Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/qYL6kaPJ2b0Ev5p7Oziqiiv4qTc.roa
File: qYL6kaPJ2b0Ev5p7Oziqiiv4qTc.roa (raw, json)
Hash identifier: WBI5DwkHHee0G2mSopIcnWotDs7K8/Lvby/GArK324A=
Subject key identifier: A9:82:FA:91:A3:C9:D9:BD:04:BF:9A:7B:3B:38:AA:8A:2B:F8:A9:37
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0194236A4456AC7DE79F5099D932FBA006FD
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/qYL6kaPJ2b0Ev5p7Oziqiiv4qTc.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3758
IP address blocks: 45.86.188.0/23 maxlen: 24
80.94.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:44:56:ac:7d:e7:9f:50:99:d9:32:fb:a0:06:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a982fa91a3c9d9bd04bf9a7b3b38aa8a2bf8a937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bc:2d:57:e1:6a:a9:34:61:7e:2f:f2:91:88:
ef:15:90:12:86:09:e6:28:ee:46:08:f1:43:6f:93:
eb:4d:01:7e:49:59:66:d4:71:b0:4c:81:cd:ea:9b:
8c:9a:98:49:ec:b7:0f:dc:ff:f7:f3:f6:3e:d2:1c:
4e:f4:30:c5:8e:66:14:e1:2f:1e:95:20:09:92:d6:
c7:dc:fd:2c:ac:04:d7:ec:2b:40:8d:28:77:0d:d0:
b9:b1:85:74:9e:4c:29:e8:ed:29:da:2b:e7:55:e2:
52:6e:0b:c3:32:0c:d3:76:37:42:83:4f:09:88:c8:
65:7f:cc:02:f2:8a:69:33:4e:04:39:22:9e:a3:c7:
2d:0c:8c:4a:de:3a:0d:36:e8:ab:e8:62:a0:70:46:
a2:56:65:bf:52:1d:99:a6:ab:7c:31:34:dd:4c:fa:
9c:cf:21:c9:2c:01:b5:07:95:7c:39:b8:74:da:ec:
1a:c4:9d:8d:40:fa:07:ca:06:37:a5:2c:64:d6:54:
f4:3b:06:a3:1d:2c:4e:36:15:d1:81:9f:c7:b0:88:
f2:b6:a5:88:ce:60:da:30:20:0b:0b:0d:68:64:fb:
7b:b3:08:61:5b:14:ad:28:2b:27:b2:b7:25:8f:82:
a5:fc:f1:28:ee:6d:06:01:81:c7:11:6a:96:e8:af:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:82:FA:91:A3:C9:D9:BD:04:BF:9A:7B:3B:38:AA:8A:2B:F8:A9:37
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/qYL6kaPJ2b0Ev5p7Oziqiiv4qTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.188.0/23
80.94.89.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f5:9d:c8:af:9a:9c:59:92:cd:3d:8d:03:60:19:48:b6:4f:
21:4a:eb:4e:a9:47:71:c6:6c:f9:95:50:17:6d:5d:4b:02:16:
a1:90:75:7a:12:11:5b:6c:0f:26:8d:2c:57:0c:d3:95:f1:16:
cf:be:97:44:c2:ab:00:6e:42:31:cf:5e:e9:63:6a:3b:59:9a:
00:4d:db:d3:6d:c4:b3:4c:4a:7e:3a:d2:ac:65:22:f1:b3:c9:
8e:cd:4d:2f:56:77:d8:f4:fe:85:56:2d:e5:ce:e3:3e:1b:56:
24:26:db:72:e3:e8:d3:b8:b8:e5:fc:e7:e7:6a:e8:e8:73:49:
cf:c9:b6:c5:bb:16:37:ce:43:2c:6f:78:d1:f0:38:51:40:0e:
55:b1:a6:16:4f:cc:7f:43:93:df:78:f0:f8:36:77:10:b0:4f:
e3:50:01:f5:35:9f:da:bf:8f:2c:96:c2:91:f7:e6:03:35:34:
07:bc:b7:c4:db:ac:8d:fe:3f:65:c1:68:89:d4:fa:ce:50:89:
41:46:87:80:ab:c3:ff:ae:15:b2:c5:c2:6d:8b:fd:92:70:50:
b4:f9:0d:57:d0:14:9c:d2:05:d2:94:ac:99:92:ae:60:52:ca:
00:fb:11:fd:71:89:5c:8e:f6:a5:5c:23:bf:ab:7e:57:cf:98:
ec:72:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:23 2025 by rpki-client