Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/qY-nefcH-LOOVfCQihz5CCt5mqI.roa
File: qY-nefcH-LOOVfCQihz5CCt5mqI.roa (raw, json)
Hash identifier: Dn21UEBAZW+JYaxSGEnZx/UyFGhOmUarhMAoNzBQGQ0=
Subject key identifier: A9:8F:A7:79:F7:07:F8:B3:8E:55:F0:90:8A:1C:F9:08:2B:79:9A:A2
Certificate issuer: /CN=50399d4435bb85fae910abe38e68533204dfd60b
Certificate serial: 019422FC4B5C5941002FD9B48BC8DBEF265C
Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/qY-nefcH-LOOVfCQihz5CCt5mqI.roa
Signing time: Wed 01 Jan 2025 17:49:07 +0000
ROA not before: Wed 01 Jan 2025 17:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9443
IP address blocks: 185.167.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4b:5c:59:41:00:2f:d9:b4:8b:c8:db:ef:26:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a98fa779f707f8b38e55f0908a1cf9082b799aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:24:e4:37:54:6f:2d:a9:05:e8:4e:e0:20:
ef:34:1d:29:bc:12:21:39:b2:ea:8c:71:27:44:e1:
43:d8:d1:9d:cb:a3:75:32:30:2b:bb:72:84:65:a6:
40:ad:3b:bf:32:1f:5b:b5:15:d4:ba:fa:30:8c:ad:
77:55:87:15:3c:36:e8:ea:eb:07:b2:f1:5e:05:8c:
23:b3:07:12:b4:d5:c0:0b:24:e8:86:c7:c2:f5:c1:
71:ef:14:af:30:3a:68:5b:a9:b6:e5:c7:e9:f6:cb:
c0:b9:c7:35:7c:ee:d2:6d:68:e2:35:7f:c0:1c:d4:
67:4b:ec:bd:99:96:2a:65:46:90:98:e0:8b:81:2d:
c8:c1:70:da:71:e3:17:c7:24:3d:51:0c:d6:5d:08:
d3:cb:c6:ae:62:c8:7f:0f:86:a3:24:ff:0b:73:05:
4b:10:89:87:6d:99:76:c4:da:85:b1:39:30:83:00:
e9:02:06:86:f6:f6:d0:54:17:d9:35:a8:a4:2b:bd:
f9:e8:f0:86:47:a9:9a:78:3c:88:3b:d7:2c:2e:22:
6e:98:fa:55:13:77:51:b9:50:d7:11:48:fe:90:2b:
84:6e:b1:98:b8:ad:c0:3c:8e:42:e4:7d:9a:31:77:
7d:24:84:08:3f:14:91:2d:44:63:6f:f7:ed:c8:32:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8F:A7:79:F7:07:F8:B3:8E:55:F0:90:8A:1C:F9:08:2B:79:9A:A2
X509v3 Authority Key Identifier:
keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/qY-nefcH-LOOVfCQihz5CCt5mqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.191.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:bf:41:3b:2b:f0:35:22:1e:7d:8c:35:01:bb:11:a4:2d:ca:
81:12:86:a5:14:3e:47:be:04:d0:8c:3b:5d:d9:4c:48:7e:2d:
9e:e5:b9:2b:7f:fe:b6:c2:2b:c8:c4:8a:ed:07:16:da:81:ae:
2c:5a:54:4a:01:11:1f:ec:40:cd:b9:66:38:d1:d0:9d:87:b6:
7b:d9:c0:c3:71:fc:6b:4a:07:88:df:31:af:24:98:7e:3d:13:
ab:6b:be:26:fb:a3:ac:00:8c:9d:32:08:cf:71:21:5b:f6:9d:
74:b7:b6:2d:16:48:80:6d:5c:b9:49:25:a6:14:fe:d4:d4:99:
f3:96:e6:80:c3:d4:8c:e9:77:68:f3:b8:56:d0:09:a7:9d:20:
6a:18:cf:a6:f6:11:55:ba:3c:24:7a:0e:4b:60:84:88:2b:5d:
a4:55:65:60:b3:97:39:19:c0:7f:84:f5:fe:7c:de:05:0b:20:
8c:c1:cc:f2:c9:83:5a:18:ea:da:61:f2:cd:a9:37:75:ec:c2:
13:52:77:86:37:24:fe:3d:b5:2c:0f:79:35:a7:ee:11:56:98:
6f:63:b5:b5:4c:75:ed:4e:42:2e:77:83:68:30:7f:7d:ee:5a:
36:83:89:7b:a2:9f:c4:7f:00:bc:88:ee:04:33:f9:82:19:37:
fb:ee:33:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:19:29 2025 by rpki-client