Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/q2ZLX08w7-Dcrgr57h1hgcnfkXY.roa
File: q2ZLX08w7-Dcrgr57h1hgcnfkXY.roa (raw, json)
Hash identifier: uFC0sIXPmgIMFYS0E5zDcKQoPca0pnQPm/3b/35uS2M=
Subject key identifier: AB:66:4B:5F:4F:30:EF:E0:DC:AE:0A:F9:EE:1D:61:81:C9:DF:91:76
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 019421B24A4C4C4FFE28D1D91F9F098FD680
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/q2ZLX08w7-Dcrgr57h1hgcnfkXY.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60207
IP address blocks: 193.105.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4a:4c:4c:4f:fe:28:d1:d9:1f:9f:09:8f:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab664b5f4f30efe0dcae0af9ee1d6181c9df9176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:e6:c1:f2:a1:70:3e:59:43:c6:fc:f8:ee:
d2:fa:8b:c2:c4:e7:aa:c2:1f:3b:01:2d:84:01:78:
18:8c:33:79:1e:54:88:cd:83:61:4b:1f:fd:b6:22:
1d:7b:17:b9:0e:9e:f5:57:fc:da:0b:c8:7a:50:0f:
a3:60:49:c1:c5:53:99:45:d8:e2:2c:1b:0d:38:ce:
b5:34:71:7b:e8:bd:5c:e1:82:80:bb:53:7f:b6:65:
56:11:55:a1:04:93:47:3c:d5:91:f4:e1:fc:5e:8f:
1d:65:97:3c:6d:01:1f:7e:53:78:75:30:9a:be:5d:
33:a3:b3:c8:b9:b6:0a:db:e0:ce:30:08:72:36:89:
00:cf:bf:b5:26:37:e5:9a:a0:ff:1e:2f:2d:89:e3:
56:69:8e:a7:73:60:09:04:af:c9:d1:ff:c5:a2:a2:
43:02:4c:26:d6:be:d3:c4:49:ec:5a:80:8a:45:dd:
f4:1a:ef:dc:51:8a:5b:a9:65:f8:c5:8c:53:22:b8:
bb:ff:1b:b9:37:f7:42:c9:48:27:a0:e2:e3:f2:7c:
4e:7c:b7:d6:a5:76:1b:fe:69:f7:58:93:21:ac:80:
f6:f3:fc:e2:7d:f6:79:9e:cb:e6:69:60:1a:c6:e2:
8c:8d:9b:81:7e:33:df:0a:6f:11:da:5b:ba:a8:e2:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:66:4B:5F:4F:30:EF:E0:DC:AE:0A:F9:EE:1D:61:81:C9:DF:91:76
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/q2ZLX08w7-Dcrgr57h1hgcnfkXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.141.0/24
Signature Algorithm: sha256WithRSAEncryption
09:cb:e2:8a:f9:d6:06:85:fe:33:d4:89:4c:86:f2:67:4f:cd:
b9:ed:5f:ea:16:76:39:93:71:55:24:ee:76:ea:44:45:51:6f:
34:61:bc:b3:e6:6b:ee:86:dc:4c:c3:d4:6e:08:fa:12:d1:28:
af:6c:47:77:06:f0:2d:37:69:8f:b4:08:66:12:b2:70:11:5d:
84:67:d7:ae:b1:d6:53:cd:1e:ea:e2:ef:c3:12:13:ee:e4:61:
3a:e2:2a:9b:a0:0f:00:e3:51:ef:e9:4f:7d:57:2e:03:b1:71:
79:65:f2:50:cf:4b:22:a0:e0:c6:9a:5d:07:d4:57:4b:2a:55:
e8:38:2e:e4:54:d6:59:73:ad:7b:2b:a8:a6:c7:d9:5d:2a:67:
5a:c5:36:dd:a2:38:48:2e:0e:33:50:ef:73:3b:4d:42:df:1f:
b5:c3:76:16:e7:b7:84:92:07:c0:51:b2:d8:d9:6c:91:34:0f:
40:8e:f7:0e:e5:e7:ec:b5:c0:c4:9f:ee:2e:ac:6b:90:ed:b1:
38:3a:0d:b4:1a:65:89:4c:38:7e:08:87:af:de:a9:9a:86:cf:
c7:1d:34:1e:a2:0f:e9:97:f1:08:42:bc:7e:de:c4:2b:d9:2e:
30:0f:9a:ec:2d:c4:d2:32:91:a3:ec:ca:17:56:b8:a5:f2:02:
1f:a2:eb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:05:46 2025 by rpki-client