Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Q1XxIWfgz0Lxs3hCwkDXtTvMhgg.roa
File: Q1XxIWfgz0Lxs3hCwkDXtTvMhgg.roa (raw, json)
Hash identifier: pPWzK4SCEsBri/uYUTQ7uhj5btL6mFbVgn/Ez3mhPNk=
Subject key identifier: 43:55:F1:21:67:E0:CF:42:F1:B3:78:42:C2:40:D7:B5:3B:CC:86:08
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B2359E84101892A5D06ABECAB3A67A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Q1XxIWfgz0Lxs3hCwkDXtTvMhgg.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206781
IP address blocks: 195.136.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:35:9e:84:10:18:92:a5:d0:6a:be:ca:b3:a6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4355f12167e0cf42f1b37842c240d7b53bcc8608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:5d:33:89:27:b9:fe:67:5e:a7:7f:cd:b4:
bf:d5:21:98:57:5f:ba:50:d1:58:80:ec:e4:a1:a7:
ac:68:c6:58:2f:2f:a4:4c:e9:4e:ee:bc:be:78:db:
39:37:1c:1b:28:35:5b:9b:39:8f:5c:53:b5:1a:4c:
32:9c:8f:77:3a:eb:dc:05:b8:e6:6e:fd:ca:6f:8d:
75:6c:af:f7:e5:89:76:84:39:39:32:a3:d3:c4:83:
bd:e5:de:cb:b8:1f:9d:45:ad:8f:91:88:6e:37:68:
cc:d6:9f:2e:a9:d6:d3:88:d6:11:99:e6:2e:93:40:
2e:f8:c8:da:bb:5a:9a:b5:41:96:b4:8c:a2:ef:78:
0f:a3:fc:84:a1:c3:74:c9:cb:59:3a:40:d1:11:7f:
ee:5c:ad:17:49:0e:af:86:fe:3a:92:90:7a:1c:fa:
a4:3b:51:07:e0:96:ed:a2:3e:ef:e5:3d:1f:74:5b:
b0:d7:a8:f3:b4:26:90:ef:0a:9b:87:a5:62:60:13:
f5:e2:de:2b:77:01:7a:26:11:0d:41:94:00:40:c9:
b5:7a:a2:98:83:08:a2:22:52:60:6e:51:5f:21:4b:
32:91:64:c3:8a:fa:73:66:5a:d8:82:ad:88:dc:21:
af:c0:76:74:60:f1:c0:8a:7e:9f:1c:84:b5:c7:1e:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:55:F1:21:67:E0:CF:42:F1:B3:78:42:C2:40:D7:B5:3B:CC:86:08
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Q1XxIWfgz0Lxs3hCwkDXtTvMhgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.28.0/22
Signature Algorithm: sha256WithRSAEncryption
42:0f:8e:54:6a:45:64:57:00:4e:8f:8c:93:73:10:46:58:f8:
87:cc:8b:90:6c:be:1a:a6:53:ec:0e:c9:40:3d:8f:3f:da:b1:
9e:11:a8:f7:06:06:fb:28:54:44:48:b4:33:7c:90:09:09:4a:
1a:1b:b0:cb:af:6d:a6:8a:97:0d:3a:01:38:a5:57:dc:65:1e:
fd:79:58:3d:3e:ee:95:ed:aa:e2:01:50:15:54:9d:2e:40:d5:
e7:4d:cf:56:29:71:2c:77:08:06:51:c5:96:9d:99:55:03:be:
31:8c:57:dc:80:9c:66:b6:1c:9f:a3:61:d6:9a:ac:cd:0d:18:
4f:c1:d9:dd:9b:83:a6:85:b2:91:7c:81:22:4a:8f:dc:6c:7f:
a5:35:15:93:85:44:c2:17:f9:7e:f4:e0:70:fb:aa:df:69:03:
89:aa:1e:0d:ff:38:ca:4c:c2:63:8e:c0:70:f9:87:df:39:6a:
b7:46:cd:8c:83:ac:19:b2:91:40:2a:70:07:dc:90:87:e4:f3:
74:bc:86:8a:96:c3:17:2f:69:71:58:4e:47:d8:12:d8:0f:be:
3f:6e:69:a9:dd:7a:8b:cb:e0:f7:a8:6b:43:f6:83:33:11:45:
df:fa:b5:07:bd:90:72:8f:52:cb:2f:94:b3:ce:c9:fd:85:52:
e2:03:fb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:40 2025 by rpki-client