Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/q9gmiu5dkfmaIXx90tfcomnbItI.roa
File: q9gmiu5dkfmaIXx90tfcomnbItI.roa (raw, json)
Hash identifier: Ws4BYHgfYQqnktG8+fqVGAhDOf16vZm+cpF1UNdcM14=
Subject key identifier: AB:D8:26:8A:EE:5D:91:F9:9A:21:7C:7D:D2:D7:DC:A2:69:DB:22:D2
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0194F3D0941E8CC18A07F4B9035803CF7C63
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/q9gmiu5dkfmaIXx90tfcomnbItI.roa
Signing time: Tue 11 Feb 2025 07:02:00 +0000
ROA not before: Tue 11 Feb 2025 07:02:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43212
IP address blocks: 94.182.4.0/22 maxlen: 24
151.247.184.0/22 maxlen: 22
151.247.193.0/24 maxlen: 24
151.247.194.0/24 maxlen: 24
151.247.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f3:d0:94:1e:8c:c1:8a:07:f4:b9:03:58:03:cf:7c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Feb 11 07:02:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abd8268aee5d91f99a217c7dd2d7dca269db22d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:a9:82:25:b1:25:7f:75:60:43:8f:c3:9d:
f4:2c:b4:46:85:66:14:e0:59:3b:b6:14:47:e3:6e:
33:e3:1b:11:c3:80:87:38:dc:c5:06:28:4d:3c:56:
a1:ed:1f:9f:c5:53:93:18:7f:8b:31:43:70:e9:fd:
4c:f5:95:43:84:7d:74:7d:f2:e7:33:77:4b:29:c3:
c3:54:8d:ad:88:14:68:bb:56:d5:65:6d:12:d0:95:
6c:8a:74:9f:80:00:08:75:d0:f5:3b:08:c9:c4:0c:
81:b0:85:56:dd:69:41:ea:ba:28:40:17:6b:64:f4:
a5:90:0f:56:37:d4:8d:0e:c8:89:92:35:84:77:37:
a2:73:c3:d4:ea:e6:04:20:1b:85:f3:25:e7:13:89:
1e:16:52:05:4d:93:a5:0b:17:c5:83:70:65:24:53:
8a:05:6e:cc:43:1c:cc:97:fd:86:2e:2a:e8:22:69:
f2:69:7c:f1:52:71:12:b8:7b:40:28:14:52:6a:e7:
03:d1:3b:1b:a5:a1:b5:dc:df:b0:05:c3:8b:bf:4b:
cd:f7:14:cb:a7:6b:5b:45:f0:1a:0e:fc:31:17:98:
de:05:d6:ef:63:97:e2:e7:75:3a:33:71:b8:53:c8:
af:a0:21:b6:43:e2:67:aa:82:c8:58:8b:d7:fa:f4:
54:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D8:26:8A:EE:5D:91:F9:9A:21:7C:7D:D2:D7:DC:A2:69:DB:22:D2
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/q9gmiu5dkfmaIXx90tfcomnbItI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.182.4.0/22
151.247.184.0/22
151.247.193.0-151.247.195.255
Signature Algorithm: sha256WithRSAEncryption
47:bf:3f:43:ef:9b:ea:cd:ca:ff:04:30:a1:8f:e0:b3:2c:4d:
bb:12:be:08:77:26:2a:08:cf:f3:2e:a4:d7:6c:08:0b:62:33:
9d:b6:a6:6b:c0:98:1b:2e:8e:5d:02:9f:49:f4:48:a8:ab:52:
3a:c1:e8:08:86:59:f6:a2:f3:59:96:5e:5c:c8:84:3e:b8:5d:
ef:d2:a1:91:c2:b4:56:a9:db:c8:c8:30:1e:ad:9a:8f:0b:01:
fd:03:f1:8c:39:6d:d8:b4:dc:2b:9d:e6:b3:fc:9b:b7:7f:68:
44:69:66:bd:55:6f:be:33:96:f2:f7:70:15:17:61:8d:40:e4:
f6:4a:a5:6c:25:39:8f:db:8c:be:4b:f2:f8:27:3f:5c:20:e4:
76:2e:0b:c1:fb:11:a9:bc:7e:6b:18:60:e2:72:e8:db:7e:66:
d8:07:97:1b:2e:c4:42:92:fb:6b:5c:6c:65:ae:00:4c:89:88:
2c:c2:47:fe:75:de:a6:20:a3:b6:3f:42:64:a5:a1:99:86:1f:
87:a1:14:62:3c:1f:99:4f:73:e0:33:8f:0a:40:23:0a:d7:09:
82:01:f1:7e:12:91:4b:77:2a:51:9d:b5:82:f8:e6:16:42:7c:
83:cc:2d:85:26:61:60:92:d7:0b:cc:58:72:83:ca:86:73:7c:
09:35:76:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:10:01 2025 by rpki-client