Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/qT62sQgJ7wYZrGkOwUrBAOZW36U.roa
File: qT62sQgJ7wYZrGkOwUrBAOZW36U.roa (raw, json)
Hash identifier: LRDn9R97dLgxGAtTPJOW62pBW4f3rWtLvCdfekL/e2M=
Subject key identifier: A9:3E:B6:B1:08:09:EF:06:19:AC:69:0E:C1:4A:C1:00:E6:56:DF:A5
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 0194221FE7779F3448E056D9E797E15FCCC5
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/qT62sQgJ7wYZrGkOwUrBAOZW36U.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216314
IP address blocks: 91.204.77.0/24 maxlen: 24
91.204.78.0/24 maxlen: 24
91.204.79.0/24 maxlen: 24
195.34.94.0/24 maxlen: 24
195.34.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e7:77:9f:34:48:e0:56:d9:e7:97:e1:5f:cc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a93eb6b10809ef0619ac690ec14ac100e656dfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:44:4a:63:14:e1:f6:97:07:23:b6:fd:af:
2f:f8:ab:10:10:28:3c:73:21:37:93:69:31:ab:b7:
35:8e:56:ab:da:98:d5:59:59:d1:33:4c:fe:54:c4:
da:e2:6f:3f:0c:e4:01:73:5a:10:1d:6e:dd:b1:4c:
2b:8d:98:99:ec:12:11:37:63:2a:4d:0d:52:8e:dd:
b4:5c:8b:2a:ee:90:e6:2e:00:d5:0e:32:cb:15:ca:
ad:bd:48:31:d3:fe:37:ff:f2:da:5c:36:7d:7c:8d:
e7:d1:ef:a6:06:97:f6:f1:9b:60:d0:2e:6d:7a:ca:
4d:f9:03:b3:63:a6:bb:2a:31:e2:1b:47:a4:97:bd:
e9:b0:56:82:c8:8b:1b:90:cc:36:7b:ba:b0:c2:24:
42:7f:96:04:26:31:51:9f:7b:22:2e:68:4f:0e:15:
87:99:aa:78:ee:de:ab:75:63:47:d8:6a:73:11:a6:
30:d4:dc:2e:e4:c8:1e:68:b3:9d:be:50:be:d6:a4:
62:d4:b2:bd:62:e6:5e:a8:c6:fa:7f:bb:7f:fa:53:
43:e2:c5:53:df:14:74:9a:fd:4a:1b:a5:75:54:29:
96:4a:82:d8:0e:0f:14:ad:23:df:85:e3:54:96:d3:
77:28:96:a6:04:3d:1f:99:8f:3a:b0:be:e7:fe:9f:
99:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:B6:B1:08:09:EF:06:19:AC:69:0E:C1:4A:C1:00:E6:56:DF:A5
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/qT62sQgJ7wYZrGkOwUrBAOZW36U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.77.0-91.204.79.255
195.34.94.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:7c:48:5b:b1:3b:80:f3:3b:bc:90:26:a6:06:ae:26:7a:91:
69:bf:ac:7a:f0:7f:59:00:f3:7c:9d:11:54:c3:78:32:53:13:
9a:7d:7e:0e:1b:45:ab:71:fd:33:cd:22:08:29:c1:41:da:39:
f6:ac:43:be:e3:72:30:3f:eb:a8:72:03:fa:4e:fb:f8:71:e6:
2e:a5:63:85:dd:97:2b:1e:b3:78:e2:37:fc:fa:7a:dc:ef:7b:
f1:3a:54:e1:12:15:e9:ce:7f:32:f4:45:08:07:f8:e7:b4:b3:
1c:46:d8:73:02:de:1f:62:4a:86:1b:cf:24:8d:35:6e:76:4a:
da:30:2a:e6:cd:be:1d:6a:6e:cc:bc:5e:3e:12:cd:31:2b:55:
73:1b:37:05:d9:93:68:b3:82:b5:e8:02:e6:24:e3:62:f5:2f:
ab:5e:a7:dd:34:9e:dc:d9:2b:0b:17:d1:a9:35:86:ea:f4:54:
00:21:08:b3:c1:94:a9:2f:7a:e8:ca:df:93:0b:aa:45:30:ec:
22:38:31:51:4f:dc:55:4d:4a:df:ae:05:94:0b:4f:76:40:2b:
81:ec:33:6a:e7:83:a9:66:a0:31:e4:a2:e3:93:8d:aa:3e:06:
3e:0e:9e:d2:8c:7c:b3:87:2f:31:12:d8:d8:7a:82:08:98:c0:
bc:2e:a8:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:42:38 2025 by rpki-client