Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qYdapCC0QfWleZkHEZLeHgFv-jU.roa
File: qYdapCC0QfWleZkHEZLeHgFv-jU.roa (raw, json)
Hash identifier: PQatrdgHeGssmpljNSvStw9x0JkIMZX8zgVXZGI/neo=
Subject key identifier: A9:87:5A:A4:20:B4:41:F5:A5:79:99:07:11:92:DE:1E:01:6F:FA:35
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01942827581138702B460D924BD44A45322E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qYdapCC0QfWleZkHEZLeHgFv-jU.roa
Signing time: Thu 02 Jan 2025 17:54:14 +0000
ROA not before: Thu 02 Jan 2025 17:54:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 212.192.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:58:11:38:70:2b:46:0d:92:4b:d4:4a:45:32:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9875aa420b441f5a57999071192de1e016ffa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:5b:9c:57:64:c8:84:67:4f:f0:27:46:62:
42:4e:60:f9:ae:a4:4e:3e:8c:7a:a1:66:e4:cf:4c:
7a:04:3b:b7:50:07:a8:7f:3f:79:60:dc:6f:21:1b:
88:8e:dc:5e:0a:16:db:8b:32:d7:df:f1:26:87:dd:
f9:f2:73:64:69:85:a9:ac:db:ee:2b:0c:ed:d3:52:
f6:11:e5:96:2e:38:52:16:6b:23:5a:4c:4b:f1:c9:
fa:a1:61:72:20:71:f9:39:b8:8d:2a:70:40:c7:e5:
8b:fa:94:80:ef:44:f2:39:eb:eb:01:5b:6b:d4:0b:
52:5a:a7:b8:01:49:9f:20:3b:61:5c:75:82:52:34:
1f:ad:0a:14:f2:03:95:75:f0:91:68:18:a8:66:4c:
46:19:05:ce:f0:86:89:59:33:8d:8b:62:d6:ae:4a:
0f:50:15:24:46:a4:06:ed:10:07:a2:c8:d7:4d:46:
e2:71:e4:62:3e:13:c9:65:b0:54:5b:ff:0c:44:b8:
3b:94:9f:59:9d:41:6c:46:fb:5b:d0:e9:04:ba:d8:
48:41:6f:d7:26:a7:74:07:8b:b3:5c:d6:de:4d:0b:
8a:81:89:a7:6a:7b:f5:d5:49:70:c5:25:dd:15:b9:
1b:94:df:e0:c2:29:2e:71:53:a2:d2:5a:1e:b4:04:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:87:5A:A4:20:B4:41:F5:A5:79:99:07:11:92:DE:1E:01:6F:FA:35
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/qYdapCC0QfWleZkHEZLeHgFv-jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7b:ab:1f:bf:9a:d2:27:44:77:29:57:ae:f8:7c:f4:bf:51:
33:4e:30:ac:63:9f:d0:d7:ac:1d:7a:c1:18:13:c1:44:72:87:
a3:65:e8:a1:7a:6f:11:ad:20:0c:46:e6:57:28:74:ae:d7:43:
9a:24:c1:da:dc:e7:38:0f:ca:09:18:be:bb:21:ff:3e:73:39:
09:0f:42:d4:4d:38:e3:23:01:86:14:f9:0a:15:14:41:f9:3d:
70:76:5a:08:99:ec:79:67:fd:e7:1b:71:f2:b1:40:88:e3:6f:
f6:62:04:b2:86:56:e2:64:76:f1:72:dd:6a:89:c8:11:64:38:
0f:67:aa:3d:a9:ac:d5:cf:95:6b:08:c4:e5:9a:ad:02:1c:ba:
99:5a:1e:75:b8:de:bc:16:12:e2:fa:7a:f2:5e:55:64:f8:66:
b3:79:16:90:29:a8:8e:ed:e9:85:0f:75:60:40:25:0a:82:64:
87:f8:ac:b3:94:ca:94:b8:f2:4a:d7:b1:1d:e9:8a:18:55:70:
23:1b:13:f2:8a:28:e6:c2:8c:08:25:d1:71:bd:5d:b4:f5:f2:
42:2c:8d:be:1f:bc:d8:a9:e4:39:41:a6:f1:f3:17:53:70:26:
fb:be:32:b7:3d:07:1b:33:e4:38:c0:e1:19:18:db:8c:a3:1f:
85:db:b3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:52:49 2025 by rpki-client