Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/qJx6x_1Si80i7zgxLEJabwqPPdM.roa
File: qJx6x_1Si80i7zgxLEJabwqPPdM.roa (raw, json)
Hash identifier: VSNbxo3HViYCFTqzC6xV6bqWlabz9RKcmoeLCtu/aVM=
Subject key identifier: A8:9C:7A:C7:FD:52:8B:CD:22:EF:38:31:2C:42:5A:6F:0A:8F:3D:D3
Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial: 019422FBB2F074E044BE6D91E6531C51A583
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/qJx6x_1Si80i7zgxLEJabwqPPdM.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50629
IP address blocks: 87.253.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b2:f0:74:e0:44:be:6d:91:e6:53:1c:51:a5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764928a97be955377013d382c62940e950dd212b
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a89c7ac7fd528bcd22ef38312c425a6f0a8f3dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:58:37:32:76:e5:a1:97:55:93:1d:ec:a4:07:
4d:4f:3a:7b:d0:34:71:c0:17:55:0f:44:2a:ba:f3:
01:85:e7:74:0b:9a:cb:f5:01:3a:d7:f7:6d:ed:e2:
c1:05:c1:e3:2f:75:01:dd:2c:cb:43:bd:b2:9d:ca:
0b:f2:a0:f2:8b:ab:e7:03:24:ff:de:af:cc:48:2d:
6a:f0:33:9d:a6:de:f2:05:19:b2:c5:6a:d5:54:e1:
3f:62:da:5a:3f:b8:48:c7:06:61:ec:9b:03:51:27:
75:c9:6e:2c:9c:46:da:60:a5:be:a1:a7:76:c4:75:
58:76:ca:29:cd:46:f8:4b:9e:c8:5a:cf:bb:74:db:
20:c0:83:97:a0:80:d7:d1:a8:d5:c1:0e:d5:94:34:
43:5e:97:5d:df:01:7d:c1:9d:cf:39:d6:5e:e9:81:
ed:1a:32:c5:46:e1:00:2f:6e:5b:e7:ad:d0:45:bc:
a0:7c:df:71:16:dd:11:6a:72:b1:2d:83:d5:58:c0:
be:f5:22:9e:50:b9:0a:b3:58:e6:0a:a4:4a:13:09:
3f:dc:e4:03:97:a5:0d:0d:3b:f8:a8:6f:b7:09:2f:
ce:1f:61:b9:21:ca:bc:c7:ba:11:41:09:55:42:20:
fd:d0:75:90:8b:9f:a1:67:54:51:87:6c:03:d3:7f:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9C:7A:C7:FD:52:8B:CD:22:EF:38:31:2C:42:5A:6F:0A:8F:3D:D3
X509v3 Authority Key Identifier:
keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/qJx6x_1Si80i7zgxLEJabwqPPdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.253.189.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c3:65:aa:1d:70:28:56:cf:27:ff:c4:f6:2a:f1:cc:29:a7:
5a:3d:67:52:0d:9d:21:a9:ca:9a:aa:82:aa:bc:10:2e:55:86:
a3:a8:17:d8:84:aa:a1:2c:e5:0c:ff:b1:a7:49:b4:b0:1c:ba:
5b:5b:29:b6:45:43:9f:43:ba:b7:5d:ad:18:29:3f:4a:45:7d:
d5:53:95:84:4f:d2:27:b5:a3:90:c5:34:7f:36:4f:eb:10:6a:
ca:a5:02:8f:7e:9d:93:ad:0f:74:c4:6a:95:0f:48:75:a0:76:
5d:66:f8:d7:32:5d:4b:aa:da:af:b6:2c:e9:fc:a3:ac:74:7b:
a0:71:98:32:2e:29:99:cd:20:cc:60:47:57:72:59:49:a5:3c:
37:6f:3a:52:7f:f6:85:d8:1d:c0:c8:2b:a2:b2:bd:aa:d6:dd:
60:0d:94:c6:c0:f3:da:25:77:2b:62:b0:b1:ae:28:06:e4:00:
c0:1c:ff:e9:81:c4:50:aa:54:91:02:d2:ec:bc:77:6c:87:1d:
25:77:9f:89:77:a2:d0:b3:b2:ed:ec:a3:5e:cc:0e:65:cd:d9:
34:9a:70:25:1f:da:e6:9c:7f:c9:4e:6a:66:ab:35:2f:67:5a:
bd:3a:bf:12:2c:15:ed:b5:b6:c4:73:59:c2:9c:aa:1e:d2:69:
5b:c2:a0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:49 2025 by rpki-client