Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/QmV9qZxHtRiAwIkPUDogIluAj8k.roa
File: QmV9qZxHtRiAwIkPUDogIluAj8k.roa (raw, json)
Hash identifier: wEM8dRvMzPCx7UP9+Bvx7YlKlSBJp54YWMFcK+7IhRA=
Subject key identifier: 42:65:7D:A9:9C:47:B5:18:80:C0:89:0F:50:3A:20:22:5B:80:8F:C9
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 0194228DF4A293EE350169BAF7D55D619316
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/QmV9qZxHtRiAwIkPUDogIluAj8k.roa
Signing time: Wed 01 Jan 2025 15:48:36 +0000
ROA not before: Wed 01 Jan 2025 15:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213087
IP address blocks: 134.97.2.0/24 maxlen: 24
134.97.3.0/24 maxlen: 24
2001:650:cc05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f4:a2:93:ee:35:01:69:ba:f7:d5:5d:61:93:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Jan 1 15:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42657da99c47b51880c0890f503a20225b808fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:45:0f:fb:05:78:62:2e:7b:d7:66:e8:51:
c3:3b:75:f3:b2:d1:e2:9d:25:92:bc:51:ec:29:cf:
8a:e6:83:d8:d0:47:11:8f:cd:9e:e0:45:2f:f3:05:
63:52:99:1c:6b:1a:0d:68:03:c0:95:15:00:92:67:
2f:12:63:4d:7c:7f:c8:f3:42:29:b0:e7:4e:38:b6:
ff:3e:df:b6:c0:6e:61:3c:f9:b3:06:20:a2:17:90:
01:77:af:00:00:6b:0d:6a:0d:24:92:36:ec:0e:f0:
01:ab:cf:0f:3a:a4:e8:93:f3:32:88:4a:fd:5b:c2:
db:8e:ef:c9:7c:45:7b:a8:8d:8b:8d:1c:48:cf:6b:
ab:a9:d5:30:b6:1b:79:8a:7d:64:ff:e2:c4:7d:9f:
6d:15:21:5b:6f:41:9d:1d:60:29:a9:76:bb:99:ed:
3e:17:7c:a4:6c:54:45:40:94:4f:3b:6a:99:79:41:
c3:6c:3c:f1:6d:91:0b:a9:d5:65:eb:8a:03:af:1b:
f0:cb:ee:a1:70:58:40:9d:7c:8f:cb:a7:3a:a5:34:
56:99:18:31:9b:2f:d2:95:96:7a:83:d8:6b:d6:11:
8a:44:88:ba:55:d3:69:32:1f:39:5c:ac:bb:19:e7:
8c:f8:72:14:df:11:8e:58:65:e9:3e:47:8f:6b:09:
0c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:65:7D:A9:9C:47:B5:18:80:C0:89:0F:50:3A:20:22:5B:80:8F:C9
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/QmV9qZxHtRiAwIkPUDogIluAj8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.97.2.0/23
IPv6:
2001:650:cc05::/48
Signature Algorithm: sha256WithRSAEncryption
19:4f:b3:a7:2b:6f:5e:55:5f:40:a5:39:11:4c:f8:eb:98:1a:
4d:82:76:7d:1e:89:83:25:9c:73:0c:52:64:2b:eb:86:be:65:
54:04:ad:a6:65:04:14:b3:85:75:ce:e7:e6:8c:1b:6c:0e:cd:
c1:49:6b:9f:cd:ba:65:72:ca:a8:2f:92:8b:09:3d:e5:79:a3:
a7:df:27:33:08:77:2d:69:7b:9a:67:0d:3a:d8:73:c0:8a:be:
7a:e0:3a:37:2d:27:72:4f:87:44:eb:89:72:9e:7e:f1:47:73:
be:21:15:e6:96:fc:4b:0f:7d:ec:2b:e8:d1:62:da:e1:66:b7:
66:3a:2b:b1:48:81:20:da:1e:01:bd:a4:ef:31:68:6a:fd:04:
15:94:31:94:0d:42:f6:d6:0a:21:9b:c2:f3:77:41:1c:e3:58:
7f:26:df:16:67:be:32:e2:24:a4:5e:74:97:0d:d0:a4:24:1d:
9e:02:2d:c7:fa:4b:60:6e:de:d1:42:fb:9d:31:34:59:b3:bc:
5a:c3:11:09:10:df:86:f1:a5:05:41:71:89:2e:6c:f2:04:b3:
38:26:27:13:6c:57:7f:f9:dd:ad:76:36:97:63:ab:4b:b2:0b:
db:a6:1e:65:ee:2d:63:05:6e:97:68:0c:1f:0e:d7:a4:19:cc:
64:87:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:25:19 2025 by rpki-client