Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/gz-qnMUscMazyhnaaxMqBrKn5m4.roa
File: gz-qnMUscMazyhnaaxMqBrKn5m4.roa (raw, json)
Hash identifier: fpQhmRYSa6NMfhZ0IQvQ/7dM75+CyzF1R1dwJsHdzfM=
Subject key identifier: 83:3F:AA:9C:C5:2C:70:C6:B3:CA:19:DA:6B:13:2A:06:B2:A7:E6:6E
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 0194228DB969970FE51E169D1564FE374A99
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/gz-qnMUscMazyhnaaxMqBrKn5m4.roa
Signing time: Wed 01 Jan 2025 15:48:20 +0000
ROA not before: Wed 01 Jan 2025 15:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19437
IP address blocks: 185.18.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b9:69:97:0f:e5:1e:16:9d:15:64:fe:37:4a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Jan 1 15:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=833faa9cc52c70c6b3ca19da6b132a06b2a7e66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:20:7d:8f:f5:fd:10:b6:6b:b4:b5:31:82:
9b:36:ad:b7:f6:d5:dd:ae:6d:05:47:f5:49:04:cf:
13:4c:1c:fd:7a:69:c6:f5:d7:b4:e2:c5:64:6b:7c:
ff:11:12:a0:c0:2e:df:67:26:ce:e9:cd:ce:76:1e:
5c:91:bf:ae:eb:be:1c:48:d6:45:8c:f9:92:5f:af:
57:51:57:87:af:79:38:cb:d6:fb:80:82:d0:fc:4d:
b3:7e:3b:e1:6f:e3:c8:30:f4:88:39:34:c4:48:b3:
4c:e4:33:0f:d4:3f:db:78:6d:f1:2c:45:c5:71:e3:
25:47:49:74:cf:7b:38:be:7b:fd:35:7f:1d:ea:d7:
f5:67:68:8e:6d:fe:1d:6f:63:80:70:f6:91:e0:85:
2c:49:cb:d0:98:92:55:18:96:e9:86:b6:96:da:85:
0d:4e:1e:7e:f6:bf:17:13:7d:b6:b7:23:ca:62:79:
ab:33:c0:14:1e:e0:9e:8b:3c:36:d6:0c:d3:31:18:
02:21:51:6b:9d:65:31:41:ca:05:09:53:8b:96:c3:
b6:6d:83:0d:54:3d:cc:6c:d5:ff:d6:4a:61:ef:31:
db:3a:97:af:fb:54:db:4b:cf:c1:fd:8f:84:7e:81:
0a:7e:e5:0a:80:8b:80:c0:94:b2:4e:e1:26:c2:79:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3F:AA:9C:C5:2C:70:C6:B3:CA:19:DA:6B:13:2A:06:B2:A7:E6:6E
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/gz-qnMUscMazyhnaaxMqBrKn5m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.122.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:52:f1:88:77:e9:03:d3:dc:92:27:40:b5:67:6a:42:dc:1c:
0e:03:e8:e5:b5:14:c9:ab:24:94:77:e3:2e:40:23:d0:70:21:
61:75:94:d7:57:6e:73:61:57:cf:34:75:44:64:f2:b8:16:a4:
86:9c:bc:df:0e:e6:76:17:ea:18:67:04:f5:ea:94:56:4e:d6:
59:43:db:6d:84:6b:4a:a8:f7:c2:fd:c1:db:a9:c2:eb:83:c0:
11:c9:0c:6a:ca:f4:11:b9:06:cd:76:c0:74:61:df:bb:5b:12:
fa:a0:17:d1:25:93:41:07:91:0a:eb:e5:b1:0f:48:57:9a:9b:
7c:ba:40:54:4f:4a:64:09:47:81:79:1e:18:39:f7:e8:ef:25:
18:60:d6:85:fb:bf:d3:69:a9:71:55:b4:d4:36:37:86:10:a1:
61:2b:ff:3a:37:11:ee:4e:12:43:0a:27:c4:25:36:3b:c2:4b:
bf:77:32:d7:6a:36:50:1b:63:ab:06:5c:0e:ea:ec:2d:08:77:
ac:35:a8:2b:29:fd:3f:ce:60:f9:f0:6a:68:35:4c:62:3a:ac:
49:74:75:3d:8a:a7:d8:d4:ce:e3:31:75:70:c6:1a:81:18:73:
6f:0a:5e:04:e8:18:56:14:56:ab:46:11:ff:df:ad:1f:b7:79:
9d:c2:a7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:55:44 2025 by rpki-client