Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/RqxbdMSh8w-5alXpfvlUin-3Y-A.roa
File: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (raw, json)
Hash identifier: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=
Subject key identifier: 46:AC:5B:74:C4:A1:F3:0F:B9:6A:55:E9:7E:F9:54:8A:7F:B7:63:E0
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 01942669F05AE8B64D6253178F240D3ABF57
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/RqxbdMSh8w-5alXpfvlUin-3Y-A.roa
Signing time: Thu 02 Jan 2025 09:47:44 +0000
ROA not before: Thu 02 Jan 2025 09:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 194.165.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:f0:5a:e8:b6:4d:62:53:17:8f:24:0d:3a:bf:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Jan 2 09:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46ac5b74c4a1f30fb96a55e97ef9548a7fb763e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:ad:86:08:8e:68:42:c9:35:54:34:ad:42:
d2:d9:57:66:95:ce:d8:2b:d3:ab:31:e5:74:b2:b2:
f1:45:ac:c3:ab:2f:a6:fa:2b:12:a1:49:43:b0:37:
e1:ea:f0:96:7b:e0:71:81:ae:48:8e:c3:ee:5b:ea:
c5:65:a8:d4:73:31:5c:3d:91:28:f6:a9:61:d5:30:
be:06:e0:11:c6:b1:72:7c:09:97:60:1d:b2:40:38:
7c:05:13:a1:30:90:08:99:87:e6:7a:7c:6f:01:0c:
4c:f7:4c:25:88:33:c1:b6:bb:8b:08:a8:e0:a4:26:
c7:c0:f7:7e:dc:2c:c3:46:d1:de:48:db:44:0b:92:
d4:94:97:db:59:19:2b:53:33:d2:af:c8:46:4e:05:
28:1a:bc:37:77:47:49:3b:f8:f7:0b:5d:e7:3f:a5:
37:6d:65:00:d8:46:5d:9c:b9:cf:42:e2:8c:9b:ad:
26:e9:ba:21:f9:11:d1:73:34:7d:35:6c:18:7e:2b:
91:2e:40:4b:18:75:36:c2:60:c6:57:c0:ef:73:50:
91:f9:a7:3c:c2:ec:1a:d9:c4:c5:88:44:69:c4:d1:
c6:75:80:2b:16:b4:08:2c:54:48:4e:4a:f5:70:38:
54:2b:a4:0c:1a:1e:90:00:46:33:2a:c8:a7:48:c6:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AC:5B:74:C4:A1:F3:0F:B9:6A:55:E9:7E:F9:54:8A:7F:B7:63:E0
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/RqxbdMSh8w-5alXpfvlUin-3Y-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.37.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fe:9c:03:9a:1e:2c:b1:4d:ad:7b:08:c0:a1:db:d0:73:c7:
7a:a9:4e:c1:d0:10:f5:a6:0f:29:fc:16:fd:98:9e:e3:71:aa:
17:c6:e4:e1:12:9c:3e:11:bc:1c:92:52:6d:64:91:83:97:aa:
f9:63:bf:17:90:d5:02:cd:69:cb:1e:7e:88:d1:a8:ee:61:44:
d6:25:b6:5a:f4:d2:a1:a4:b3:76:28:fe:4e:5f:0c:b8:f3:ca:
dc:4c:78:1c:24:0d:e5:e3:2c:e7:08:8a:16:8c:e9:ac:39:80:
b2:17:77:96:6b:ad:a8:1e:33:94:0c:37:2e:c4:46:9b:3c:9b:
ef:b5:1b:1b:b1:0e:09:62:75:9f:1e:48:39:2a:b6:e8:6a:bb:
06:54:b5:b5:73:84:87:ef:d4:5c:32:bc:86:c4:ae:e6:08:7f:
77:e3:f2:b8:36:78:52:09:25:46:07:84:90:4c:d5:79:27:f1:
68:9a:f3:89:75:bd:b1:84:a0:6f:c5:e6:66:19:5b:bd:ab:86:
e1:92:65:be:67:3f:be:0c:3f:b4:f0:e7:d2:1b:36:7b:ce:24:
1f:88:99:9e:85:20:88:c1:9e:01:32:1c:71:70:9e:8a:84:b2:
89:33:2f:81:84:41:59:07:d6:7c:73:3c:57:a0:0b:0c:9b:f7:
26:5c:17:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:03:53 2025 by rpki-client