Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/QmVb0SoXYnlMedY0w_3_iXHpV1g.roa
File: QmVb0SoXYnlMedY0w_3_iXHpV1g.roa (raw, json)
Hash identifier: a3gXOD/NjdWHnE6P9SQzEQhqDOtbuugfMMDorP0aI2g=
Subject key identifier: 42:65:5B:D1:2A:17:62:79:4C:79:D6:34:C3:FD:FF:89:71:E9:57:58
Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947
Certificate serial: 019638A1BC95A96CCE361F39711DFE6F6270
Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/QmVb0SoXYnlMedY0w_3_iXHpV1g.roa
Signing time: Tue 15 Apr 2025 08:47:25 +0000
ROA not before: Tue 15 Apr 2025 08:47:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31673
IP address blocks: 193.36.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:a1:bc:95:a9:6c:ce:36:1f:39:71:1d:fe:6f:62:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947
Validity
Not Before: Apr 15 08:47:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42655bd12a1762794c79d634c3fdff8971e95758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:d3:d9:7a:3a:ca:b5:8e:25:f8:21:5d:71:
d2:17:61:0a:27:8a:d0:65:a8:d4:48:21:cb:27:52:
ce:fb:c7:65:34:c5:ca:a7:23:2c:b6:48:cb:ab:1c:
97:fd:3d:a5:8f:d2:8d:0d:59:9b:a2:a0:24:b8:39:
f9:67:2d:c2:cd:f4:48:81:6b:b5:0c:bb:e7:d7:90:
b4:55:d5:aa:27:87:27:c9:e2:d3:c7:ae:4a:c8:7c:
07:79:3e:a3:cf:08:0b:f3:b7:20:93:0b:64:e9:d2:
f2:6f:a0:a4:50:bf:a9:41:3f:f3:d8:15:57:ee:1d:
ec:42:7b:64:3d:3b:b8:5f:ae:d2:fc:90:78:a9:c0:
d5:e6:5d:8a:6b:9f:0e:62:16:05:25:48:a5:6f:3b:
7d:f9:b6:74:66:54:e9:01:28:f0:fa:59:a0:70:f2:
d5:1d:1a:9e:54:34:3a:7c:35:61:fb:90:eb:39:9c:
c3:56:55:3e:fd:cd:17:3a:8b:b5:11:de:68:f6:e1:
05:c4:ff:eb:f6:c4:de:94:d4:59:08:4e:32:de:b9:
60:f5:a4:2c:5d:a7:f6:26:74:ae:7a:64:b6:13:15:
48:96:bc:0a:5f:e3:e0:61:87:70:e0:f6:47:83:e1:
8b:3b:75:35:ed:e0:1b:51:e1:c7:a3:99:e8:a2:d0:
6d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:65:5B:D1:2A:17:62:79:4C:79:D6:34:C3:FD:FF:89:71:E9:57:58
X509v3 Authority Key Identifier:
keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/QmVb0SoXYnlMedY0w_3_iXHpV1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.186.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e5:2b:04:18:29:1b:39:a8:ce:15:eb:34:56:0b:99:89:43:
19:c3:7c:14:08:5c:82:df:a8:61:e3:8a:19:be:ae:e4:a7:0b:
e6:4f:ab:35:a5:61:b8:d5:84:3d:15:1a:28:6d:4f:49:60:c8:
c0:87:94:8e:75:89:bf:96:13:fe:6f:1c:30:77:d7:d7:c1:08:
26:40:d3:35:a6:b5:77:07:5e:17:ae:20:4e:d6:82:62:17:5f:
7b:d4:70:24:1e:b7:67:af:57:d0:ff:d1:69:af:e7:d8:1a:7a:
e7:73:63:1f:08:51:8e:c5:f2:4c:26:82:a2:e3:f2:a0:b1:79:
dd:5a:03:4d:14:0c:9d:23:32:37:ec:96:9c:dd:ca:3d:cd:e3:
67:4e:f6:95:7c:51:9b:62:ef:97:11:b1:5e:d5:de:0b:8d:9c:
bf:a2:04:e2:f0:b1:02:71:fc:f6:84:c2:a2:eb:eb:5f:49:8a:
18:5a:5c:e5:e3:7b:f3:b9:26:f0:1e:91:36:a4:c3:54:eb:8a:
d7:b4:e3:9b:b5:50:77:2c:db:f4:59:c0:b9:e4:72:94:90:bd:
26:6c:36:3b:c0:1b:06:5c:63:3a:66:2b:58:6b:78:95:7a:d6:
10:4e:86:52:4f:d9:f6:9b:f5:81:36:ca:6f:2e:c9:64:c6:50:
a2:a7:10:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:07:59 2025 by rpki-client