Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/qX47TfZ7U-VCDd8K_2PnZDbaW7U.roa
File: qX47TfZ7U-VCDd8K_2PnZDbaW7U.roa (raw, json)
Hash identifier: AWzPY4ofax8Hh97c3nb596ilyxymid/EIQcHBQfpPr4=
Subject key identifier: A9:7E:3B:4D:F6:7B:53:E5:42:0D:DF:0A:FF:63:E7:64:36:DA:5B:B5
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 01941FFA1519EF41B66188AD943BEF578862
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/qX47TfZ7U-VCDd8K_2PnZDbaW7U.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 80.210.95.0/24 maxlen: 24
85.194.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:15:19:ef:41:b6:61:88:ad:94:3b:ef:57:88:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a97e3b4df67b53e5420ddf0aff63e76436da5bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:0a:76:4b:81:d8:ca:38:c9:8a:aa:2f:74:
57:65:a8:0a:79:1c:ef:02:c6:34:de:78:e0:ac:97:
18:45:8f:b2:4a:8d:a4:08:ee:37:49:f4:99:a3:8a:
dd:b8:bc:66:79:23:bf:33:9f:5e:93:7a:fc:0f:36:
4a:f4:3a:df:da:ac:0a:32:41:b5:11:18:7b:9f:d2:
b4:f9:78:9f:46:5e:4e:29:a7:68:d4:16:cc:c0:7a:
d2:28:85:27:ec:c3:36:a1:46:53:aa:3d:31:3a:3a:
a1:e1:53:ba:0c:0f:7e:9f:f6:e6:11:86:7c:4f:9f:
7f:c8:27:84:02:ba:d8:ef:28:66:76:d6:38:9f:e6:
ac:c9:4e:c6:65:c0:d8:5d:f0:82:1c:36:68:c1:58:
c1:97:3c:be:f0:52:48:3c:31:8e:9b:01:e4:05:0a:
17:30:6d:95:2a:1d:56:e0:15:ff:3e:13:f1:55:a7:
e1:be:a0:2c:b9:bf:ba:ac:84:38:52:e7:51:c5:37:
92:c3:c6:f1:d9:23:e0:85:c6:9a:82:f8:a6:26:14:
58:33:d0:16:07:9f:c5:ec:5b:ac:ff:b1:8e:98:a2:
ce:db:2e:a0:3d:54:80:21:c4:97:7f:a1:cf:39:56:
fd:fe:be:37:ae:36:4c:d0:a6:73:63:e5:9f:5b:31:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7E:3B:4D:F6:7B:53:E5:42:0D:DF:0A:FF:63:E7:64:36:DA:5B:B5
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/qX47TfZ7U-VCDd8K_2PnZDbaW7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.210.95.0/24
85.194.254.0/23
Signature Algorithm: sha256WithRSAEncryption
91:08:44:57:01:cd:44:be:11:59:0e:ae:f5:c4:35:1c:0b:2e:
1f:53:b1:f1:38:2a:c2:0f:26:c5:ba:28:14:bf:10:5f:dd:b7:
66:0c:ae:ce:70:3d:7f:ce:fd:5e:e5:ad:57:24:f8:6d:4f:bb:
16:4c:10:07:fa:f0:8d:64:07:a2:b5:0e:ea:ae:8b:34:8b:23:
71:99:14:d8:68:27:15:32:e1:06:df:86:bb:6c:89:bf:8b:fd:
c5:6f:54:61:be:20:89:a1:02:b8:99:b7:ec:af:7f:a3:b8:5c:
95:b8:af:e5:25:1d:06:d3:a6:96:4c:c5:f1:bb:89:2e:51:67:
96:de:b1:b2:97:45:17:e5:9d:48:12:22:7e:7f:c9:1f:04:be:
32:2d:7b:45:b4:c7:c2:de:10:1c:02:41:a0:38:12:ee:03:00:
66:46:4a:c2:fc:df:66:74:05:d6:16:37:e5:03:63:d8:0f:d9:
4b:18:97:2e:33:2f:8b:2c:b8:5d:de:d4:a4:b1:68:45:dd:4b:
4c:eb:1a:47:84:4f:03:99:f9:9e:b2:eb:f9:27:6c:4a:dc:2b:
d1:68:a8:b5:c8:cb:8f:15:67:94:f3:e3:b3:fa:74:18:08:d4:
b5:27:57:8e:18:9f:cf:df:bf:0c:8b:a1:ec:31:68:49:b7:a3:
6d:c2:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:22 2025 by rpki-client