Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/_QNn8i-0tIKLRcq_eDgA2QsLdiA.roa
File: _QNn8i-0tIKLRcq_eDgA2QsLdiA.roa (raw, json)
Hash identifier: QiOA4Z6p5RQwq3aK0bHpaTuhZajM0dodRW/v7+6NMjs=
Subject key identifier: FD:03:67:F2:2F:B4:B4:82:8B:45:CA:BF:78:38:00:D9:0B:0B:76:20
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 019423D749370B865730EC9BD984CA778951
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/_QNn8i-0tIKLRcq_eDgA2QsLdiA.roa
Signing time: Wed 01 Jan 2025 21:48:18 +0000
ROA not before: Wed 01 Jan 2025 21:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 193.36.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:49:37:0b:86:57:30:ec:9b:d9:84:ca:77:89:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Jan 1 21:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd0367f22fb4b4828b45cabf783800d90b0b7620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:0f:b6:7b:1d:33:3f:33:e1:4b:70:ec:92:
9a:1b:f2:b0:67:90:53:5e:8a:95:94:f7:27:0e:e0:
81:86:b3:4a:16:00:52:c8:7c:14:2b:f9:ec:58:e2:
c7:b4:43:ba:1a:76:af:c3:d6:ba:aa:5e:bb:fd:bf:
46:10:e8:f5:f7:d6:6e:26:81:f1:3e:cf:9e:90:3d:
65:28:79:a1:98:de:ed:b0:be:c8:e1:63:86:f7:bd:
4a:e9:e3:4f:ff:15:21:88:a3:87:cd:bb:dc:00:07:
b3:39:5b:f1:7a:ef:41:a7:41:be:99:67:ac:a4:93:
a8:ae:3c:db:a0:1c:16:b4:f0:78:3a:23:2a:97:f6:
fa:53:dd:28:39:4d:e7:f2:9f:28:91:43:f5:b8:18:
20:0d:4c:f5:39:f9:8e:d9:52:c7:62:6f:15:05:2b:
83:99:cd:e0:ac:3f:69:ac:87:f9:11:8d:4d:c8:b8:
71:3a:35:7f:3f:a8:7d:84:9c:94:87:35:56:5e:63:
cd:4e:a0:6f:59:8d:98:c8:e5:9a:db:c7:d3:fc:12:
a9:f0:f3:1b:7e:96:ef:ff:3f:5a:6e:24:78:6d:d3:
2b:ba:54:f9:9c:6e:c3:0a:ad:18:42:43:50:0a:3c:
2b:dc:f2:93:d0:5f:69:82:7f:d4:c2:36:f6:87:e5:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:03:67:F2:2F:B4:B4:82:8B:45:CA:BF:78:38:00:D9:0B:0B:76:20
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/_QNn8i-0tIKLRcq_eDgA2QsLdiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:88:d0:13:1f:5d:18:3d:1d:42:6b:46:c3:a0:c9:34:c8:27:
70:ba:39:dd:04:22:49:3d:6d:1e:81:7d:00:db:08:d6:94:f6:
c0:5f:34:b4:72:86:51:b3:fe:aa:cb:2a:d1:4d:4e:9d:39:7d:
fc:f3:82:96:dd:3b:3d:94:46:72:de:fa:d0:12:91:e1:a7:5c:
3e:d8:d6:db:0c:41:6d:cb:74:45:8d:a2:cf:8d:6b:7e:ba:3f:
17:b7:9a:21:11:27:b4:a1:09:57:72:db:7a:42:27:49:2b:2f:
2f:68:29:52:0b:56:a5:e6:96:4f:27:a7:1c:41:99:01:23:1e:
1b:b0:07:b5:1d:6b:eb:0b:d8:70:4b:07:78:3d:c7:2e:91:dd:
c1:39:de:10:75:96:2f:a3:02:4d:e5:7f:08:28:d4:0c:a0:21:
8f:25:f5:59:d8:53:99:9a:1b:c9:51:5d:29:fd:31:22:79:74:
19:ca:ac:7a:c6:77:0b:20:9e:d0:9a:a5:19:a7:d7:2e:89:d2:
4b:7c:e0:6e:a6:da:a6:dd:fd:e3:63:7f:ed:7a:17:7b:36:9b:
d7:1f:10:64:95:24:83:e3:fc:98:08:2f:f6:d6:b4:7e:90:72:
45:70:73:cc:fe:d7:8c:a8:f6:ec:c2:3d:4c:f2:5b:56:65:a2:
c6:b0:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:05 2025 by rpki-client