Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/qGHwRT5XaADoYIFvBSiB_qBc8VI.roa
File: qGHwRT5XaADoYIFvBSiB_qBc8VI.roa (raw, json)
Hash identifier: 1jerdKXo29tvZCLipnWCYRKXmzqu+SKDN+L+wjo2w8c=
Subject key identifier: A8:61:F0:45:3E:57:68:00:E8:60:81:6F:05:28:81:FE:A0:5C:F1:52
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019421B22C9996AEAA70EB1DF61DE3B1DA27
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/qGHwRT5XaADoYIFvBSiB_qBc8VI.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44100
IP address blocks: 95.169.206.0/24 maxlen: 24
95.169.207.0/24 maxlen: 24
95.169.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2c:99:96:ae:aa:70:eb:1d:f6:1d:e3:b1:da:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a861f0453e576800e860816f052881fea05cf152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:62:7d:f5:24:0e:bd:89:eb:b6:53:69:5a:
c2:5d:d6:e2:cb:0c:53:71:b3:d8:04:14:3d:c3:82:
00:a6:60:fd:2d:99:88:ff:23:d3:1d:7b:5c:84:63:
7b:3c:c9:d5:8d:71:68:1f:c9:e6:0d:30:ef:69:29:
9d:83:83:3a:03:7f:57:53:7c:b9:a1:a1:13:f4:97:
f0:08:a1:2f:b2:d7:75:cd:59:9d:a9:bb:54:b1:cb:
3c:f2:76:4a:81:5b:73:7c:b2:ab:85:35:1b:a2:32:
cb:02:8d:2c:67:0d:95:9a:0d:2d:61:e1:58:19:29:
a9:ac:77:b6:71:a9:49:75:29:5f:e5:21:06:0e:10:
05:b9:da:be:f3:1f:eb:4c:00:df:b8:10:d3:43:61:
70:43:0a:d8:d5:8b:63:77:9d:e4:9e:93:76:e2:3f:
49:9d:9d:15:b9:0d:17:41:80:9f:89:34:ed:3e:1e:
7e:06:c6:4d:be:d4:5e:77:5c:ad:66:95:3f:03:99:
d7:eb:dc:04:0a:06:d9:2e:48:28:9e:87:1a:62:de:
6e:7b:44:95:ea:21:e9:a3:ad:1e:6d:9b:73:8d:91:
3f:b6:ca:56:50:dd:5f:ac:89:fa:01:88:5d:b3:5e:
49:5d:6b:59:e5:e4:2c:25:f1:56:52:3e:37:d2:e4:
e3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:61:F0:45:3E:57:68:00:E8:60:81:6F:05:28:81:FE:A0:5C:F1:52
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/qGHwRT5XaADoYIFvBSiB_qBc8VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.206.0/23
95.169.221.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b7:d9:50:00:fd:7c:2c:10:c3:65:ec:f6:35:c9:62:d5:82:
92:aa:97:a9:11:e4:01:6b:5b:e9:42:37:d1:48:db:04:c1:04:
57:7a:be:63:57:7c:a6:34:98:71:95:aa:b8:6a:79:9a:15:66:
a0:a1:8d:54:e5:b8:55:89:d2:85:7d:d2:36:5c:cc:9e:97:76:
26:b5:54:52:3a:bd:66:20:d8:89:5a:be:da:a5:3d:49:a4:e5:
99:89:ca:50:08:e8:07:a1:3f:4f:78:a0:56:df:16:52:c2:47:
51:df:5f:31:73:f4:2e:b0:bf:6f:e8:24:e6:a8:b6:aa:15:3d:
12:71:41:38:fd:cd:4a:cc:4d:99:ea:e7:49:33:0f:ad:6c:38:
28:47:90:c4:2f:31:f6:2c:27:03:ad:3d:16:5b:56:a8:03:11:
9e:7e:be:76:68:39:3e:ef:1b:3c:2c:34:e6:df:99:c4:df:d9:
46:8e:d8:04:d7:4b:7d:8b:cd:04:ff:59:60:4c:fd:45:7b:b8:
d2:5f:73:01:ca:56:02:f1:08:72:2b:95:48:e7:66:8a:af:e9:
a3:df:66:3e:26:a7:e2:c6:0d:4c:ec:0e:cd:64:e7:0c:83:9d:
ce:09:7a:45:96:c7:8a:cb:82:6c:dd:d1:10:77:e5:de:30:38:
b0:91:2f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:33 2025 by rpki-client