Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/gqWeYouP3tCgtjbkj-l_gQg8hIo.roa
File: gqWeYouP3tCgtjbkj-l_gQg8hIo.roa (raw, json)
Hash identifier: /JDKYsMSdFrnBptTFdWQqSfzinHaa7LMqQq1Q4agYW8=
Subject key identifier: 82:A5:9E:62:8B:8F:DE:D0:A0:B6:36:E4:8F:E9:7F:81:08:3C:84:8A
Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial: 01942444BF88688D17E2D64FE6BC9D8BC068
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/gqWeYouP3tCgtjbkj-l_gQg8hIo.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35916
IP address blocks: 188.208.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:bf:88:68:8d:17:e2:d6:4f:e6:bc:9d:8b:c0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82a59e628b8fded0a0b636e48fe97f81083c848a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:03:8a:29:06:c4:38:b4:99:ae:4a:8c:62:
c1:86:ce:95:11:ba:5f:81:71:d8:65:6f:4f:d4:48:
3b:c1:14:ef:68:88:3c:66:66:43:67:d3:f3:1a:fc:
bf:74:d2:6b:b3:c1:cb:7d:3f:cd:b0:9d:ca:28:72:
4d:56:7c:25:dd:8c:bb:44:d3:39:e6:30:e9:e4:a1:
4a:f2:a5:f0:6a:2d:bb:df:26:83:a4:1b:ca:6f:57:
57:47:44:26:75:db:f7:20:45:a9:8d:ee:4c:6b:8f:
12:a9:ef:2d:7b:dd:48:e2:0b:bd:56:3b:6d:92:8f:
bc:df:1a:43:c7:21:e4:d5:3d:37:c9:ea:ae:14:16:
88:95:e7:b8:92:9c:e6:46:8e:74:ee:b7:82:5d:29:
56:bb:0f:75:85:eb:46:7a:19:62:d6:f3:6f:19:68:
ca:1a:3d:43:8e:e7:34:82:70:0c:71:ac:1b:5a:99:
fb:54:78:bd:00:2a:bd:d2:57:d2:44:db:24:84:7e:
60:f0:82:37:9f:5c:ec:7d:52:c0:e5:05:c0:4f:32:
b0:2f:b4:ba:f6:a7:91:bf:31:24:09:06:36:f0:b3:
63:18:51:71:70:07:11:49:67:7d:66:88:f3:3a:f5:
80:d6:0b:c2:23:c6:90:a0:34:88:6f:31:c3:4d:33:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A5:9E:62:8B:8F:DE:D0:A0:B6:36:E4:8F:E9:7F:81:08:3C:84:8A
X509v3 Authority Key Identifier:
keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/gqWeYouP3tCgtjbkj-l_gQg8hIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.142.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e9:59:68:6c:12:d3:f2:35:03:d0:51:1b:e2:6d:1c:a9:9d:
5b:1a:20:ee:1f:12:7e:62:cc:86:72:ff:5f:bc:70:70:df:2c:
52:2e:dd:81:13:8a:94:62:63:a0:3b:71:42:c3:85:29:80:7d:
e3:31:4f:23:1a:a8:03:00:85:fa:35:f4:03:c2:30:7f:39:e4:
e7:2f:23:43:d2:2d:f3:50:0d:6a:f4:59:24:60:ab:d6:0e:c7:
17:d5:c5:04:9e:4e:f4:75:3e:5a:ac:2b:90:e8:c8:32:49:78:
f4:f8:f9:70:db:6a:cb:12:3c:3a:f7:fb:36:27:46:cb:0f:08:
c2:0b:51:8b:25:81:34:07:52:b7:cc:ab:d3:a4:4a:1a:11:77:
11:1d:20:9f:65:34:9d:0c:d4:0d:ea:1d:79:ca:dc:05:78:3b:
f1:51:ae:b2:cd:f7:71:8c:b1:28:0d:e9:e7:c6:f9:9b:5a:41:
19:8e:a5:46:e9:e3:6a:0e:0a:64:4f:99:60:8a:3b:f3:50:c4:
ff:d9:41:e8:41:b4:5e:90:d1:8b:9e:35:e5:14:df:c7:eb:81:
6e:f6:ea:53:79:ac:8a:24:2f:22:95:50:8f:2d:39:1d:38:1c:
b0:b3:80:0f:a4:08:f7:77:20:75:bc:e2:df:49:82:27:e4:a2:
b9:b7:72:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:04:50 2025 by rpki-client