Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/P26tRDqYGCwh-7d-FJbBAUiu9-A.roa
File: P26tRDqYGCwh-7d-FJbBAUiu9-A.roa (raw, json)
Hash identifier: fWd7FaKR5SY0UsefC1+rxZMd28VdqLcV9fz9eNghnJo=
Subject key identifier: 3F:6E:AD:44:3A:98:18:2C:21:FB:B7:7E:14:96:C1:01:48:AE:F7:E0
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B673B81DD3B24C3ADA701C5D415CBB
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/P26tRDqYGCwh-7d-FJbBAUiu9-A.roa
Signing time: Thu 02 Jan 2025 15:50:56 +0000
ROA not before: Thu 02 Jan 2025 15:50:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2860
IP address blocks: 95.100.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:73:b8:1d:d3:b2:4c:3a:da:70:1c:5d:41:5c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f6ead443a98182c21fbb77e1496c10148aef7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:bb:49:51:e5:26:2c:1c:48:21:68:bc:c4:
a4:36:ca:58:83:38:f6:b2:d3:f2:b1:ee:28:21:93:
6d:8d:37:64:42:dc:9d:ed:44:44:f9:3f:2f:a6:3b:
b0:9d:b7:b9:d6:a7:d1:20:a6:ab:dd:bc:44:3f:23:
f0:6c:c4:0e:17:42:74:f8:4a:0c:49:f6:4f:67:2c:
9f:d1:75:8c:ab:d4:2e:d6:3c:76:44:49:04:24:36:
20:7f:55:51:f6:ef:d1:a0:b0:64:d3:e3:b8:15:0f:
4b:8a:62:c5:39:ff:9c:54:c2:e0:2b:a3:a4:1e:7c:
66:77:4c:8f:9f:4e:e7:89:2a:cd:14:d5:43:12:dc:
19:36:0b:2d:c2:57:23:31:8a:04:63:c2:cb:2b:cf:
25:d0:7f:af:9d:9b:1e:84:98:eb:87:43:6d:c9:02:
b9:55:9e:a5:71:d5:f2:78:9d:1e:47:f5:24:02:4f:
e6:f2:07:ff:e1:38:57:41:ba:c0:b5:fd:c5:4b:7b:
3b:5e:2e:0f:ae:91:f9:95:2c:b2:9e:dd:60:57:70:
12:40:0a:90:4e:e0:26:77:4b:2f:f7:28:da:80:88:
e9:14:ce:b8:9e:8f:ac:d8:f7:2c:ee:f6:00:fd:9a:
c5:1f:47:fb:22:2e:ee:47:af:00:a9:73:61:a4:18:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6E:AD:44:3A:98:18:2C:21:FB:B7:7E:14:96:C1:01:48:AE:F7:E0
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/P26tRDqYGCwh-7d-FJbBAUiu9-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.100.148.0/22
Signature Algorithm: sha256WithRSAEncryption
53:c9:e7:31:0b:b2:08:75:07:1e:64:e7:80:5f:6b:10:7d:4e:
4e:c4:f1:6c:3a:c2:40:a8:2a:17:76:81:58:35:95:5a:c9:8d:
9c:9e:fb:b7:da:ea:ee:a0:3a:cd:ff:44:12:7f:f3:d6:59:98:
db:35:72:4f:09:a0:f0:81:11:6c:2b:3f:71:92:2d:24:26:e7:
21:51:8d:c0:75:9b:9e:e9:ca:f2:60:c9:d5:8f:8d:08:80:08:
13:de:42:01:38:0f:66:13:4f:1e:10:2f:c1:3c:75:35:18:50:
1a:ef:49:4c:9d:60:96:7d:b8:c7:18:87:6e:dd:2a:df:80:bd:
f4:16:60:c4:ce:58:e4:4a:d2:85:ba:38:a4:12:a2:73:d7:49:
61:91:e7:84:c8:eb:b6:33:49:9d:31:f3:3d:da:36:21:ca:a3:
eb:d8:31:7e:8a:a6:69:ad:a3:ac:0e:ed:cc:96:78:56:0f:b4:
92:94:00:60:ae:32:45:36:66:0f:36:87:a9:b9:4b:ae:a6:1f:
e7:aa:0f:76:d2:6c:14:54:fb:8c:4f:06:df:0b:c4:6d:21:cf:
e2:4f:83:4f:99:3a:c4:bc:b5:a6:b8:c0:68:d0:26:51:a1:d3:
93:95:b3:e1:b6:e8:e3:4c:3c:cb:01:29:d5:44:ba:68:36:5d:
8c:1c:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:40 2025 by rpki-client