Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/qF15Fek2B8QG87gZ7XIr-H3O168.roa
File: qF15Fek2B8QG87gZ7XIr-H3O168.roa (raw, json)
Hash identifier: 5FnSKwJ5Mf9Vo3kgskFawnnVLq6cD4vo+8P1ZuvgDrg=
Subject key identifier: A8:5D:79:15:E9:36:07:C4:06:F3:B8:19:ED:72:2B:F8:7D:CE:D7:AF
Certificate issuer: /CN=f3672df0e46988bbeed9be5410da12a3f170d691
Certificate serial: 019423D6F73E56B22F7E7DB78193050179A2
Authority key identifier: F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/qF15Fek2B8QG87gZ7XIr-H3O168.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21275
IP address blocks: 195.24.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f7:3e:56:b2:2f:7e:7d:b7:81:93:05:01:79:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3672df0e46988bbeed9be5410da12a3f170d691
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a85d7915e93607c406f3b819ed722bf87dced7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:d8:1a:60:ae:d7:00:7c:b5:69:6c:f6:cf:
57:ce:9e:b6:bd:6d:e7:6a:fd:68:5d:69:95:bb:92:
b5:f3:58:3d:b0:af:46:16:0c:b1:ad:52:63:b7:ac:
85:d8:23:86:1a:7a:29:13:32:29:53:94:24:4f:48:
0d:9c:7e:53:3b:35:64:33:8c:20:4a:d9:06:cc:8b:
cf:5d:8d:3c:43:b3:dd:db:66:96:6c:39:a2:7d:6f:
e1:1e:92:bd:34:69:31:62:fd:7d:16:ac:66:f3:05:
80:ad:f9:2f:ca:1c:81:5d:86:d4:ef:02:ba:97:a6:
49:eb:0e:36:d8:f5:4e:23:97:86:c3:87:65:4e:c8:
04:c4:d4:d3:f2:1f:13:b9:a1:96:18:d2:08:f0:ae:
3f:7b:ab:0f:a4:2d:cb:d8:45:ac:f3:92:44:c2:b3:
71:d0:df:2c:84:e5:c6:a1:97:fb:c5:8b:fe:78:59:
a0:27:c5:ab:8e:cf:a4:0d:bf:8b:a4:da:04:12:d8:
11:17:cb:e2:0a:d3:63:ff:f8:3d:27:4b:d8:0f:99:
77:f7:e7:6d:82:ff:fd:06:fb:d8:db:04:30:7b:f1:
d5:ab:f1:60:bb:6a:78:22:00:d6:3b:25:b8:81:da:
83:47:e1:a1:34:84:9e:51:56:95:f1:08:32:8b:d0:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5D:79:15:E9:36:07:C4:06:F3:B8:19:ED:72:2B:F8:7D:CE:D7:AF
X509v3 Authority Key Identifier:
keyid:F3:67:2D:F0:E4:69:88:BB:EE:D9:BE:54:10:DA:12:A3:F1:70:D6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82ct8ORpiLvu2b5UENoSo_Fw1pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/qF15Fek2B8QG87gZ7XIr-H3O168.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/565f89-6208-471a-b69c-3e22198aeb52/1/82ct8ORpiLvu2b5UENoSo_Fw1pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.228.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:91:8d:43:e3:f5:2a:bd:83:08:fa:5a:d3:3f:8e:8a:99:bd:
5a:00:87:a0:03:40:7f:6c:60:88:26:96:17:92:5d:9b:26:34:
82:0d:46:eb:11:cf:05:94:ac:d1:5b:26:86:2b:1d:47:e3:e8:
63:46:04:8b:9f:42:d7:fb:65:ef:8b:13:3b:96:a8:59:98:09:
f2:a7:ba:de:44:50:28:3d:73:0f:ac:ce:ad:09:58:21:b7:86:
42:a2:ce:f3:f0:0f:74:3e:b5:07:37:89:c1:89:53:e3:d3:1b:
14:b3:7b:df:f3:97:a6:ac:d3:c7:60:95:3f:e6:6f:1f:4d:ac:
02:d5:48:c8:ca:bc:e1:8f:d3:d6:dc:98:39:ee:cf:37:75:6e:
f2:88:39:be:7a:70:c4:64:e7:4b:c3:12:37:b0:bc:f9:a5:14:
23:af:31:79:7a:38:70:57:67:5c:01:7b:92:58:4a:00:b3:95:
e4:3e:42:7b:70:68:d8:8e:7c:30:9f:18:cd:ce:57:3e:65:dc:
11:86:cf:bc:e5:b8:57:80:fb:2c:94:b0:ef:65:29:a3:25:2f:
43:50:2b:cc:1b:41:e9:62:2b:26:1c:39:e0:1d:e3:a4:6b:c5:
8f:e4:b8:71:f6:8f:09:16:7f:95:8d:8b:c0:4f:ed:cf:f9:d9:
5e:f6:2b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:00:15 2025 by rpki-client