Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/kZQj5c3qTbDNst6FPmlVFTJBwU0.roa
File: kZQj5c3qTbDNst6FPmlVFTJBwU0.roa (raw, json)
Hash identifier: OVYrhsG4NKJtVB+RFz2IORzGEYajNg4HBNGBwkD+aFg=
Subject key identifier: 91:94:23:E5:CD:EA:4D:B0:CD:B2:DE:85:3E:69:55:15:32:41:C1:4D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 019424B3F761C2C9ED8AEC765A20456C8DF1
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/kZQj5c3qTbDNst6FPmlVFTJBwU0.roa
Signing time: Thu 02 Jan 2025 01:49:21 +0000
ROA not before: Thu 02 Jan 2025 01:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15704
IP address blocks: 185.252.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f7:61:c2:c9:ed:8a:ec:76:5a:20:45:6c:8d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Jan 2 01:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=919423e5cdea4db0cdb2de853e6955153241c14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4e:4a:37:07:28:a1:c6:e9:22:8f:25:e0:d8:
e7:e0:93:6c:55:1e:e5:b2:07:19:7b:c9:b9:c2:e6:
96:56:7a:bf:83:64:c2:86:30:ff:29:bb:24:b7:66:
9e:06:fc:14:23:bd:8b:cf:0e:e3:86:6a:2c:f4:92:
ec:25:90:7c:db:a9:fb:4f:11:d4:70:31:9a:d2:fa:
45:bc:9f:4b:ef:51:f4:73:17:aa:9d:85:06:a6:d4:
df:00:1b:b3:9f:88:f4:9b:3b:61:c3:38:fb:3b:d7:
42:d9:cb:a6:61:b6:c2:9a:09:25:96:f3:67:c2:c8:
a0:5a:ed:ee:db:f0:42:f0:fa:06:72:a0:b5:96:0a:
ce:7e:01:3f:c1:ab:e5:69:9f:99:2f:85:13:09:12:
13:00:c3:b7:3c:64:f5:50:a5:33:7a:23:de:da:8f:
95:93:42:ab:21:30:09:af:b2:a2:01:8d:b0:19:f6:
99:e5:65:19:ab:db:8f:84:1b:31:a5:6a:b4:ac:46:
ce:c0:a4:42:02:97:94:40:8f:2e:7e:ec:8f:02:0c:
8f:89:62:3f:39:b9:83:e1:99:22:82:15:85:87:0e:
5e:ff:1e:69:fb:6d:4d:73:b9:13:29:fa:dc:38:f0:
86:fd:85:73:bd:67:29:5a:98:89:24:a8:90:04:54:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:94:23:E5:CD:EA:4D:B0:CD:B2:DE:85:3E:69:55:15:32:41:C1:4D
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/kZQj5c3qTbDNst6FPmlVFTJBwU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.4.0/24
Signature Algorithm: sha256WithRSAEncryption
66:09:80:f5:e8:94:a9:94:3d:97:3a:12:33:58:8f:86:67:ef:
fe:f7:63:08:bc:06:9c:3d:e4:d3:ee:0b:0a:93:d3:71:c6:f7:
e3:45:f6:96:e6:2c:a2:68:90:19:ba:98:b6:dd:0f:bf:58:3f:
93:a7:e3:a5:2f:40:c7:dc:a8:8c:5f:ae:0c:dc:1e:81:15:3d:
96:99:d2:c1:2d:ca:f1:cf:f2:96:da:8b:07:62:be:3f:ce:6f:
58:64:85:a0:a6:e4:6e:ab:be:85:ea:7f:77:54:68:7f:df:27:
c3:74:b4:2c:2d:78:ff:a0:10:27:77:ab:75:3a:69:39:94:74:
be:a2:64:0c:7d:f3:6e:07:b2:77:07:31:61:95:82:db:7c:4d:
f2:1b:e3:d8:3a:3e:f4:96:9d:fd:b2:ef:42:aa:a3:af:4d:ea:
0d:4c:78:96:6d:79:18:32:a6:d5:ad:00:60:15:47:56:d9:72:
06:5c:09:79:8c:fb:09:cf:1b:36:0e:47:6a:0b:d3:7e:42:96:
a7:ea:1c:7f:fe:4c:68:c1:65:7e:67:f9:37:a0:e1:27:67:b0:
1a:24:7b:b6:62:93:ca:7b:1b:77:17:b0:c4:ed:39:13:b4:60:
90:83:e6:44:c4:4b:00:68:c8:d8:ef:ad:23:ef:59:39:74:ba:
db:53:ef:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:03:47 2025 by rpki-client