Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/dQxql56lhNCcsiK9oqDeI2i1LPI.roa
File: dQxql56lhNCcsiK9oqDeI2i1LPI.roa (raw, json)
Hash identifier: CxD6bxaQqZ0RT6lpsgrhcGouck3CGYAGHcM3mIM2Zq4=
Subject key identifier: 75:0C:6A:97:9E:A5:84:D0:9C:B2:22:BD:A2:A0:DE:23:68:B5:2C:F2
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 01941FFA1CDF84F335EB0DFE4B0C0046F546
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/dQxql56lhNCcsiK9oqDeI2i1LPI.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52756
IP address blocks: 149.226.240.0/24 maxlen: 24
149.226.241.0/24 maxlen: 24
149.226.242.0/24 maxlen: 24
149.226.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1c:df:84:f3:35:eb:0d:fe:4b:0c:00:46:f5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=750c6a979ea584d09cb222bda2a0de2368b52cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:29:a6:bf:25:ef:08:6e:4c:a8:80:59:89:
24:02:41:88:1c:2d:08:da:14:50:0f:2f:c2:69:7a:
93:05:ec:57:9b:99:d5:74:98:fa:2f:59:8d:b0:a7:
50:10:d5:63:e6:fa:67:5c:9a:33:cb:35:b1:a1:52:
92:23:98:45:6c:20:44:a7:fe:d3:a9:28:7d:18:7c:
13:75:14:f4:fe:ac:b3:2a:01:37:0c:03:ff:4c:65:
a5:60:43:8b:38:c9:a0:a0:02:ea:61:b8:bf:0f:54:
15:cd:1a:a6:7c:3e:41:a8:f6:37:76:91:5f:7d:67:
c5:90:16:6f:3f:48:67:b1:9f:4b:81:66:47:52:31:
0c:91:88:bc:3f:55:98:c3:59:cf:97:b1:fa:9c:b4:
af:00:01:b1:92:3a:17:72:98:17:fd:eb:1b:43:c6:
50:15:57:e7:00:fc:05:45:a7:51:2a:d6:a0:7f:7d:
2b:e3:3b:5c:18:18:7d:e3:cf:e9:3a:ff:86:81:eb:
35:78:ec:77:00:b3:d2:e1:7b:40:2c:3c:91:bd:d3:
e9:28:98:ee:7a:13:bb:24:fe:e3:36:6a:98:40:f8:
32:a9:78:69:d4:cf:96:1f:b0:c0:18:d1:64:b3:d4:
87:98:5f:76:ce:df:12:87:23:0b:e7:fb:2a:3a:8a:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0C:6A:97:9E:A5:84:D0:9C:B2:22:BD:A2:A0:DE:23:68:B5:2C:F2
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/dQxql56lhNCcsiK9oqDeI2i1LPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.226.240.0/22
Signature Algorithm: sha256WithRSAEncryption
05:44:af:0c:84:83:9c:fe:98:e9:e9:b1:a0:87:22:ab:e3:1c:
7f:4e:e2:8e:15:f6:14:25:67:01:0d:59:72:b9:d5:9a:c7:b7:
01:c2:19:87:5b:31:82:c3:3f:43:57:a4:04:42:5c:2f:bd:1e:
26:78:8b:70:81:c2:70:d7:0c:b2:61:b0:f7:d1:e1:40:ce:72:
24:4e:13:48:f0:5f:c6:8f:51:03:b7:78:a2:74:a3:7e:96:ee:
a6:44:4f:6b:58:93:2c:be:fa:31:68:23:cd:11:ec:6b:af:10:
d4:59:a3:89:be:1c:06:ce:e9:a8:19:d1:a5:3a:d1:38:b4:bc:
51:cb:3e:f4:ec:dd:cc:1b:4e:c5:6a:43:bf:91:9b:2b:0a:e8:
0e:4e:91:fd:c9:48:2f:44:19:25:14:e4:b9:b8:bd:7e:b8:fa:
2b:f2:55:22:34:25:9c:1b:1a:bc:3a:61:8e:dc:c2:24:e6:4b:
04:1c:21:ae:e7:95:0c:4f:98:f8:b1:47:35:39:d3:f8:81:36:
93:63:41:d3:8e:92:ca:26:a1:10:c9:07:dd:05:ea:f8:7c:9a:
61:47:5d:ac:e1:df:8e:dc:c0:2c:05:88:e4:74:dd:27:60:12:
f3:4c:fd:9c:1b:88:a6:76:b3:6c:2f:48:24:73:f5:5d:72:41:
2a:72:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:13:53 2025 by rpki-client