Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qGKRT7iMk0qKqOtnl_3YKouu8gM.roa
File: qGKRT7iMk0qKqOtnl_3YKouu8gM.roa (raw, json)
Hash identifier: rcWsJNutxgkDA1/5eNfvZtF7TAeC4src7p5px7FkSbY=
Subject key identifier: A8:62:91:4F:B8:8C:93:4A:8A:A8:EB:67:97:FD:D8:2A:8B:AE:F2:03
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BE19740EBABAAEFE13252190319FA
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qGKRT7iMk0qKqOtnl_3YKouu8gM.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198489
IP address blocks: 178.16.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e1:97:40:eb:ab:aa:ef:e1:32:52:19:03:19:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a862914fb88c934a8aa8eb6797fdd82a8baef203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:46:61:0d:9e:3e:c2:16:6f:56:4d:b1:31:
f5:9d:ea:96:7b:4b:13:7f:ee:10:70:b9:fb:a3:b7:
7b:f5:01:1b:f2:18:59:63:c5:1b:26:b0:4e:f4:84:
46:04:46:86:22:b2:15:cb:a7:e9:9d:dc:23:0a:ce:
4d:e9:3a:22:23:c4:fd:ba:9a:65:b7:77:bb:92:fa:
ea:75:79:0f:d5:1f:b4:6d:61:93:cd:cb:74:50:7f:
a6:61:6f:fa:ae:9e:1e:10:56:81:1e:99:83:68:9f:
1c:04:24:b5:85:49:ea:6c:34:4a:08:b5:70:fc:04:
88:29:6f:71:5e:88:75:e4:e7:d9:ee:c2:6f:c4:06:
dd:48:ba:63:00:fa:4b:66:55:10:bd:e4:ce:aa:43:
10:ee:83:6d:d2:4f:11:81:9b:3f:35:0e:19:bd:3b:
c4:9d:be:f3:db:e1:fb:c4:eb:e0:19:1c:64:c3:99:
11:24:5f:a7:f0:d7:0f:ee:00:93:fc:49:11:ca:a4:
ed:d6:e2:c0:79:3d:8c:66:38:93:bd:3f:03:95:26:
87:51:18:49:a7:1f:7a:89:8e:2b:cd:22:f9:67:25:
d8:6d:0f:54:9b:05:cc:6d:60:ba:58:be:9a:01:40:
4c:15:2b:03:61:9e:a0:9b:e0:aa:12:2b:fd:c3:96:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:62:91:4F:B8:8C:93:4A:8A:A8:EB:67:97:FD:D8:2A:8B:AE:F2:03
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/qGKRT7iMk0qKqOtnl_3YKouu8gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.118.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ed:b9:f2:2e:6a:08:bf:73:06:d7:29:55:45:da:9c:b6:23:
8b:4d:5e:af:cf:ac:bf:df:d9:b9:d8:0e:42:ff:ee:8f:4e:c9:
59:86:a8:cb:10:a0:70:eb:3f:50:5c:83:95:bb:08:bc:77:21:
2b:98:2d:22:89:23:29:a0:bb:8b:79:96:cb:ea:d6:4a:de:00:
bd:20:df:24:ff:1b:a6:eb:97:5f:0d:49:df:79:de:72:8b:22:
68:c0:a3:bb:40:67:c7:8d:fe:4e:65:9f:2e:ad:22:e6:3f:d7:
a7:e9:69:ce:43:b3:47:a6:2c:41:25:c8:29:d2:9d:9f:37:c4:
fb:40:49:22:e8:b9:e0:97:98:71:3a:6f:18:65:7c:df:c6:dd:
1f:01:bf:77:cf:d1:08:5e:3f:b5:7b:ac:1b:17:43:77:8d:68:
e3:a9:e7:f8:87:c9:90:2e:72:15:80:0b:b8:45:3a:60:87:a9:
c7:c5:a9:f8:b0:93:ce:91:d9:0e:b6:79:ba:9f:a6:1b:90:e5:
82:6c:80:a5:14:c8:3b:c3:38:2f:ae:68:39:e1:39:d4:83:4f:
f5:9a:86:ba:3c:23:06:e1:db:8c:7f:02:d7:d2:f4:0f:06:ca:
f3:cd:5d:ee:02:d6:b5:9e:b0:5c:5f:8e:85:ea:e6:65:f1:67:
23:42:3a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:15 2025 by rpki-client