Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/qSptZY9DA7TTOw01rjMccBEg63M.roa
File: qSptZY9DA7TTOw01rjMccBEg63M.roa (raw, json)
Hash identifier: 1Ge8t7ARNpBeDac8VWbtlsdj9yB2OCW7N5eD5ZuctIE=
Subject key identifier: A9:2A:6D:65:8F:43:03:B4:D3:3B:0D:35:AE:33:1C:70:11:20:EB:73
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019422200388476C3F1713C29C1960142D47
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/qSptZY9DA7TTOw01rjMccBEg63M.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202423
IP address blocks: 185.180.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:03:88:47:6c:3f:17:13:c2:9c:19:60:14:2d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a92a6d658f4303b4d33b0d35ae331c701120eb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:66:48:53:d8:d3:9a:a9:16:8d:e7:11:fc:
a6:8d:10:7a:26:60:a4:6f:43:2b:7d:86:01:07:82:
51:f3:c5:44:9d:99:8b:5e:24:85:d4:aa:fe:d2:6a:
18:93:81:b0:9c:88:ab:e3:11:21:46:e4:3b:fe:f5:
7f:43:af:91:b0:ae:f0:f9:64:9f:4a:8b:8d:d5:9d:
c8:df:6b:01:db:9a:ad:08:d5:21:5e:9c:f2:81:09:
c5:57:96:d4:b7:75:58:00:c8:1e:8d:17:89:9f:76:
40:93:20:3e:35:0f:ec:04:f0:2f:17:d0:65:e1:00:
8b:6c:5e:44:d0:76:54:2a:6c:aa:bb:c8:c4:01:44:
d6:77:85:1f:8b:fa:e1:5d:eb:57:c6:46:01:95:12:
17:4a:4f:7a:61:2e:ef:aa:f5:6a:9c:9c:93:1e:ad:
39:73:0a:18:6e:a6:ef:89:e7:88:e5:69:aa:e8:e0:
b9:df:58:91:40:a4:a9:61:3c:9d:9a:4c:9a:22:c3:
1d:30:27:45:c0:01:28:89:b2:94:58:cb:42:80:16:
54:91:9c:b5:24:3c:dc:2e:ff:ba:b9:a6:49:8f:4a:
84:9f:1c:22:01:4a:6b:7d:4c:ed:20:25:ce:af:2e:
b8:6b:e8:82:70:b8:91:81:6d:76:70:97:c8:68:57:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2A:6D:65:8F:43:03:B4:D3:3B:0D:35:AE:33:1C:70:11:20:EB:73
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/qSptZY9DA7TTOw01rjMccBEg63M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.109.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:37:29:6a:12:b7:52:f1:71:19:a5:4d:59:7c:36:b7:1b:82:
a8:03:f6:4a:e0:c7:a2:95:35:4c:b8:f1:65:df:f1:25:89:50:
70:cd:26:a2:35:a8:2b:53:f4:47:04:9a:2f:ab:9d:a3:41:3f:
13:31:48:ae:31:8a:51:90:ff:9b:b3:8f:33:e9:a2:b0:bd:c0:
b3:c9:1d:40:ff:d4:3b:3c:78:8c:2a:0d:29:41:ce:49:8c:75:
05:4e:61:7b:46:44:ae:82:b1:0d:4b:f6:8e:f4:48:a2:7b:30:
89:f9:02:6d:16:91:41:b9:d8:a6:ef:35:75:d8:e0:32:fe:9e:
4f:19:ce:1c:6f:ec:ac:0b:32:06:cd:b8:8b:4a:4a:0f:14:7c:
92:6f:98:33:75:98:1c:db:73:30:8e:cd:ad:62:cd:20:47:54:
f0:25:07:94:e8:6c:97:33:88:96:c4:84:b0:cc:02:ad:f9:f7:
11:e6:a6:c5:4e:f9:bf:b7:ad:30:08:fb:62:8a:9e:89:5d:5e:
a6:8c:0e:8b:b0:d9:7f:33:2d:1f:6c:56:81:02:7c:d5:40:4e:
30:b5:67:ac:57:73:37:ee:4e:1c:78:7b:8f:70:e6:fd:9b:4e:
92:3a:37:79:61:b1:86:d3:56:8a:89:bf:7e:a0:1c:28:0b:0a:
7e:1b:19:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:09 2025 by rpki-client