Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Qu4ONRj9Tnvy_jUVCaYk-FPrpBY.roa
File: Qu4ONRj9Tnvy_jUVCaYk-FPrpBY.roa (raw, json)
Hash identifier: uN7owuwNEzSt/aZwd8y6vL95cBARm3xUUdKefTm2BpI=
Subject key identifier: 42:EE:0E:35:18:FD:4E:7B:F2:FE:35:15:09:A6:24:F8:53:EB:A4:16
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 019420686BE1B602DE4C4E7BE4427A84D521
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Qu4ONRj9Tnvy_jUVCaYk-FPrpBY.roa
Signing time: Wed 01 Jan 2025 05:48:21 +0000
ROA not before: Wed 01 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209341
IP address blocks: 192.250.229.0/24 maxlen: 24
192.250.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6b:e1:b6:02:de:4c:4e:7b:e4:42:7a:84:d5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42ee0e3518fd4e7bf2fe351509a624f853eba416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:42:bb:fa:e1:36:d4:e4:a2:45:87:07:0f:
52:ad:ed:5a:64:59:71:3c:96:7a:eb:c4:b4:c1:7c:
6d:ab:c3:68:c9:b7:bd:f3:e5:9c:ba:ad:83:a8:a1:
64:96:43:57:c0:8f:8f:a6:2e:14:35:a1:c1:08:8b:
46:6e:be:1d:6b:e6:51:83:7c:00:d8:69:f8:df:19:
c5:64:31:af:e3:bf:be:53:a4:43:7f:fe:e2:57:e3:
15:dd:ce:43:a7:c8:dd:58:cb:ab:26:df:34:30:69:
2c:23:2d:61:b7:2e:39:6b:5f:30:ee:f9:f4:4f:c5:
b8:25:81:cc:30:df:61:c3:27:ca:31:7e:c9:96:b9:
1a:07:b8:bb:73:47:b3:0a:ec:65:bd:25:cf:97:c9:
7c:70:cf:69:ae:37:f7:26:cc:71:01:1f:51:e6:8e:
fc:73:ac:78:6f:e3:91:45:90:2b:2d:dd:6e:57:7b:
a7:cd:d7:62:51:fd:1f:09:1e:c8:0e:a2:a5:13:5e:
23:de:c1:99:5c:6f:07:2e:ec:b0:d9:e9:58:53:36:
64:02:25:48:e9:19:66:f1:bc:5c:ca:1c:4f:81:72:
45:9c:9a:6f:2f:60:fe:4b:2d:3b:b8:1b:3a:77:5d:
b0:7e:18:0e:a7:a0:6f:21:41:98:fb:77:11:49:1c:
58:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EE:0E:35:18:FD:4E:7B:F2:FE:35:15:09:A6:24:F8:53:EB:A4:16
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Qu4ONRj9Tnvy_jUVCaYk-FPrpBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.250.229.0-192.250.230.255
Signature Algorithm: sha256WithRSAEncryption
4a:7d:5b:d7:ad:3c:2e:16:4b:8a:68:9f:2a:e2:6d:e1:2e:b0:
22:37:bf:f1:c3:48:ab:60:83:56:1d:b9:22:1d:ff:2a:4c:e8:
af:5d:2f:ed:b7:d4:00:5b:a2:5b:d4:00:83:dc:f5:35:6c:c4:
35:05:84:7c:da:35:9e:b6:20:d4:a7:56:cc:65:71:01:65:41:
48:c2:91:bd:6e:cb:18:cc:84:c7:7b:b7:06:0e:62:35:01:41:
f0:52:1e:98:06:f6:7b:ad:2a:55:6c:f2:6b:6f:0f:fe:25:f2:
06:7b:a8:45:ea:20:36:df:cd:03:28:50:0f:5f:10:27:2a:85:
73:20:41:fc:8a:2d:4a:0e:e8:ca:4e:f5:7c:8b:bb:43:73:b4:
9e:bb:1e:49:bc:39:cd:d4:41:f1:26:32:44:72:44:d2:a3:4b:
f3:73:bb:19:82:79:64:c4:2b:6a:b6:da:13:ec:92:33:3c:4c:
01:25:46:0f:07:e0:7b:c6:40:31:26:46:16:2f:0e:0b:b7:83:
74:4b:a0:3e:a8:9b:9f:e8:a2:d0:d8:c0:52:94:07:0e:2f:c3:
b7:20:63:7c:6c:66:a3:5b:39:8d:57:d0:a4:8a:2d:fd:82:bd:
8a:2a:27:dc:9e:ce:a9:50:0d:1f:7b:e6:dd:b8:cb:a5:1c:22:
6e:13:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:13 2025 by rpki-client