Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qtA5W5rSHZF4mMRLM6v7irB9BQU.roa
File: qtA5W5rSHZF4mMRLM6v7irB9BQU.roa (raw, json)
Hash identifier: +JdgtkitV13YhzK9ePSyRw7Zx3OQkaiBxnqfTBoa+/Q=
Subject key identifier: AA:D0:39:5B:9A:D2:1D:91:78:98:C4:4B:33:AB:FB:8A:B0:7D:05:05
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019424B38122FC062EF11203906CC8AA31C3
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qtA5W5rSHZF4mMRLM6v7irB9BQU.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60148
IP address blocks: 213.176.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:81:22:fc:06:2e:f1:12:03:90:6c:c8:aa:31:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aad0395b9ad21d917898c44b33abfb8ab07d0505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:df:e2:51:bf:f3:e5:39:9d:73:7e:65:43:
60:fc:b5:e3:ab:c4:9b:3d:e1:7a:c3:92:8b:fc:5d:
77:0b:29:16:3d:4f:41:40:a2:37:f0:97:f8:f3:90:
a9:70:5c:12:01:90:c0:80:04:b6:be:61:77:01:b2:
97:15:d7:24:6d:95:36:e2:f6:d7:be:d5:47:cd:71:
ee:99:8c:16:3b:2e:42:8d:b1:72:0a:88:bd:bd:46:
6b:e2:6a:50:59:0b:b6:74:ef:3f:c9:9b:da:0a:9b:
3c:3d:0c:50:8f:a5:f4:69:be:c1:db:df:4b:87:ed:
42:11:05:5f:40:18:10:10:f3:a7:d0:fa:5e:dc:64:
a7:e7:70:eb:74:7d:b2:55:a7:aa:49:48:b8:c0:23:
41:9a:30:46:ed:c4:32:d2:ab:09:6e:8a:b7:b6:6c:
d0:5f:af:ef:5e:ef:3f:50:69:4b:55:68:cb:6d:8e:
2d:a5:57:96:be:7b:5a:04:3a:15:15:29:f8:78:d8:
19:99:a1:ac:d0:ab:f3:2d:f8:aa:2f:c7:51:16:1b:
2f:13:40:cd:46:be:4c:3e:c0:f5:c2:58:b7:57:69:
87:b6:4f:e3:e2:1f:2a:05:89:df:29:0e:f7:50:cb:
29:32:68:ac:fe:92:38:0c:f9:b1:a1:9b:de:03:2d:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:39:5B:9A:D2:1D:91:78:98:C4:4B:33:AB:FB:8A:B0:7D:05:05
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qtA5W5rSHZF4mMRLM6v7irB9BQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.5.0/24
Signature Algorithm: sha256WithRSAEncryption
98:44:0c:d2:dc:e6:88:03:a1:a2:60:7f:7f:90:b0:be:f2:29:
38:1e:15:99:7f:5b:b0:02:39:ab:09:fc:4e:1a:97:59:85:59:
01:c5:02:ca:7a:af:a2:56:dc:cf:64:f5:ab:f3:51:93:6f:6a:
09:e5:d0:31:08:0b:67:b1:7e:34:d0:82:42:de:e4:41:0a:e8:
08:78:18:b8:70:ee:c0:aa:75:56:16:0f:8d:93:6c:cc:0d:44:
90:3c:6c:34:5b:0a:5b:58:83:66:8c:b6:84:8a:1a:88:2d:65:
57:0d:25:e2:aa:f6:08:d3:96:22:09:d2:c2:0c:64:35:04:18:
79:17:7f:3e:38:df:67:87:98:44:9b:8a:43:df:fd:ce:1c:b0:
3c:ac:a4:af:27:f8:27:e2:47:61:53:5c:48:f8:54:92:dc:9e:
5a:d1:8a:3b:83:a0:05:f2:9a:e7:df:07:4e:dd:45:7d:83:07:
ca:ec:a7:0c:d5:c0:d0:30:d1:66:f7:94:4e:40:3c:f1:82:59:
b7:82:b3:03:15:94:aa:cd:42:f0:d6:87:72:5f:32:66:76:39:
dc:86:cd:ab:dc:15:98:f6:e6:e1:02:0d:32:95:c6:d9:10:15:
d2:d0:6b:97:2f:6d:d9:36:f0:cf:07:a0:61:db:00:ed:1d:d2:
ee:60:dd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:19 2025 by rpki-client