Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/qNoTgo75uHZdX7Pw5KIkSMbCuIk.roa
File: qNoTgo75uHZdX7Pw5KIkSMbCuIk.roa (raw, json)
Hash identifier: Wp90B7y4b1beWFho9S7pJxCTTLLhfUdptb3Ax7iQwmA=
Subject key identifier: A8:DA:13:82:8E:F9:B8:76:5D:5F:B3:F0:E4:A2:24:48:C6:C2:B8:89
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 0194221FC1E9C623170C89FF80F5D6D6AD1B
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/qNoTgo75uHZdX7Pw5KIkSMbCuIk.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35372
IP address blocks: 194.50.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c1:e9:c6:23:17:0c:89:ff:80:f5:d6:d6:ad:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8da13828ef9b8765d5fb3f0e4a22448c6c2b889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:e0:7f:1e:67:fb:a3:92:b6:8f:5f:db:bd:
b5:2c:f1:8f:18:a4:8d:2c:d2:aa:c5:96:a3:68:8f:
f5:34:8e:70:92:4a:5b:04:8f:d4:cc:8b:1c:d0:fb:
7c:19:41:78:34:fb:e5:a9:4c:8f:5b:d1:1f:bc:e4:
ee:6c:d7:eb:ab:a6:7c:7e:1b:9f:74:e9:71:b9:3e:
7e:50:75:ee:60:c0:12:ac:31:62:0d:24:13:12:ae:
35:f6:c3:0e:38:10:b6:c9:2d:dd:b4:38:37:92:8d:
b4:2d:f2:fa:f0:bd:6e:2b:91:0b:38:20:bd:3e:6e:
a9:a8:6e:19:be:0c:59:04:11:a6:79:7f:8d:23:24:
0d:a5:73:3c:8e:ef:39:f6:54:7e:38:48:8a:89:44:
d3:ba:9c:24:eb:02:ba:d0:6c:e0:1b:53:ed:ad:39:
ad:0c:d8:1e:8a:4e:32:55:5e:d4:6b:c0:38:68:ba:
1e:a9:d5:92:2b:9e:8b:e6:ef:78:77:e2:12:cd:15:
b5:1e:f5:ca:23:33:5b:14:7e:1d:d9:2e:50:f3:bb:
47:71:36:57:cd:0e:74:ed:88:87:c1:51:fd:80:23:
2f:a9:af:30:5c:d0:18:eb:5e:ba:1e:d7:19:06:d8:
1b:d3:6c:51:41:63:4e:0d:6f:17:99:59:a9:01:59:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DA:13:82:8E:F9:B8:76:5D:5F:B3:F0:E4:A2:24:48:C6:C2:B8:89
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/qNoTgo75uHZdX7Pw5KIkSMbCuIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.169.0/24
Signature Algorithm: sha256WithRSAEncryption
23:70:5d:7e:81:08:12:a2:b8:5b:f0:92:46:3d:16:74:c6:ec:
b4:ac:2e:b6:57:80:97:ed:20:42:96:4e:72:23:41:52:3a:cc:
08:a2:2a:02:6b:f5:5e:28:8b:60:da:d5:95:81:b7:ba:e6:c8:
23:dd:3a:e2:d4:6e:3f:a7:82:ee:a8:03:6e:08:d2:97:b4:fb:
bd:af:7c:5a:cd:83:19:f4:f0:17:35:71:4b:23:ea:23:3b:30:
6d:c0:8d:1d:1f:21:43:27:76:6b:f5:d9:2e:53:3e:db:1f:5e:
89:f3:84:46:89:41:c3:db:3a:87:a4:c8:42:94:58:3a:42:33:
f8:dc:e4:bc:18:3c:75:b4:27:ab:bf:7e:10:3f:15:0f:43:12:
72:73:4c:69:f9:5c:9c:6f:49:9c:79:3b:ea:2a:14:d3:21:2f:
d1:fc:cd:40:77:c5:9e:83:95:55:a3:c5:4d:7c:96:65:ab:97:
3c:a6:ac:ae:52:fb:e7:17:e3:90:5b:0d:c1:e2:7c:4a:67:e4:
05:25:49:31:df:40:a9:20:d4:78:6f:99:47:11:04:a0:af:a2:
5a:69:29:13:f2:5f:c1:18:c7:12:c0:3f:ae:41:ab:c2:14:db:
ca:2f:cd:31:c1:94:21:1b:2b:77:10:4d:3d:7e:12:48:ed:43:
90:ac:1c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:34:34 2025 by rpki-client