Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/rQBafyOV_GMUpeH8CJAXqGt37D4.roa
File: rQBafyOV_GMUpeH8CJAXqGt37D4.roa (raw, json)
Hash identifier: mme56aqaI+VwFjLkWHLeeNyvz92hx7BIY2OU2aRNReA=
Subject key identifier: AD:00:5A:7F:23:95:FC:63:14:A5:E1:FC:08:90:17:A8:6B:77:EC:3E
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 01941FFA1E5217DDF350138D96851EDB485E
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/rQBafyOV_GMUpeH8CJAXqGt37D4.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212403
IP address blocks: 149.226.252.0/24 maxlen: 24
2a03:cc00:fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1e:52:17:dd:f3:50:13:8d:96:85:1e:db:48:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad005a7f2395fc6314a5e1fc089017a86b77ec3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:76:82:fd:66:5e:42:a2:18:6b:9c:1f:58:
c8:f5:db:88:99:92:da:d1:a3:19:7e:2e:a9:37:19:
06:21:e9:f8:7c:30:4b:ca:60:95:39:66:82:1b:5c:
3c:4f:98:72:45:d3:ed:79:4d:fe:56:7d:89:3f:6d:
0e:b4:32:01:80:fb:c3:8f:4a:78:43:13:94:05:3d:
55:0e:fa:b4:f1:10:a0:b0:ce:7e:75:31:f9:98:bf:
16:2f:23:e6:16:46:99:5c:71:a0:86:53:b8:a4:24:
19:5b:b6:dc:2f:c7:f2:2f:2b:1e:62:2f:b6:ce:55:
55:23:92:3f:1d:34:92:d9:e9:73:1d:79:9f:26:0c:
9b:d9:b9:29:79:69:d1:92:a1:a7:37:52:f2:f9:02:
e7:4c:34:56:63:50:c4:2e:55:f9:fb:6f:56:e9:d0:
66:3d:d8:c2:11:e8:36:34:43:36:83:22:54:03:04:
9e:18:ec:8e:02:15:51:0c:de:ac:fa:9a:ba:4a:73:
f9:71:f6:10:51:5b:d4:95:75:04:bd:59:a6:8c:4d:
e6:21:d8:e9:ec:54:13:d9:8e:c1:a5:58:ca:51:20:
70:f2:e7:a3:9a:5d:0d:e1:af:16:6a:c2:fa:a0:04:
33:62:4b:d1:20:d9:78:d2:b6:b5:0d:dc:99:d6:da:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:00:5A:7F:23:95:FC:63:14:A5:E1:FC:08:90:17:A8:6B:77:EC:3E
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/rQBafyOV_GMUpeH8CJAXqGt37D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.226.252.0/24
IPv6:
2a03:cc00:fc0::/48
Signature Algorithm: sha256WithRSAEncryption
a4:d7:43:ce:ff:23:c2:d1:4f:fb:4c:ea:93:44:79:ca:d0:2a:
34:a3:67:14:8c:95:69:5a:8f:b2:24:3f:10:0d:aa:db:3a:e9:
6c:6c:10:6c:52:51:5f:aa:9f:86:3f:a8:a5:68:0e:ad:c4:fd:
98:ad:67:48:d5:a8:d8:0a:ca:9e:db:33:5c:4b:a3:30:72:6f:
2a:de:6d:b0:6c:12:09:3d:a1:d1:5b:1d:b1:c2:5a:d4:0d:88:
d4:32:0d:95:fc:f7:ee:32:45:68:d4:64:bb:9d:70:be:aa:5a:
d6:0b:10:d4:25:73:12:2c:33:96:e7:39:43:b7:22:30:10:47:
f9:5a:f3:44:66:98:99:20:15:78:89:ae:70:89:dc:43:e6:d3:
0a:f3:06:d8:94:d8:d1:d7:75:81:af:ba:cf:a0:ed:c7:f3:70:
44:17:96:30:2e:77:af:71:db:44:b6:a1:b3:7a:e0:38:9e:e9:
c6:ca:c3:9f:8f:ba:db:9c:7d:43:62:5d:49:56:12:9e:04:ac:
4c:f4:39:04:60:17:10:3b:0e:31:26:0c:cf:b4:b2:6d:6a:13:
60:f6:4c:93:e4:39:fc:22:0e:31:e6:53:9b:71:a7:05:ae:7b:
0b:67:88:e4:df:c1:1f:e0:c3:3f:a6:65:e2:a2:96:40:b6:8e:
e4:26:c3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:06:09 2025 by rpki-client