Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/qK4AAnwuTwRwNOb2CLLZs8W9VuI.roa
File: qK4AAnwuTwRwNOb2CLLZs8W9VuI.roa (raw, json)
Hash identifier: cqQ7l3QbvSMEr2phGWC5VDW+4MerE13RpRcZdGJsAvw=
Subject key identifier: A8:AE:00:02:7C:2E:4F:04:70:34:E6:F6:08:B2:D9:B3:C5:BD:56:E2
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 019473AAEBF821C0CD6AA07F5E4AD65B7523
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/qK4AAnwuTwRwNOb2CLLZs8W9VuI.roa
Signing time: Fri 17 Jan 2025 09:49:28 +0000
ROA not before: Fri 17 Jan 2025 09:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42910
IP address blocks: 185.165.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:aa:eb:f8:21:c0:cd:6a:a0:7f:5e:4a:d6:5b:75:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jan 17 09:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8ae00027c2e4f047034e6f608b2d9b3c5bd56e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:a3:c6:fa:8d:80:6d:d6:5a:68:90:c5:ca:
b3:17:e5:99:19:94:09:59:87:00:c4:95:07:71:11:
04:1e:1c:10:63:7b:92:42:62:61:f7:b3:60:8e:ee:
f4:40:bc:73:12:14:3d:a8:ca:53:cd:25:ca:06:4a:
d0:04:2c:04:ab:03:1c:37:bc:c6:e7:78:32:4a:2b:
b3:26:44:c9:1c:76:f2:fd:0b:51:b3:59:8f:0d:cb:
16:0c:db:26:f2:2b:4b:15:b8:5a:ac:7f:30:5d:c3:
82:46:08:2c:43:5f:f1:94:ca:9e:88:fd:ff:e1:33:
a3:f1:fe:b3:4a:a0:8f:16:a9:48:6a:08:db:05:ad:
7b:7b:80:c4:83:d5:ab:a3:38:ff:58:b2:8c:72:a3:
d2:e5:71:6b:b8:46:52:4b:92:0d:b8:44:94:d2:65:
20:c3:e9:0e:c0:ce:61:10:08:34:8d:ca:ba:db:f0:
0f:87:54:c6:1f:c3:6b:72:e6:c0:1d:be:7a:a3:de:
96:32:75:c1:4f:10:00:64:c3:26:5a:57:f2:49:e1:
bd:f6:39:4e:65:8b:04:7d:e2:5e:76:41:b2:c9:22:
5e:c6:57:4e:ad:81:29:c4:d0:af:27:f6:93:f6:f2:
95:28:f6:79:ee:40:8f:fe:35:53:fc:6a:81:d7:21:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AE:00:02:7C:2E:4F:04:70:34:E6:F6:08:B2:D9:B3:C5:BD:56:E2
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/qK4AAnwuTwRwNOb2CLLZs8W9VuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.79.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b0:07:0b:e8:2a:5f:9e:12:1d:d1:51:5d:29:4f:63:ff:e4:
67:88:01:15:2c:3f:93:c2:cf:21:45:fe:f1:e7:dc:9c:6e:9e:
ec:58:8f:a4:67:ab:67:a5:cb:de:f9:9c:25:b3:c2:2b:7b:23:
e4:f2:32:14:8e:28:c0:12:32:e0:21:06:6c:ff:42:48:64:25:
2e:63:0c:f0:0f:70:be:5c:51:ba:fd:d7:5c:87:7e:b0:af:e7:
cd:5b:00:fb:58:3a:21:05:29:0c:2f:c2:a3:86:05:c7:3e:b3:
53:fd:23:ed:2e:75:dc:57:f0:da:12:0e:13:25:03:c4:9b:8e:
e1:b8:6e:7d:cf:dc:5c:fe:13:08:21:38:8d:56:03:0e:8e:e9:
c6:52:8b:ab:cf:75:70:72:2c:97:66:ae:b4:38:83:cf:71:d7:
32:3a:7a:44:62:d9:a4:01:c5:a4:63:74:ab:76:80:3f:14:63:
40:cd:00:0c:3f:0e:2b:05:6f:87:8c:ea:70:39:96:83:80:36:
30:a7:e1:0c:a2:90:40:b5:f6:88:77:72:72:fe:84:23:b0:4c:
24:86:ac:10:9a:12:18:58:6c:0a:9e:21:ea:b4:00:4d:df:b6:
ed:ba:5b:80:eb:55:12:c0:d7:53:d2:7a:34:3e:74:52:6b:f5:
3f:5a:f9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:31 2025 by rpki-client