Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/q4OtYqQ5F8toaT0oHQfCemmVpFY.roa
File: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (raw, json)
Hash identifier: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=
Subject key identifier: AB:83:AD:62:A4:39:17:CB:68:69:3D:28:1D:07:C2:7A:69:95:A4:56
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 019428269DAEBB5CE1106827932BFECB5C71
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/q4OtYqQ5F8toaT0oHQfCemmVpFY.roa
Signing time: Thu 02 Jan 2025 17:53:26 +0000
ROA not before: Thu 02 Jan 2025 17:53:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200657
IP address blocks: 194.99.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:9d:ae:bb:5c:e1:10:68:27:93:2b:fe:cb:5c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Jan 2 17:53:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab83ad62a43917cb68693d281d07c27a6995a456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:49:63:03:0c:d7:4a:4e:67:64:87:34:4a:
43:55:68:c2:4e:40:22:fa:b0:19:f8:fc:5a:23:65:
10:d6:6b:cd:14:1b:e4:42:a4:a1:54:19:d1:8c:ff:
55:ad:f1:bd:a2:2d:f0:48:53:29:6f:7f:ea:50:3c:
6e:1e:86:66:6b:a7:be:cc:a8:0e:5a:cf:9a:b8:2e:
c0:95:93:ad:1b:5c:74:da:0f:48:e2:4f:17:b3:0b:
7a:e0:78:d4:2a:3f:f3:1d:95:0d:c5:5c:f0:55:65:
2f:f8:e9:e9:03:ed:68:e3:3e:dc:0e:6c:68:05:95:
60:70:cd:a9:39:f1:00:5a:d6:8b:98:26:db:44:f1:
a4:44:40:7e:67:39:26:49:19:40:8b:df:e8:38:ab:
f4:28:01:50:d4:6f:71:8b:33:2f:1c:8c:fb:fd:a8:
b0:eb:5a:53:d6:8e:eb:6c:db:89:c2:f8:4b:d1:1c:
e0:fa:b4:1f:71:8e:a2:58:c8:5d:86:54:c8:fc:b5:
01:69:7c:af:62:77:16:56:09:93:94:bd:43:c7:76:
cc:25:47:d3:b4:b1:9f:ea:c8:af:c0:aa:9b:ad:ef:
e3:e3:dd:f6:47:ce:d3:27:76:69:45:2a:9e:8b:94:
a0:94:08:89:52:b8:ad:30:ec:7e:80:9d:c2:61:cd:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:83:AD:62:A4:39:17:CB:68:69:3D:28:1D:07:C2:7A:69:95:A4:56
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/q4OtYqQ5F8toaT0oHQfCemmVpFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.108.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:c5:f3:f7:e0:43:ab:fa:9b:b7:5d:bd:bc:f8:f0:6b:91:01:
cc:01:d7:74:09:25:b8:ea:e4:c5:cb:15:fd:3c:b5:e2:22:7c:
83:67:52:13:38:aa:81:a8:34:ef:bf:38:bc:e0:ae:28:31:6a:
ad:7e:16:9f:7c:e8:59:81:f6:93:76:f7:7d:45:f5:f4:85:de:
a9:41:4a:87:0b:b6:6d:3a:39:33:e0:4c:03:7f:26:8e:f1:6b:
6f:0b:7f:a4:ae:86:98:ce:b9:43:aa:73:15:86:73:7f:44:9b:
83:78:87:60:04:b9:bb:0d:3b:cd:bc:0a:68:0a:c4:8c:d4:21:
2c:75:20:ef:e6:f2:13:d9:2d:3a:0e:d8:2a:0d:9b:4a:ae:91:
a6:03:a5:a1:3e:c8:75:48:11:df:07:15:19:1b:43:af:8c:b6:
a3:73:72:cc:9d:9a:5e:b2:ac:e0:27:73:25:bb:69:ec:d6:40:
c4:ba:08:94:bf:71:49:ec:3a:48:41:d6:cf:24:65:e3:29:3b:
1a:80:39:51:5a:d5:ff:4e:df:2f:3a:0c:84:27:b9:ce:45:ef:
af:c9:d3:54:b5:60:b7:67:a6:41:f1:e9:ae:95:f2:1b:52:40:
b7:77:39:f5:02:7f:9c:9c:6a:49:99:47:ab:c8:b4:50:28:d2:
e6:7f:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:46:18 2025 by rpki-client