Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/qZFf8xBKOBqZq28f1CYsPIryFfY.roa
File: qZFf8xBKOBqZq28f1CYsPIryFfY.roa (raw, json)
Hash identifier: c2azlwgqsewfRUN5oiHErUO6fO6RA6AsE7ib1fWtYcI=
Subject key identifier: A9:91:5F:F3:10:4A:38:1A:99:AB:6F:1F:D4:26:2C:3C:8A:F2:15:F6
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3985ECED8F5783A7759853A167396
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/qZFf8xBKOBqZq28f1CYsPIryFfY.roa
Signing time: Thu 02 Jan 2025 01:48:57 +0000
ROA not before: Thu 02 Jan 2025 01:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 85.92.115.0/24 maxlen: 24
160.238.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:98:5e:ce:d8:f5:78:3a:77:59:85:3a:16:73:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9915ff3104a381a99ab6f1fd4262c3c8af215f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:31:bb:9a:5d:21:72:96:38:9d:38:13:15:
1e:cc:cc:4e:3d:c3:7d:39:c7:1b:23:e0:af:b8:2e:
f6:84:0b:74:be:11:2a:d5:b7:58:ac:92:b8:6c:a7:
03:47:86:2a:48:23:55:da:dd:79:df:c2:03:ee:1b:
45:57:ba:60:c7:d7:2d:c2:b8:43:b4:35:91:0f:67:
07:a6:6d:01:a7:46:fb:0b:a8:bb:22:33:9b:87:f5:
d3:4b:d9:fc:58:a8:c6:47:bc:0c:d0:da:c2:c6:58:
52:06:aa:15:49:63:a6:31:f1:5f:e2:d3:94:bc:c1:
35:46:6a:c1:ff:a2:15:50:f6:42:37:a2:bb:a9:8b:
e6:dd:ac:85:fc:84:06:82:80:6b:01:69:ef:38:7b:
75:9c:ce:4c:8e:39:b6:fe:ed:e9:c9:a4:9f:b7:c0:
f8:80:a7:28:a3:ed:08:81:7e:f0:9c:6b:d5:77:89:
a7:cb:d7:5d:75:76:69:de:00:ac:16:cd:1c:77:50:
8b:23:91:05:ef:c5:e5:e2:6c:fd:80:d4:c9:f9:57:
e8:e1:63:90:14:d1:8c:db:3d:a2:7a:63:f9:0f:89:
b2:6d:78:7a:11:2c:11:cb:4b:3e:14:e1:8b:fb:2b:
ab:44:91:22:56:3d:33:e8:1c:46:11:f2:1b:00:ee:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:91:5F:F3:10:4A:38:1A:99:AB:6F:1F:D4:26:2C:3C:8A:F2:15:F6
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/qZFf8xBKOBqZq28f1CYsPIryFfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.115.0/24
160.238.66.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ac:e2:8f:e7:ec:d6:c1:47:a0:c2:63:3b:b0:61:a3:d0:33:
f4:6f:7d:db:95:d0:88:df:4a:93:10:8e:9b:b2:dd:a2:9a:1d:
f7:c2:80:5f:5d:38:da:f5:04:b5:f6:fc:fc:99:91:7f:e6:33:
03:2f:e3:2d:6b:8a:9e:31:96:7c:9e:6d:e9:f0:54:65:3c:81:
a9:19:56:5e:b2:1a:15:6e:a7:a7:2c:92:9f:99:be:6d:a9:d9:
f9:04:c2:03:87:e5:bd:a0:ca:41:1c:7b:ef:dc:d6:ab:d6:48:
a5:68:93:57:5b:2c:98:74:d0:b3:25:5c:13:68:9b:25:0a:64:
f9:90:70:34:10:5b:fa:a8:71:bf:73:8d:c1:46:01:ae:f6:e1:
0b:f5:ec:f6:2b:90:4e:ad:a8:a6:d0:79:11:ed:5b:e2:b2:cd:
10:27:75:7b:36:23:79:b7:b8:6f:dd:91:17:0e:2c:3c:4b:d6:
f8:00:ac:7e:b3:95:05:e9:b2:6c:04:6e:de:2c:50:45:bc:6c:
06:d3:49:ae:15:43:1f:88:9a:f7:b5:94:9e:f9:a6:99:1b:92:
f0:31:73:94:a5:21:11:dd:2a:54:9e:f2:1e:81:c9:33:b6:8c:
cd:ff:b1:20:93:f9:71:20:65:90:79:49:52:6f:ec:1e:5c:8c:
4f:39:bb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:04 2025 by rpki-client