Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QH4KeMkKA6ccI8TuPuuIIdL88fk.roa
File: QH4KeMkKA6ccI8TuPuuIIdL88fk.roa (raw, json)
Hash identifier: 80dBHaPxO7jMfbFz54RYu2O/g9/0mDBLh2Dz10O7W6s=
Subject key identifier: 40:7E:0A:78:C9:0A:03:A7:1C:23:C4:EE:3E:EB:88:21:D2:FC:F1:F9
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BF1B37721B1699084B88B54019671
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QH4KeMkKA6ccI8TuPuuIIdL88fk.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205030
IP address blocks: 188.114.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f1:b3:77:21:b1:69:90:84:b8:8b:54:01:96:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=407e0a78c90a03a71c23c4ee3eeb8821d2fcf1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:21:7e:f8:86:71:fc:ad:8d:be:84:8d:51:
de:8b:e6:8e:54:c5:14:ea:ad:1c:a5:99:8f:04:44:
ed:4d:6e:5e:fe:a9:23:49:d6:c1:66:a3:2b:5f:98:
ec:78:df:e7:9c:77:0a:35:e2:1c:5e:a8:13:a4:e8:
8a:b5:1f:45:0b:9a:25:50:82:35:d8:64:37:f0:03:
cb:a5:2c:4c:cd:0a:c1:57:dc:93:d8:e6:6b:b6:a2:
58:26:69:1d:86:d0:32:ed:fb:85:78:28:18:47:6e:
0a:06:b8:cb:be:c2:ab:8d:a0:13:ce:db:c2:33:f7:
20:b8:ac:66:0a:7f:b9:6b:c8:d3:0b:25:c4:0e:f5:
f8:25:80:58:f0:b4:03:8b:32:94:8a:94:77:c4:04:
51:40:34:d3:ee:e2:f2:b0:bb:ef:15:5b:9d:65:50:
be:15:81:9b:4d:67:0c:ee:66:ae:2e:81:1e:96:a1:
dc:be:36:05:e2:2e:7d:95:ba:e6:61:72:d0:b2:2e:
2c:58:74:58:e0:6b:b1:d1:83:94:7b:b8:24:2f:a2:
f1:3e:20:00:d0:10:96:8f:25:0f:3f:65:89:ed:c7:
1b:16:15:9d:d6:87:bb:28:a9:fc:40:f9:7a:d4:27:
88:91:3f:f1:f1:93:47:67:80:f8:2a:5d:ed:49:1a:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7E:0A:78:C9:0A:03:A7:1C:23:C4:EE:3E:EB:88:21:D2:FC:F1:F9
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/QH4KeMkKA6ccI8TuPuuIIdL88fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.88.0/23
Signature Algorithm: sha256WithRSAEncryption
72:75:d2:bb:98:56:f9:b8:9d:d0:37:b4:5f:7d:77:d7:67:85:
bf:67:55:90:41:ae:d5:a3:a5:0e:9a:4b:7c:1f:a8:9f:c8:1c:
97:0f:68:08:52:24:4c:ff:83:a1:1e:0f:e8:c4:2f:85:87:91:
f5:2d:90:7b:99:9f:77:d7:8f:b2:79:ca:eb:54:54:d1:04:f9:
80:0e:7a:c5:75:c1:a1:4e:ff:7c:37:09:0d:76:12:5f:85:41:
b3:29:ac:19:9b:ca:e9:ff:fe:d4:62:ad:65:32:52:89:73:2c:
13:6c:ef:c0:fa:2b:06:46:6f:51:13:3d:6b:6f:3b:3e:27:4d:
24:c5:12:3e:ac:b9:78:c8:73:22:86:b8:9b:ed:7b:2c:a5:e7:
17:ae:89:87:81:52:50:67:fc:8a:db:91:88:9e:4a:b2:78:25:
a6:a6:32:b7:58:22:34:2b:89:2f:1a:d8:8c:fc:5e:aa:9d:21:
aa:d6:1c:41:b5:3c:de:51:ac:3d:1f:a1:36:bb:51:36:18:f4:
14:d5:3e:2d:e5:75:23:17:82:f7:02:86:f2:fb:6d:60:fa:06:
17:07:93:79:93:b4:6e:2b:3c:88:06:80:fd:06:13:08:c5:53:
9c:80:ef:2d:5c:42:13:6a:32:a0:7e:b2:d7:c0:89:5d:8e:d2:
c7:35:26:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:09:47 2025 by rpki-client