Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa
File: AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa (raw, json)
Hash identifier: M9DqKPgllLnW8MX9RGkl/xHC2u96Nyjw3cSwX+kD68U=
Subject key identifier: 01:0E:C5:9A:EB:C3:CF:AD:85:F2:E2:87:42:9B:8A:30:46:32:75:04
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 0194214427B61C9CEC0A75704709485F4E33
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa
Signing time: Wed 01 Jan 2025 09:48:22 +0000
ROA not before: Wed 01 Jan 2025 09:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203
IP address blocks: 195.66.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:27:b6:1c:9c:ec:0a:75:70:47:09:48:5f:4e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Jan 1 09:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=010ec59aebc3cfad85f2e287429b8a3046327504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:c3:99:23:19:f3:7f:ad:fc:ca:ed:c2:4c:
f4:4d:b8:3a:83:00:c2:d4:3f:38:e9:89:d9:d1:10:
6c:1b:5f:92:84:97:95:4e:93:bd:3e:2f:0e:d7:93:
4a:8c:a9:39:c0:68:d0:c0:25:e0:44:dd:f6:81:e0:
e0:91:e8:53:55:b0:5e:a9:08:3d:f8:10:16:76:cc:
0f:9a:0b:e6:20:f6:7c:89:4e:64:30:60:aa:3b:97:
1c:bb:e5:f9:b4:d1:e9:a8:3d:b2:79:85:8e:c8:21:
07:7d:52:73:67:21:f1:13:00:f2:3a:36:43:91:15:
aa:1f:9f:2a:66:92:18:5b:37:5c:55:d4:fe:5c:e0:
e2:17:29:7b:be:02:c1:12:c9:e7:ba:7d:57:ed:cc:
e7:59:d5:df:94:53:cd:21:f3:34:58:11:db:38:5a:
c9:27:b1:34:dd:63:65:f9:17:b4:2f:fd:b8:fb:c6:
e6:91:e5:77:a4:a8:c7:82:34:b9:ac:dd:3e:b1:f4:
2e:61:6f:37:7b:3d:b5:0d:21:43:5a:52:2c:aa:2d:
93:fb:ed:6a:e5:f3:f8:80:e8:42:25:75:5d:7c:d8:
5d:51:f1:ba:ee:47:04:e4:75:f5:34:67:a0:03:06:
e0:ca:1a:ed:a6:f7:a5:8a:f5:77:69:27:2a:f1:3d:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0E:C5:9A:EB:C3:CF:AD:85:F2:E2:87:42:9B:8A:30:46:32:75:04
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c8:89:44:18:f6:81:a9:50:26:49:1b:93:39:3e:45:22:a7:
e9:5a:fa:f4:98:29:cc:c9:c4:8a:8f:6f:6b:7a:a8:0e:0d:03:
57:41:31:ea:47:cc:71:30:25:07:04:ee:2c:e2:ec:2e:40:ee:
f5:9f:fe:aa:bd:5f:5e:ea:f4:9d:6e:90:71:b2:e6:5e:fc:15:
d8:d1:fb:70:a4:31:cd:ac:a6:8b:af:0d:5a:0f:1d:68:da:de:
ed:9c:a8:cc:d8:1e:e4:10:3c:95:03:46:67:cd:2e:ad:57:38:
57:47:41:66:b9:9b:9e:a0:3e:28:ac:2c:f3:30:77:c2:aa:01:
f3:97:a8:1f:71:49:87:e1:6a:57:f6:65:43:84:b6:5c:aa:df:
9d:64:bb:9e:12:4e:60:60:14:8f:ab:03:4f:2d:27:18:f6:33:
43:3f:bc:69:a8:06:6d:99:ce:eb:df:e3:27:bf:20:a0:a8:ce:
61:bf:0e:a9:ab:2f:20:87:77:f3:f9:1a:69:6e:95:c9:a1:9c:
5b:bd:7f:a2:bf:c6:00:98:17:46:4b:83:25:4a:fd:fa:26:7b:
49:b0:9e:f8:20:4e:b7:55:65:c4:06:97:d8:48:3c:fa:f0:f2:
da:3c:a0:fb:d6:3a:51:85:6e:79:4a:80:96:6c:be:30:c4:dc:
31:4d:38:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:34:12 2025 by rpki-client