Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p-QQ6kVegQvUlDouOmyX8mwkCxc.roa
File: p-QQ6kVegQvUlDouOmyX8mwkCxc.roa (raw, json)
Hash identifier: +n4y/QjW/s+hfkWXs+fVwDL5u1qtiVPo/4h1RCraWF4=
Subject key identifier: A7:E4:10:EA:45:5E:81:0B:D4:94:3A:2E:3A:6C:97:F2:6C:24:0B:17
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824EFA868194E8E0BD6E9C4DAB3976C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p-QQ6kVegQvUlDouOmyX8mwkCxc.roa
Signing time: Thu 02 Jan 2025 17:51:36 +0000
ROA not before: Thu 02 Jan 2025 17:51:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48614
IP address blocks: 194.87.112.0/23 maxlen: 23
195.133.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:ef:a8:68:19:4e:8e:0b:d6:e9:c4:da:b3:97:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7e410ea455e810bd4943a2e3a6c97f26c240b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:c1:19:62:b5:1c:28:9d:96:12:c9:c8:ac:
95:00:38:3a:80:0f:62:5a:d2:99:ae:ff:1f:4e:02:
c8:10:6b:48:05:1c:73:a6:70:02:56:dc:bf:9a:a5:
7c:d0:4d:6a:0b:e1:28:78:76:c8:43:11:0b:ad:22:
9a:34:1c:98:38:7e:fe:47:f1:7d:6a:e0:ed:a2:bc:
05:a6:d7:0e:02:fa:4e:6c:49:fa:6e:1b:c2:cf:32:
7c:05:47:b5:54:68:33:d6:97:b2:70:eb:62:3e:dc:
c1:ac:59:cd:44:67:52:62:6f:f8:f4:41:fe:e2:fa:
c3:6e:65:fe:bf:c2:cb:7d:f5:2f:06:66:83:0f:2a:
bb:86:2b:64:5c:a7:3a:94:3d:de:73:4c:ec:a0:90:
fd:8a:24:35:10:24:8b:a0:c0:fd:c7:9e:69:3e:14:
fb:8e:3b:f0:0d:e2:f9:64:de:be:90:53:33:12:88:
24:b3:da:11:85:12:6d:d5:f8:ba:32:d9:c2:09:96:
8f:3b:e0:14:d3:4f:82:5f:4a:09:1f:26:d9:02:be:
e8:1b:0a:fa:c0:2a:49:73:70:1a:89:c7:1f:39:e4:
02:45:bb:0a:91:9e:a9:33:91:f1:86:c6:27:c0:1f:
05:78:84:41:1a:dd:bf:88:9f:41:9c:3f:fd:79:45:
57:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E4:10:EA:45:5E:81:0B:D4:94:3A:2E:3A:6C:97:F2:6C:24:0B:17
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p-QQ6kVegQvUlDouOmyX8mwkCxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.112.0/23
195.133.68.0/22
Signature Algorithm: sha256WithRSAEncryption
17:17:ac:b5:ab:44:22:b1:c9:21:52:80:7d:8d:1a:aa:73:11:
24:0d:54:32:db:95:ce:52:f2:f4:87:76:e8:78:c7:9f:ab:c1:
47:0d:58:71:35:26:fb:c1:56:2e:a0:4c:7e:95:a4:a6:30:75:
68:93:f2:9c:47:3e:22:3e:43:16:7a:5e:92:44:56:53:f4:e4:
7f:e4:dc:67:18:84:d9:9c:db:b4:25:2f:02:d5:4b:bb:19:57:
ee:6c:48:47:91:82:0f:1f:2e:9f:19:d6:37:81:b4:af:ed:69:
1b:7e:b3:87:41:e7:87:94:af:a2:67:42:93:dc:6b:2d:a1:b3:
05:98:0d:3f:04:e5:43:f7:24:43:79:e8:17:c7:e7:d0:36:17:
40:0c:80:b4:5b:02:37:c6:1b:d7:dc:40:ed:35:eb:d4:e7:57:
07:c7:7c:72:17:8f:bd:06:5a:5c:c4:21:a9:4e:a7:3a:3f:fc:
df:db:42:8e:a0:c2:0e:14:ff:6c:ef:f7:11:01:14:3d:1b:0c:
7a:20:fa:64:5b:22:85:de:57:36:2b:29:64:c9:87:aa:f7:a6:
70:1f:9d:51:8c:8c:19:4a:d1:fe:67:31:3b:a5:ec:2d:9f:8e:
b1:38:d0:1c:43:d7:0b:2f:4d:a0:f0:ae:38:84:a5:9a:b1:f2:
b8:5b:e6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:37 2025 by rpki-client