Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/q_WnCjomGrsSAAJhmJ6LCY-y0yg.roa
File: q_WnCjomGrsSAAJhmJ6LCY-y0yg.roa (raw, json)
Hash identifier: B+dx6YDKPwLf1P5VwLqQmWeFrVT16KHjtdJkJq89DA0=
Subject key identifier: AB:F5:A7:0A:3A:26:1A:BB:12:00:02:61:98:9E:8B:09:8F:B2:D3:28
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B37F04D55FA92AB6DD84B271600304
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/q_WnCjomGrsSAAJhmJ6LCY-y0yg.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55933
IP address blocks: 213.176.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7f:04:d5:5f:a9:2a:b6:dd:84:b2:71:60:03:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abf5a70a3a261abb12000261989e8b098fb2d328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:df:0a:6f:ad:62:90:92:83:4a:b5:de:de:
22:5c:f6:0b:fc:07:e2:4a:e7:f0:32:64:18:08:08:
d8:4f:f8:c6:21:20:76:59:ff:d3:52:d2:41:b1:04:
ea:fa:b7:74:08:68:00:17:5a:5e:6f:f4:5e:0e:67:
6a:e0:57:0a:02:ac:d0:59:bc:17:bb:a9:88:65:a3:
59:02:ad:77:5a:65:cd:12:ef:91:8b:c5:e6:99:99:
5c:c2:98:b1:21:75:2a:4b:df:a1:f8:60:f2:b3:78:
de:53:46:42:49:f3:42:f4:64:d1:0f:6c:55:1b:7f:
85:3a:5a:ff:eb:32:ba:ad:d9:d1:f2:f2:da:35:99:
e2:da:42:3c:26:1e:7c:be:52:fe:e3:4c:cd:ae:2a:
4a:80:77:02:fc:0f:c9:48:f1:df:82:88:48:47:e4:
7c:2b:ed:c8:c8:4f:63:2e:e8:04:2c:e2:d8:b7:7f:
8c:25:0a:de:e2:16:9a:c3:4c:ae:a9:6c:86:b9:4a:
fa:4b:65:37:2e:15:00:34:ed:2f:97:6e:04:f5:a5:
ee:7a:8f:42:12:fe:ab:56:91:5d:e4:86:46:cb:b0:
7f:b6:a6:b7:31:e3:28:1a:81:fc:44:8b:1e:52:03:
f9:8a:91:07:62:c0:b2:9a:18:0c:c2:02:1d:f1:a0:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F5:A7:0A:3A:26:1A:BB:12:00:02:61:98:9E:8B:09:8F:B2:D3:28
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/q_WnCjomGrsSAAJhmJ6LCY-y0yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.73.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:b2:0a:f0:c0:26:fe:23:19:41:d2:9b:97:a6:9f:87:4d:9a:
3f:fc:c6:67:4a:81:d2:35:32:e3:9e:ab:8e:4b:f7:83:3a:eb:
c3:39:aa:41:8f:47:e2:21:55:70:e9:ce:ac:47:45:c4:1f:13:
fc:3d:db:69:03:4f:f7:24:54:69:ba:e3:4d:f6:33:e0:dc:be:
f9:85:8a:d6:07:53:4e:fc:ea:64:74:1d:09:2f:6c:7c:78:58:
30:c7:05:cb:ec:6c:67:64:74:da:03:d3:23:6f:fe:bd:63:7c:
49:90:a4:c7:e0:b3:dc:56:45:c7:87:df:05:91:c6:18:26:34:
b3:81:c8:c6:9c:e3:fe:20:f5:13:1d:bf:66:e2:f4:e9:c9:77:
04:88:59:19:1b:92:55:13:5d:f6:8e:a3:b4:aa:55:7e:36:da:
dd:1d:92:21:c8:d9:f3:00:b1:9f:31:a2:e8:0a:af:17:08:8d:
01:ff:39:96:95:e0:bf:0d:f3:18:1d:d2:fb:be:9e:b6:47:67:
c0:42:f1:ba:58:fb:f4:28:8c:fe:e3:6f:f4:8d:ca:dd:44:5b:
e1:fd:d7:82:39:1f:b9:4f:c5:27:46:13:81:30:da:d3:38:3f:
82:1e:59:80:ef:ee:bd:12:37:9b:cf:f3:84:17:06:0a:24:cd:
d2:bb:9d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:41 2025 by rpki-client