Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/mqtsWJibubOVypqw-u05KLI93nU.roa
File: mqtsWJibubOVypqw-u05KLI93nU.roa (raw, json)
Hash identifier: 7WKg9LvoBLX4kwpt6iB1X6f3fanjFzCr92ATRfNgT7U=
Subject key identifier: 9A:AB:6C:58:98:9B:B9:B3:95:CA:9A:B0:FA:ED:39:28:B2:3D:DE:75
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BEB36D0A734E7B7951A1D43A5AF2E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/mqtsWJibubOVypqw-u05KLI93nU.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200745
IP address blocks: 193.192.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:eb:36:d0:a7:34:e7:b7:95:1a:1d:43:a5:af:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9aab6c58989bb9b395ca9ab0faed3928b23dde75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:36:c4:53:85:a8:81:6a:36:2f:60:9a:a9:
0d:8a:99:7f:f8:b8:52:28:a3:32:f8:3f:75:d4:14:
73:d3:92:2c:e9:8d:36:c5:ec:07:de:53:ce:f8:7e:
90:4e:e7:42:80:e5:cc:a4:dc:6f:f6:dd:c0:f8:fc:
b3:75:7d:bf:a6:85:c8:22:8b:c2:da:53:0b:db:3d:
49:23:1a:06:3c:70:a1:79:09:53:b8:00:90:b5:6b:
5f:f9:14:a0:90:38:36:44:b5:4b:9a:61:c4:70:33:
9e:87:81:0a:e9:41:ba:55:a2:60:d6:46:6a:cd:22:
6b:96:8f:99:27:a3:28:b3:fa:51:ad:49:23:77:90:
58:cb:78:0f:d5:bd:b5:ea:fa:86:aa:87:64:2e:74:
0d:24:f6:94:2a:6f:9d:e1:78:9b:5a:94:40:ab:c5:
23:fc:a5:12:f2:b3:d0:5a:48:38:a8:29:9b:62:60:
b2:e5:87:0f:4e:e0:c2:70:c3:9e:86:e3:15:36:f9:
87:f5:57:bc:76:87:96:ac:43:a0:7c:cc:13:f1:fc:
80:a0:b7:6a:c6:02:45:79:1c:dc:a6:f7:73:58:3a:
a9:24:a4:71:cb:5b:b5:17:f7:f1:fa:82:5b:e9:a8:
30:83:75:b0:8e:54:b8:6f:9c:aa:39:66:42:b7:ba:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AB:6C:58:98:9B:B9:B3:95:CA:9A:B0:FA:ED:39:28:B2:3D:DE:75
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/mqtsWJibubOVypqw-u05KLI93nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.165.0/24
Signature Algorithm: sha256WithRSAEncryption
88:74:78:dd:05:48:2c:89:6c:f2:f1:7c:48:c1:74:bf:1e:8c:
b2:02:4f:4f:78:7f:e9:3e:69:ca:41:99:c6:83:6f:31:eb:f5:
77:5a:c8:8f:1d:4a:cf:cb:aa:65:9f:b6:e5:b8:4d:35:fd:0c:
ed:b6:12:71:26:e8:50:09:6f:77:c0:ae:df:b5:9a:e6:28:a0:
29:77:54:e6:c7:4f:8d:f2:22:88:12:69:3d:8c:39:31:cd:0c:
01:c1:22:60:fe:89:22:e5:2e:8d:c5:f4:3b:37:8e:55:28:c2:
fd:02:01:43:87:80:40:34:d3:5e:34:21:36:32:30:d1:2a:c3:
31:95:06:d8:d6:65:5b:70:b6:f4:3c:6c:84:6c:ab:ed:0a:33:
a1:3e:c3:e3:f5:75:bc:6a:f2:ed:97:1b:7d:b9:e9:85:dd:82:
3c:eb:84:a8:7a:57:9f:19:bd:eb:34:70:f9:f2:f4:be:ad:ec:
f7:17:df:f1:f5:55:6c:64:e6:02:af:4f:c4:49:33:14:58:d7:
07:bf:be:39:99:9e:b8:05:01:08:a0:1b:1d:de:a6:ab:67:c1:
75:25:26:2b:d8:73:e7:6b:dd:cb:18:1d:cb:d0:2c:0b:d8:16:
ee:9e:e0:f7:44:c7:c0:1e:ff:62:93:8c:df:0a:30:ce:5f:7e:
e7:33:77:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:24 2025 by rpki-client