Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/q0KPdQxHZ32p-y_7jyX_NPRJzfc.roa
File: q0KPdQxHZ32p-y_7jyX_NPRJzfc.roa (raw, json)
Hash identifier: CKPCi8CYeuqnM7wHdIHtTdCYl8swdX/5qywFSH8mvFo=
Subject key identifier: AB:42:8F:75:0C:47:67:7D:A9:FB:2F:FB:8F:25:FF:34:F4:49:CD:F7
Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial: 019423D6E2AE4A4974EC472D024F587230C3
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/q0KPdQxHZ32p-y_7jyX_NPRJzfc.roa
Signing time: Wed 01 Jan 2025 21:47:52 +0000
ROA not before: Wed 01 Jan 2025 21:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 176.241.80.0/20 maxlen: 24
185.54.158.0/24 maxlen: 24
185.129.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e2:ae:4a:49:74:ec:47:2d:02:4f:58:72:30:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab428f750c47677da9fb2ffb8f25ff34f449cdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:10:ac:b4:57:98:35:b1:2e:11:47:4b:f5:40:
40:77:61:2d:5c:dc:e6:22:ac:88:70:7b:21:14:e5:
aa:3b:d9:59:ef:6e:f4:a0:1c:18:e8:0e:77:d5:52:
6b:8f:e8:24:e6:d5:61:89:2b:19:25:8f:1f:f0:6b:
08:65:db:a3:a3:c5:31:62:33:85:74:df:c7:ef:f8:
0b:f5:d0:57:d7:b6:50:71:c5:4e:80:41:58:2f:bc:
ff:c5:a0:9e:02:4d:b6:13:c8:0c:93:48:f3:05:00:
e6:4e:9e:58:57:54:96:65:ec:3d:d3:02:64:58:4b:
ad:ad:83:01:12:f9:c4:a0:ae:1f:01:ca:da:a0:4a:
ee:80:4e:f2:c4:24:fc:02:54:b4:27:76:df:d5:c8:
2c:4e:1a:6a:b1:4a:f0:07:fa:0f:50:24:af:f0:8a:
5d:d9:ab:56:6f:c4:d4:57:5a:88:70:24:1f:d3:44:
ea:3f:90:19:23:da:35:02:bc:b2:f4:d0:59:b8:51:
77:ab:83:2e:dc:cf:8d:a3:d9:27:67:43:cb:cc:12:
ba:bf:f3:1b:28:be:1b:f1:19:0b:55:15:5f:76:47:
3d:75:5e:ff:c0:21:d3:54:c4:80:ca:ca:ac:2f:84:
2b:80:5e:33:05:fe:90:df:2c:09:62:11:5a:44:25:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:42:8F:75:0C:47:67:7D:A9:FB:2F:FB:8F:25:FF:34:F4:49:CD:F7
X509v3 Authority Key Identifier:
keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/q0KPdQxHZ32p-y_7jyX_NPRJzfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.80.0/20
185.54.158.0/24
185.129.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:08:aa:ce:bc:54:91:90:0a:0f:e1:d5:17:71:38:d9:06:b8:
5a:39:5c:8b:2b:1d:ec:20:19:0c:aa:c8:b1:be:99:c3:fd:25:
0c:45:2b:69:52:44:2e:fe:d4:f6:2a:9d:cb:48:b9:d4:7c:8d:
2a:dd:cd:e4:89:c4:50:e3:ac:4b:b5:27:b0:72:e1:ab:05:b0:
32:e5:e6:29:ef:e9:75:27:8f:15:55:c5:b0:17:5d:58:3b:f2:
b8:d9:35:ef:b2:1b:2a:d3:c8:6c:f7:1a:44:02:6a:13:55:41:
c7:93:36:fd:ca:45:45:4c:7b:f4:16:fa:96:ca:7c:a4:ea:d3:
9e:73:c7:0b:e6:21:89:1a:fb:62:bd:ce:9c:64:ea:1d:0f:b0:
40:40:8f:aa:95:a6:d3:ea:6f:e6:5a:a9:28:fb:dc:4a:a7:e2:
a7:5f:a6:4d:b5:8a:d6:3c:2c:8c:0b:9b:3d:21:75:48:e3:01:
5e:56:a2:90:cd:f9:16:1c:ab:b5:3a:68:99:cd:6d:0e:38:1d:
05:f5:6f:c2:32:c2:b5:90:ed:8a:c6:da:43:76:cc:2c:c6:d4:
20:05:6d:12:3e:0b:b1:43:42:34:34:91:3e:ae:4d:b0:b3:8a:
68:58:8a:9f:3f:eb:c5:8c:9a:5d:c5:7c:d3:f1:2e:fe:98:ca:
10:4d:ef:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:36:33 2025 by rpki-client