Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/0-0QU-mcwsSjRhq471-gtd5ufh0.roa
File: 0-0QU-mcwsSjRhq471-gtd5ufh0.roa (raw, json)
Hash identifier: VGJkz0Kb+B/ZQAVYufjsQPwByA4ZPAxHr/hG7qTqtp4=
Subject key identifier: D3:ED:10:53:E9:9C:C2:C4:A3:46:1A:B8:EF:5F:A0:B5:DE:6E:7E:1D
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 019427B5BAB70AAE4F41BC267D02219482C8
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/0-0QU-mcwsSjRhq471-gtd5ufh0.roa
Signing time: Thu 02 Jan 2025 15:50:08 +0000
ROA not before: Thu 02 Jan 2025 15:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41183
IP address blocks: 194.140.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ba:b7:0a:ae:4f:41:bc:26:7d:02:21:94:82:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Jan 2 15:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3ed1053e99cc2c4a3461ab8ef5fa0b5de6e7e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:26:35:e6:03:d5:e1:29:2e:af:25:7e:60:
17:61:ad:18:f9:9f:66:62:e0:58:60:a4:82:98:ec:
fe:1c:7a:51:d7:91:c3:0d:fb:a9:65:8c:dc:2a:b0:
d8:8b:65:b8:a6:06:d4:dc:00:6f:0a:08:a0:c1:46:
3d:0e:52:52:39:b3:a3:98:ee:cf:98:83:9e:61:7c:
b3:23:36:b6:ec:a3:81:e9:37:ab:37:cc:3c:d3:b2:
94:54:c8:6b:fc:60:76:3a:c8:dd:54:69:09:90:db:
a7:70:4c:19:0e:95:70:1b:29:f7:3e:f9:01:c0:a2:
45:9a:c6:d2:e7:5f:c7:28:de:e3:7d:63:44:02:42:
3b:80:c0:30:ec:e8:f3:55:05:c0:59:ef:6b:ee:0d:
13:9e:b0:94:ac:2c:da:47:94:43:13:66:2e:88:73:
6b:fc:6b:4a:14:7a:c6:46:18:11:8b:31:a9:f0:d3:
4f:68:56:30:69:fc:f9:24:af:d5:91:a8:72:7b:4f:
34:61:1c:dd:9d:ab:a3:d8:25:3e:72:73:6c:81:0d:
72:0d:ef:ca:83:fd:02:81:b4:21:b7:4d:68:90:09:
76:d0:e2:51:b3:bb:79:f8:25:6d:95:9c:88:eb:24:
41:99:bc:b6:70:fa:1d:fd:a9:87:21:f1:e9:4e:e8:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:ED:10:53:E9:9C:C2:C4:A3:46:1A:B8:EF:5F:A0:B5:DE:6E:7E:1D
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/0-0QU-mcwsSjRhq471-gtd5ufh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9f:dd:09:46:23:a8:09:54:5f:3f:3b:19:d7:20:c4:ef:de:
e1:6f:6d:9e:e2:9e:2b:96:1a:60:83:ff:a4:c7:4a:e3:95:b0:
c6:cb:17:d3:62:f5:f1:f5:27:68:cb:00:eb:ce:22:34:13:8a:
b0:56:36:58:53:80:7b:96:3e:fe:9c:30:a5:01:35:a8:c8:9e:
95:ee:4d:96:4a:b8:7b:ae:8f:02:be:5f:1e:4c:97:05:7d:2f:
ef:65:99:b7:e1:e8:48:63:08:b6:6d:d3:88:de:33:3b:24:47:
a8:b4:36:68:0b:db:aa:97:b8:3e:e9:4e:08:7d:2d:42:af:9f:
59:91:00:95:fd:b8:c7:26:26:c7:15:f8:64:19:03:b6:63:84:
bc:1d:12:06:24:20:20:03:c7:d0:9f:18:24:a5:93:b4:68:45:
a0:9c:62:34:ad:8d:3a:38:ff:0e:ed:20:9b:0c:8f:8e:70:e2:
c7:b5:ab:58:6b:84:57:c5:5b:a5:82:0e:9b:38:6a:49:1f:78:
91:06:32:23:05:ac:84:fd:60:14:40:91:cc:a6:11:cf:0e:c2:
6c:bf:5d:b6:28:89:ae:54:7a:cf:bc:1b:73:0b:8e:6c:01:ad:
ea:8c:4a:0f:c0:14:3e:34:df:5f:88:a0:51:f0:4a:95:0b:b6:
d1:5e:43:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:44:11 2025 by rpki-client