Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/pQRUqfEGszJRFj-f_9B7LRsXpIo.roa
File: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (raw, json)
Hash identifier: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=
Subject key identifier: A5:04:54:A9:F1:06:B3:32:51:16:3F:9F:FF:D0:7B:2D:1B:17:A4:8A
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 01942826A15D69A566478810C41B18BBBA44
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/pQRUqfEGszJRFj-f_9B7LRsXpIo.roa
Signing time: Thu 02 Jan 2025 17:53:27 +0000
ROA not before: Thu 02 Jan 2025 17:53:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203436
IP address blocks: 185.224.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:a1:5d:69:a5:66:47:88:10:c4:1b:18:bb:ba:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 2 17:53:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a50454a9f106b33251163f9fffd07b2d1b17a48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:ab:29:57:4c:22:f2:f7:a0:2b:77:22:67:
05:b2:71:7f:a6:77:fb:ee:27:ff:90:2c:01:ec:be:
19:52:c1:ed:d7:9c:f4:f7:9f:94:ab:27:90:0b:31:
a4:63:4b:39:49:41:98:12:87:24:3d:88:0e:80:d0:
72:e7:7e:2c:02:14:b2:83:45:b1:f4:2c:b9:84:d8:
ab:7f:39:5d:aa:bd:01:d5:25:d9:fa:d0:b5:33:fa:
2f:78:5e:6a:31:cc:6e:ad:f7:50:ba:e7:fd:e0:69:
fd:05:a0:5e:4d:41:40:14:16:8f:b2:62:0c:0f:94:
20:11:c8:4c:44:13:65:e0:5b:b3:7d:cf:5d:c2:03:
a3:25:e4:44:b5:65:4f:de:ae:d7:8e:37:11:e3:a2:
a5:bb:c0:bf:ee:dc:8f:95:7c:08:86:52:db:8f:b2:
cb:05:c3:dc:1b:9d:2c:ba:04:ad:94:4d:82:e4:0b:
f2:61:97:28:9f:b8:24:dc:e3:39:d0:21:68:9a:9b:
6f:df:33:6c:10:a3:07:4d:f4:5e:a5:8a:26:8b:d7:
07:e1:c3:72:84:3f:d3:a4:6e:7d:cd:33:04:54:dd:
c1:7a:20:eb:a2:4f:58:f9:24:26:22:84:d3:24:7f:
6e:4c:2b:27:5e:59:0a:ed:b6:94:c5:65:97:5d:df:
2c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:04:54:A9:F1:06:B3:32:51:16:3F:9F:FF:D0:7B:2D:1B:17:A4:8A
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/pQRUqfEGszJRFj-f_9B7LRsXpIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.217.0/24
Signature Algorithm: sha256WithRSAEncryption
92:83:cc:81:c1:aa:8c:4d:19:7b:4d:b3:b5:cc:25:f9:c5:90:
d3:cd:bb:e5:59:49:ec:fd:58:dd:f1:85:fc:7e:bb:78:ba:cb:
97:4b:f5:c2:f8:7a:ff:af:6f:dd:a8:05:d4:cf:2a:0e:3c:0c:
01:3c:95:de:6d:aa:4f:dc:88:8d:42:35:11:18:ff:fc:a7:1a:
10:90:47:b9:07:82:40:fb:07:15:a0:72:d6:19:5a:0f:f0:31:
6e:ce:99:de:93:0e:ed:c4:68:8d:30:f0:8f:99:8b:9c:b0:13:
00:51:73:55:c6:fd:7d:81:6d:cf:16:53:43:f7:d5:ec:fd:a7:
3b:b2:4a:81:9b:c9:a3:05:47:e6:e3:5c:3a:fe:20:da:b7:a3:
ae:0a:87:28:34:4f:08:c7:c1:9a:bd:82:01:c9:0f:d5:3b:ae:
76:4a:fd:93:93:17:63:63:b8:f4:08:4e:1f:aa:84:3f:c0:15:
6d:d6:c1:28:3a:e6:95:1d:c8:e4:e2:61:f4:42:dd:cd:44:1d:
f4:9a:54:92:1b:1b:11:9e:29:d6:db:a8:06:27:b9:c8:97:18:
15:b2:38:f0:12:72:72:95:bf:f8:88:61:53:e9:9a:9c:83:df:
eb:e3:f0:fc:99:1c:93:3c:32:47:96:86:69:c6:8b:55:fd:fc:
c9:00:6a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:31:35 2025 by rpki-client