Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mQIK4DRRyK_txzcOhXQ_7tTNrq0.roa
File: mQIK4DRRyK_txzcOhXQ_7tTNrq0.roa (raw, json)
Hash identifier: RqB4muugu/iYft6UOeB9p+mGT51neCrk9UovrvMQo6E=
Subject key identifier: 99:02:0A:E0:34:51:C8:AF:ED:C7:37:0E:85:74:3F:EE:D4:CD:AE:AD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195A35EC0194464B3E1878222CF09C9685B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mQIK4DRRyK_txzcOhXQ_7tTNrq0.roa
Signing time: Mon 17 Mar 2025 09:10:50 +0000
ROA not before: Mon 17 Mar 2025 09:10:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 146.19.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:5e:c0:19:44:64:b3:e1:87:82:22:cf:09:c9:68:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 17 09:10:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99020ae03451c8afedc7370e85743feed4cdaead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:29:94:7a:06:6f:3d:19:c4:c4:03:e7:1f:
bb:8b:ca:1d:5e:59:b1:7d:95:3e:8f:fd:15:04:0d:
fa:7e:23:02:d4:04:7d:67:95:9b:72:48:8b:cd:c9:
f7:f4:0a:fa:23:a9:05:4b:d7:55:dd:2c:80:15:85:
76:bb:e0:27:53:2e:84:11:14:37:d1:e0:db:0a:fe:
60:d5:1c:ec:25:00:cd:f8:d1:0c:81:13:d4:c8:6e:
a3:e7:7d:f3:08:5f:32:19:5d:8d:68:c0:cb:a7:e4:
66:e6:d2:d3:c8:04:21:24:45:71:27:d4:e5:1b:a5:
d4:5f:f9:65:4f:1f:6f:1f:b0:c0:5f:08:44:f4:47:
7e:75:32:b7:c9:87:27:2b:58:2c:e9:6e:2f:eb:17:
7f:1e:c5:93:1b:64:9e:73:cd:86:54:64:97:a7:eb:
a6:91:a8:62:e1:c3:cd:30:fe:10:43:71:0b:29:36:
78:c3:26:48:38:95:3c:09:77:e4:68:d6:20:79:da:
be:cb:bb:9f:61:62:d0:f4:01:32:6d:cf:a6:49:f8:
0a:cb:70:ce:3d:31:d4:1e:29:6b:bb:68:74:64:d8:
50:be:57:b9:db:15:7d:60:35:cb:76:07:47:21:d9:
a4:49:89:0c:68:87:0f:10:4d:92:75:f4:5b:5d:8e:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:02:0A:E0:34:51:C8:AF:ED:C7:37:0E:85:74:3F:EE:D4:CD:AE:AD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mQIK4DRRyK_txzcOhXQ_7tTNrq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.102.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e4:86:5d:cf:3e:ac:ed:01:2a:c2:95:ef:d2:be:05:8b:c0:
63:da:8a:5e:a9:b8:ec:82:57:2c:76:18:9d:15:93:33:55:8a:
31:91:05:d0:c8:c9:a6:71:16:b9:24:62:da:b5:a5:31:1f:10:
90:e6:ab:36:f4:a6:00:ec:df:25:6c:d7:cd:db:5f:09:bb:fb:
e5:fe:45:b3:71:a1:ad:a9:c9:8e:a8:7a:fe:e6:fc:48:a5:79:
a1:23:d1:a3:2a:ff:90:8e:c5:9f:a0:5c:17:4f:9a:81:f2:41:
3b:0f:2b:0f:b5:d3:93:07:91:40:0c:39:2c:b1:a6:a9:55:56:
17:47:03:f0:5e:d5:6f:f2:ae:e2:20:59:91:f2:4a:b5:5c:62:
d3:ee:53:ee:7b:0d:17:8c:6b:f0:7c:b3:50:96:47:50:2d:42:
ce:21:59:b5:35:ce:f0:e7:1f:fe:cc:99:58:c2:81:82:f9:dd:
5e:76:e7:f2:7e:8a:3f:0f:e0:e0:6d:cc:43:1f:fa:3c:55:9f:
da:21:c7:ae:8f:80:14:5c:e6:12:e1:ae:24:f1:86:f6:86:9e:
2a:b6:30:19:ce:c6:5f:73:7b:9a:85:65:08:d3:a4:70:e5:3e:
07:51:af:0f:29:fe:1f:1b:52:94:09:5e:87:33:dd:2f:62:81:
26:8b:f8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:16 2025 by rpki-client