Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/qPCt9PHHA0GarUl-Yh1zGcgSUmI.roa
File: qPCt9PHHA0GarUl-Yh1zGcgSUmI.roa (raw, json)
Hash identifier: lEoaWY7+8lB8BQWRyHVB/to+pSqQXA3i+f8TwfiT22c=
Subject key identifier: A8:F0:AD:F4:F1:C7:03:41:9A:AD:49:7E:62:1D:73:19:C8:12:52:62
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D616F652F653461E9BC32A27AE8A22
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/qPCt9PHHA0GarUl-Yh1zGcgSUmI.roa
Signing time: Wed 01 Jan 2025 07:48:09 +0000
ROA not before: Wed 01 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42614
IP address blocks: 89.43.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:16:f6:52:f6:53:46:1e:9b:c3:2a:27:ae:8a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8f0adf4f1c703419aad497e621d7319c8125262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:4f:26:67:64:1c:15:cc:ec:05:2c:94:8e:
84:ee:1e:7c:ce:fc:5f:c7:f9:1b:88:82:b6:5b:00:
af:15:a8:ef:15:57:99:bc:dc:1c:e7:11:45:33:2f:
f3:3f:db:e1:ae:7f:34:42:de:f3:b4:bd:ab:f1:f7:
bb:61:09:8c:59:a5:88:e8:b8:15:46:72:51:94:a6:
45:5e:74:54:43:53:e8:0c:c3:36:90:48:22:8d:66:
9d:81:12:aa:1d:d8:d0:d4:d1:83:5b:10:e5:74:73:
c7:cc:e8:c8:6d:b0:dd:89:1a:09:9a:7c:cd:74:05:
13:f7:1e:59:d1:08:81:ae:8f:15:c4:9c:f6:5c:4d:
48:ba:46:0b:6a:7b:c4:25:28:4b:06:9c:87:5d:57:
c2:e8:bb:3c:48:b9:0e:cf:ab:d7:7b:51:4b:ec:54:
81:16:d9:a5:ac:28:64:7a:44:95:86:fa:06:3f:31:
d1:25:f7:1f:66:7f:a9:00:c4:8c:dc:b2:08:e2:6a:
17:ec:bc:1b:98:b7:6c:70:e8:94:d9:9e:05:e6:48:
33:4d:eb:9d:4a:ef:a4:f9:d2:7c:c6:9b:df:97:cd:
35:bd:6d:65:2c:89:4e:04:da:1e:52:30:4b:18:74:
96:3f:d8:24:da:a9:84:82:78:0b:6f:a2:6a:01:18:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F0:AD:F4:F1:C7:03:41:9A:AD:49:7E:62:1D:73:19:C8:12:52:62
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/qPCt9PHHA0GarUl-Yh1zGcgSUmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.200.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:35:41:63:d4:78:e4:92:04:b3:2f:44:0a:61:40:48:11:53:
6d:8a:49:4c:b0:10:b2:a8:1c:64:e4:50:7f:77:2a:0c:fb:78:
b8:27:f8:56:4f:2a:a2:3b:ca:7a:e8:0c:64:ac:35:7c:9e:f1:
48:47:bc:36:73:d4:91:d2:6c:52:07:5d:f6:35:37:e2:df:a3:
e4:2b:d8:fb:68:69:3d:cc:a7:84:1a:aa:ea:d1:6c:d2:38:2c:
64:cb:9a:8c:50:0b:7a:60:3e:8a:c2:d1:64:e7:a7:7c:30:81:
4c:3e:e4:69:2c:9c:e9:67:23:05:4b:03:82:37:ff:3c:b5:0c:
5a:c6:fc:56:4d:7e:58:57:a9:f7:ba:73:cb:64:8f:5b:b7:24:
6a:9e:9b:33:33:72:6f:a7:9d:7f:fe:5c:ae:44:54:06:08:fd:
23:af:74:3b:1e:54:25:63:1d:f8:e6:47:35:0d:62:29:a8:af:
ef:73:a6:97:f7:99:5a:7f:c1:3f:c3:f5:0a:63:e6:3f:f9:ed:
c8:ae:2a:4b:3e:f8:56:21:84:08:0a:2d:32:50:5f:e2:b2:9a:
6b:31:1c:6b:1a:d2:69:25:73:8c:51:ea:73:dc:1f:3c:df:7a:
65:70:75:18:14:57:9b:59:4f:b4:32:8c:e9:fb:25:77:34:30:
4f:06:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:06:24 2025 by rpki-client