee:c3:6b:4c:fa:8b:52:12:a3:0c:2c:
8a:87:33:24:8b:b2:18:09:7a:7e:f5:f0:f6:18:a7:f6:f2:02:
c6:35:81:af:db:d5:68:78:81:da:e1:dd:69:0b:e8:8a:2e:e7:
1b:57:ad:4a:0c:26:ce:fb:d9:76:d6:fb:d3:8e:3d:ac:a4:b1:
b9:45:81:bf:9d:b2:a4:85:15:d8:0e:0b:fd:54:de:58:b8:2d:
ce:0d:26:44:c9:90:c4:f4:5f:5d:bb:1c:6b:b9:6d:f6:1c:dc:
bb:e7:7a:bd:3a:d1:24:d0:13:86:2f:54:0a:91:ec:75:75:1e:
c6:0c:77:64:d5:31:66:bd:8c:76:bc:dd:d3:80:bc:a4:c9:46:
39:44:1e:6e:f7:b8:97:82:ff:f0:f7:34:1e:ce:b1:56:2c:29:
84:02:ed:13:a2:54:c1:b5:ac:5a:65:f9:00:d9:06:d4:5e:df:
e4:16:4a:ad:98:5d:9f:f4:6d:71:f4:e8:04:bb:ec:80:1e:05:
0c:41:3d:b1:2c:3c:c9:69:61:3e:28:c6:34:e0:87:ae:14:c8:
41:0c:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:20:33 2025 by rpki-client