Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/sQpDgOG26LBxAtoQvMby9eHoei4.roa
File: sQpDgOG26LBxAtoQvMby9eHoei4.roa (raw, json)
Hash identifier: iQZWA+KQTMhcXUIcloqSusVcF2CDbPYkOlZRAImPXg4=
Subject key identifier: B1:0A:43:80:E1:B6:E8:B0:71:02:DA:10:BC:C6:F2:F5:E1:E8:7A:2E
Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial: 0194252179E1ED96805F3C36C448CA895C32
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/sQpDgOG26LBxAtoQvMby9eHoei4.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50177
IP address blocks: 88.135.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:79:e1:ed:96:80:5f:3c:36:c4:48:ca:89:5c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b10a4380e1b6e8b07102da10bcc6f2f5e1e87a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:98:02:2a:ea:96:17:a3:b5:11:f1:5c:00:
19:b7:b0:39:8d:a5:ce:74:07:1b:ed:21:db:15:a5:
2e:f8:76:0b:ba:d0:97:45:de:02:2f:b0:5f:b7:21:
0d:fd:1b:de:59:01:da:cb:05:c6:b6:e2:c4:c3:e0:
f6:95:8d:d4:03:2c:48:e2:c6:a8:35:7d:54:ad:f8:
5f:9a:09:f0:9d:15:91:8a:4b:29:28:80:d3:06:c0:
49:63:19:f5:af:4a:9f:d5:eb:35:a7:7c:54:52:a0:
ba:31:fc:d5:7e:f5:b2:bf:10:94:a8:89:b8:f1:98:
54:60:c9:31:c1:06:d2:63:01:9b:fe:ce:52:ba:21:
e3:65:db:63:ee:3e:08:4c:a2:57:6c:c5:cf:c5:89:
93:1a:d6:23:bd:2e:b8:d6:14:9b:0e:45:65:13:14:
82:f6:da:8f:87:00:ad:23:1e:6b:13:ca:5e:21:36:
13:6c:e4:96:49:5a:60:a9:f3:72:53:65:b5:0b:44:
23:be:5a:47:aa:2d:0a:6a:a8:a3:63:db:f8:77:73:
cb:92:06:23:6d:e9:b3:6f:e7:34:31:92:3a:0d:e7:
31:ce:13:d1:6f:07:55:a6:19:8e:77:75:aa:b1:86:
56:cf:f3:53:fa:5c:ae:cf:3a:79:8c:2f:3c:ce:aa:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0A:43:80:E1:B6:E8:B0:71:02:DA:10:BC:C6:F2:F5:E1:E8:7A:2E
X509v3 Authority Key Identifier:
keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/sQpDgOG26LBxAtoQvMby9eHoei4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.32.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f5:5c:19:b5:3c:5b:ed:d6:d9:06:20:23:f4:67:dc:ed:e0:
fa:2b:f1:8c:54:f2:fc:ce:89:56:f3:b5:24:69:0e:18:cb:62:
87:29:fd:1f:35:ea:d0:ab:8a:61:9b:7e:ed:31:94:06:55:12:
06:bf:46:e9:62:8d:c4:5a:75:f4:da:f9:cd:59:9c:f2:3a:43:
00:3c:8a:21:f7:c3:7e:71:4b:9a:84:82:aa:28:48:60:7d:00:
59:4a:01:b5:9c:39:e5:6a:60:9d:cd:23:c3:4b:27:4d:fe:e2:
1d:e0:e8:b0:e1:3a:b2:96:ba:0d:c7:94:92:ff:8a:d4:0e:af:
3d:fc:cc:4b:42:31:43:29:6f:69:89:84:e5:36:29:1d:e7:4d:
b3:b1:a5:4f:1d:74:06:49:25:6b:75:36:f7:cb:91:1d:06:46:
73:0f:3f:dc:98:49:ff:b3:01:0f:af:a8:81:34:66:f0:05:73:
e6:38:ad:ff:32:f4:1b:54:54:e3:41:0c:33:ee:6b:1c:c0:68:
b3:3a:f1:25:51:a8:5f:84:33:38:c6:79:2c:7e:18:4a:bc:c2:
8b:33:53:b2:ba:61:17:8b:1a:b4:5d:ca:fa:42:ac:4c:73:ab:
73:a5:4c:92:bf:26:07:2a:6a:b9:9e:04:5d:1f:56:ca:18:7b:
15:46:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:47 2025 by rpki-client