Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Q2melAOLg5S73gTs8-_LRvPAKyA.roa
File: Q2melAOLg5S73gTs8-_LRvPAKyA.roa (raw, json)
Hash identifier: 8BLmy7a7U7dbrXd4v9TWosqRbSm8lS2sUyU+6I8veGM=
Subject key identifier: 43:69:9E:94:03:8B:83:94:BB:DE:04:EC:F3:EF:CB:46:F3:C0:2B:20
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747F03339A44628AF798B47B4727DDE
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Q2melAOLg5S73gTs8-_LRvPAKyA.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212508
IP address blocks: 178.218.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 19:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f0:33:39:a4:46:28:af:79:8b:47:b4:72:7d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43699e94038b8394bbde04ecf3efcb46f3c02b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:8f:75:86:f3:8b:3f:ba:4b:ea:82:40:08:77:
7f:78:bc:e6:cd:a5:3a:c4:bd:05:11:63:c3:df:57:
42:fa:7c:83:42:12:23:f9:c4:c0:89:e9:3a:d5:7e:
ff:77:b5:b2:5f:2e:32:73:ab:1b:81:81:f9:1f:f3:
34:95:f5:ef:1b:2d:a0:69:57:44:d4:5a:6d:c3:d7:
28:68:71:e7:2a:8b:12:21:f0:43:47:65:e4:6f:e6:
6e:eb:20:e8:21:8e:b8:f9:d3:4a:c2:9e:5d:fd:e2:
71:b8:17:9d:fd:59:f4:82:88:14:4b:90:b8:90:68:
26:a6:71:29:00:a9:77:54:58:0e:8e:77:90:19:21:
fd:0d:86:4b:38:49:68:4b:96:2e:db:13:ed:4e:ba:
cf:8e:6a:20:1d:fc:97:4f:07:5f:d3:54:f9:93:a6:
79:bb:ac:6b:ae:ee:b0:98:d8:59:d8:2b:25:8e:bb:
43:b7:97:38:0b:50:1b:22:cd:22:99:59:cc:51:d9:
ff:3a:32:05:2a:5e:be:a2:c4:03:ea:05:87:7a:d9:
82:60:1c:da:d7:c7:3c:ed:7b:70:c4:30:c4:d2:e5:
97:60:5d:72:88:b1:fb:db:99:39:f6:80:4d:c3:71:
52:78:8a:eb:39:2e:fa:8f:7e:6c:c5:5a:f8:43:e1:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:69:9E:94:03:8B:83:94:BB:DE:04:EC:F3:EF:CB:46:F3:C0:2B:20
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Q2melAOLg5S73gTs8-_LRvPAKyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.144.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b3:6b:e9:9f:3a:53:1d:74:85:a8:ca:e1:2d:46:f0:42:0e:
7b:fc:41:54:e2:d9:30:f2:be:e3:d4:e8:eb:3d:40:cb:dd:00:
d9:82:c8:e9:e3:5f:b8:4a:cb:db:ff:bc:9b:55:a3:dc:c8:a0:
30:45:ec:7f:b6:d3:e5:64:c5:e7:49:93:b8:c7:af:33:16:c9:
33:0c:13:89:06:62:44:2f:a5:8f:79:71:64:d1:4b:f3:65:75:
1c:8d:c1:bb:18:62:25:24:b5:c5:33:c7:ea:17:10:96:ed:f1:
c9:7a:02:52:33:34:2b:f5:4b:f6:3d:9c:8a:6d:18:d1:9f:5c:
79:d4:ab:11:9a:e0:58:2c:9a:5e:d5:f8:9a:03:4c:5d:b1:28:
f3:27:87:1b:b3:8a:0c:aa:e5:f3:5b:b4:c3:42:6c:93:8b:e8:
2e:96:ff:e9:53:8e:49:3f:b2:2a:d0:32:f2:c6:3e:d2:97:18:
c4:44:73:1d:c5:87:23:55:f5:be:a0:c8:78:48:0d:ea:45:41:
58:ee:82:49:af:8f:fe:7e:6f:26:7d:b2:ab:7f:24:95:76:b9:
f4:ff:dd:a9:37:39:5b:9e:64:88:8b:7e:92:0d:4f:83:40:72:
a1:6c:49:13:09:d6:b2:03:47:69:43:20:13:a6:05:ea:e0:1c:
89:9e:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 05:42:03 2025 by rpki-client