Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/RQjHthweEF9-820WAQ_PQzmnlEM.roa
File: RQjHthweEF9-820WAQ_PQzmnlEM.roa (raw, json)
Hash identifier: nBMPnR4O6VvmGYLIOUpQxt7mk0o9gXGO9uw/qf7b94A=
Subject key identifier: 45:08:C7:B6:1C:1E:10:5F:7E:F3:6D:16:01:0F:CF:43:39:A7:94:43
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 01941F8C54FD70712559D77AFB483974FD6E
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/RQjHthweEF9-820WAQ_PQzmnlEM.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.189.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:54:fd:70:71:25:59:d7:7a:fb:48:39:74:fd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4508c7b61c1e105f7ef36d16010fcf4339a79443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:01:4e:4e:2b:04:89:bc:12:ab:bb:12:c7:
f6:2e:75:19:1b:a9:3a:4b:74:ec:ca:32:6d:7c:da:
0c:42:75:5b:98:01:44:d0:4b:ff:b1:3c:f8:0f:9a:
2b:e3:f1:f2:5b:35:f9:80:26:d3:04:ee:47:f9:13:
d3:70:10:d6:cd:3e:bf:af:06:7c:66:6b:d4:ee:56:
02:fd:95:ea:0a:25:a8:10:43:d4:25:5e:97:63:99:
c9:b1:36:c0:a5:f8:5b:dd:97:4b:7e:8b:db:47:3a:
b5:0c:46:36:4a:50:d6:5a:33:f9:3b:33:fd:7f:92:
7e:51:50:b6:b8:14:21:8a:f0:d2:ab:88:e7:5d:a7:
ce:37:db:fe:a4:7c:c5:85:3e:95:f2:c3:0e:1d:39:
f7:a2:d8:17:69:2f:0f:ca:79:df:0c:91:8e:1d:c1:
b7:de:78:56:42:3b:be:61:e9:de:c5:39:ac:ec:e5:
a1:9b:74:e3:28:b8:da:bd:aa:22:94:77:e5:42:f6:
bd:51:66:e4:c2:3b:d0:62:9e:11:d3:ed:28:6d:f7:
b6:6e:40:77:74:72:f1:9c:4f:93:5b:09:c7:be:01:
94:34:d8:d5:4b:15:2d:fd:13:c7:82:41:12:aa:d9:
e6:8d:47:a1:6c:d9:24:38:60:10:2a:cd:a1:69:c1:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:C7:B6:1C:1E:10:5F:7E:F3:6D:16:01:0F:CF:43:39:A7:94:43
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/RQjHthweEF9-820WAQ_PQzmnlEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.110.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e6:da:76:44:e7:b5:b6:a1:40:aa:34:0d:e7:22:13:86:42:
f4:45:68:98:a9:1d:23:a6:ab:6b:d1:05:7b:58:31:8f:b9:0b:
84:0f:75:36:06:2d:9b:c7:48:68:62:6e:52:67:3f:6b:a4:d8:
c2:8f:64:ec:3a:a8:f3:e0:23:8d:a7:f8:6e:31:68:3a:77:2d:
75:71:d8:0e:3d:3f:e8:86:25:1f:b2:f3:80:8d:86:1e:4c:a3:
69:90:43:a5:e4:8c:16:65:78:8c:7e:7d:3f:50:6c:3f:38:ae:
04:87:71:8b:cc:64:70:55:f6:87:8b:55:33:85:d1:5b:71:12:
34:7e:67:ee:7e:aa:65:4a:3a:24:41:7b:d4:4e:6f:8a:20:ef:
3c:de:93:17:88:ff:dd:a9:be:cf:e8:60:ac:2c:03:05:30:56:
ed:51:22:f4:2d:f6:83:b2:99:41:84:ea:5f:05:b7:12:77:95:
30:10:31:d1:cb:20:d1:e4:dd:d3:d4:ce:4d:2a:a1:6a:9b:55:
71:1c:48:b4:6d:1c:c2:7a:40:48:36:18:5d:85:a2:91:cb:6e:
bf:5e:ef:be:fa:6c:5d:81:ce:de:62:e7:74:2a:0c:a6:d6:f1:
b8:e6:34:0a:62:e2:a4:d4:3e:52:cf:3f:9c:40:27:a4:c3:44:
58:b9:f4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:55 2025 by rpki-client