Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/q74_W6xdG6goIDi1c08_8gJ6uTE.roa
File: q74_W6xdG6goIDi1c08_8gJ6uTE.roa (raw, json)
Hash identifier: pxdR0KPAM6OXX14ayHaIWzZB+fjREFkJhs6uGstYGhI=
Subject key identifier: AB:BE:3F:5B:AC:5D:1B:A8:28:20:38:B5:73:4F:3F:F2:02:7A:B9:31
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194221F7DDD04D1808A0E399D62CF1C7E71
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/q74_W6xdG6goIDi1c08_8gJ6uTE.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 84.247.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7d:dd:04:d1:80:8a:0e:39:9d:62:cf:1c:7e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abbe3f5bac5d1ba8282038b5734f3ff2027ab931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:eb:52:bb:2a:22:d8:0e:ea:23:02:73:c5:
f6:8d:9b:0e:6e:55:c1:73:01:e9:fe:62:a8:d3:1a:
d0:9b:9d:52:ce:83:3d:52:08:7e:56:42:bc:52:14:
1c:e6:d2:43:a3:7e:b7:7e:ef:62:44:bf:fa:ad:92:
ea:ee:6b:40:02:4d:09:26:38:e0:65:50:50:50:d7:
11:c7:0d:46:96:e1:f7:55:26:3d:9d:e4:c1:63:e8:
fa:9d:74:9e:f2:84:64:19:59:83:f8:f9:e7:35:98:
0b:cb:a9:24:6c:9f:92:cb:dd:f3:39:67:ec:bf:62:
ab:74:19:c1:b5:08:a4:7e:8a:46:2e:71:13:67:87:
e6:6f:75:50:d3:43:5c:98:12:91:2d:43:63:41:a0:
9b:15:80:32:dd:17:59:6e:ff:92:c8:2e:9a:36:2b:
5d:37:f7:c6:b2:cc:9b:fb:3d:2e:a0:d3:c0:b4:91:
26:55:63:dc:5b:fd:ef:a1:0a:d8:dd:e5:1d:5b:4b:
c1:2a:d0:51:f5:e4:49:76:3a:a6:6b:e8:b6:0f:72:
51:2b:d0:24:63:56:82:a3:82:c8:2d:cd:d9:ca:db:
86:9e:87:e6:82:14:a4:02:81:47:7e:c1:f0:45:64:
3d:72:70:ec:92:d6:f5:aa:ba:96:57:72:3a:0b:dc:
c8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BE:3F:5B:AC:5D:1B:A8:28:20:38:B5:73:4F:3F:F2:02:7A:B9:31
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/q74_W6xdG6goIDi1c08_8gJ6uTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e1:4f:fd:e0:0d:54:5c:11:d0:a1:9a:0d:c0:c2:30:ef:39:
98:e0:99:46:dd:b1:89:cc:10:1f:77:23:51:48:12:aa:5c:8c:
a5:84:85:5b:84:f5:75:48:48:28:3b:cf:f6:77:b7:7e:c5:1e:
60:10:c7:0e:01:22:ff:21:1c:76:1d:c3:6d:c6:58:3a:4d:0a:
3c:25:94:76:be:d0:8e:95:eb:24:06:1f:8b:18:a1:3c:71:4c:
9e:8c:4f:17:22:6b:2a:e5:6f:38:0a:ad:78:9b:5e:81:7e:2f:
59:f5:e0:a3:2f:e8:5a:29:26:71:7f:96:6d:e9:72:6d:7a:b2:
4e:25:c2:ed:85:ef:04:4e:87:fc:69:9b:2b:c2:5c:b0:25:05:
5e:d6:21:ef:02:b6:ba:33:3a:b1:98:55:e5:ae:6c:bb:f7:a1:
30:df:f9:2a:f3:d5:26:88:06:b4:cd:e6:a5:ff:1f:dc:fb:e1:
c4:bf:31:e9:a7:ae:09:82:9a:83:0c:5f:ab:ff:43:ad:33:e1:
34:52:73:ca:1b:63:21:1d:32:5c:74:ba:bc:7f:48:82:2c:7e:
f5:aa:39:ca:5c:ff:42:4d:af:0e:d5:1e:4b:63:a4:6e:f9:65:
20:0f:49:ff:99:eb:9a:c0:10:4c:23:2e:b1:bc:9c:bd:db:a1:
ba:10:e5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:12 2025 by rpki-client