Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/qPyyZrBMf0ucOLd_oXC2xlNfpHI.roa
File: qPyyZrBMf0ucOLd_oXC2xlNfpHI.roa (raw, json)
Hash identifier: maKG5skNiEELx6cnhHvPmlu2+gxjGrUB3RJ4ysfb/0Q=
Subject key identifier: A8:FC:B2:66:B0:4C:7F:4B:9C:38:B7:7F:A1:70:B6:C6:53:5F:A4:72
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 0194206862CE6C0C5352FCB58A42EF2BB0FC
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/qPyyZrBMf0ucOLd_oXC2xlNfpHI.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31800
IP address blocks: 91.236.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:62:ce:6c:0c:53:52:fc:b5:8a:42:ef:2b:b0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8fcb266b04c7f4b9c38b77fa170b6c6535fa472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:f9:f9:85:58:65:1b:2d:3a:d9:c5:fb:47:
36:73:10:2a:e0:d7:6d:eb:bd:76:8b:67:fc:5b:99:
a4:83:b0:ed:33:8b:3a:65:56:2c:53:68:e4:3d:e9:
92:09:02:ca:72:bd:99:b4:59:82:39:32:b8:39:28:
f8:da:18:94:f5:86:98:77:a1:1b:38:8a:74:ed:0f:
34:bd:73:28:c6:1e:41:41:c3:20:ce:af:be:c2:36:
bc:42:5e:82:9c:a4:6f:af:4c:59:6c:22:7f:82:d7:
33:3a:c9:11:6b:3e:01:c5:28:06:34:c4:25:00:e6:
1f:96:98:2c:88:86:36:42:de:c9:1d:f1:b4:92:9a:
c0:49:5f:f6:b9:0d:9d:4a:92:6b:81:2f:52:f0:13:
0f:af:fa:c4:1d:68:3c:dd:c9:7e:98:02:f8:ae:cf:
df:a8:77:6a:9c:f6:b3:51:23:2f:fb:6c:71:9c:20:
a5:6a:39:3c:3d:f1:36:c2:77:b5:8d:af:97:d0:a1:
39:f5:ab:f3:f4:9b:fd:47:78:57:0a:d6:3e:7b:42:
00:57:71:db:fd:71:53:13:df:14:da:ca:fc:d4:1d:
1d:c5:dd:7f:48:a7:05:3f:5d:43:14:a3:fd:74:3d:
25:9e:e9:33:b3:db:36:02:0a:25:db:84:0d:6c:9e:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FC:B2:66:B0:4C:7F:4B:9C:38:B7:7F:A1:70:B6:C6:53:5F:A4:72
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/qPyyZrBMf0ucOLd_oXC2xlNfpHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.182.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a5:6d:38:83:be:80:cd:a9:b1:54:2a:a7:4e:93:fe:3e:3f:
8f:3b:12:f1:6f:c8:a7:e5:83:d0:de:19:fb:1a:eb:66:c4:02:
1a:b2:e1:cb:21:ec:ef:53:e0:4d:94:ca:65:b0:7c:0f:21:3c:
1f:b1:4c:8c:05:c5:5d:7b:a1:de:b2:3b:81:2a:6c:b4:c3:fd:
a7:b5:85:c5:b6:f7:44:57:49:a0:2d:bc:58:ad:e2:fe:9f:11:
08:ad:db:13:c6:0e:dd:64:b2:66:c5:96:fc:e0:5a:d7:94:97:
5c:ad:e8:4f:38:0f:ee:99:5f:d7:ab:6f:50:89:a9:e3:fc:d5:
7a:16:cf:1a:46:b0:c9:1f:13:6c:8e:82:f7:e4:ac:37:23:ca:
ca:12:68:4f:75:cb:e6:bb:54:0e:8f:8b:97:48:fd:29:e8:5a:
16:ed:ed:be:70:20:f7:92:8e:3b:46:66:31:9b:49:40:0f:09:
1d:fe:9e:95:91:6d:51:ea:87:4f:91:f0:1e:ce:e3:00:ac:2d:
fa:b7:28:32:f8:22:7b:c8:c0:b0:49:18:41:57:c4:dc:b4:4e:
7c:b6:e7:be:63:7c:6f:3a:a0:c3:bf:0c:42:9d:67:38:de:cf:
4f:c4:51:af:9b:10:c7:db:37:a9:c2:5e:48:94:56:2f:24:d3:
0a:d8:cf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:10:26 2025 by rpki-client