Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/q3FDx21p8smEfAYPTo0ZQLgPkqo.roa
File: q3FDx21p8smEfAYPTo0ZQLgPkqo.roa (raw, json)
Hash identifier: 2Du6IDXw8hGPYtGe+KE8+hTPSOOHZMlNjWnrWGKbnPs=
Subject key identifier: AB:71:43:C7:6D:69:F2:C9:84:7C:06:0F:4E:8D:19:40:B8:0F:92:AA
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 01942143E05DCA8E660CCE06B741841038E7
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/q3FDx21p8smEfAYPTo0ZQLgPkqo.roa
Signing time: Wed 01 Jan 2025 09:48:04 +0000
ROA not before: Wed 01 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209284
IP address blocks: 92.118.116.0/22 maxlen: 22
92.118.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e0:5d:ca:8e:66:0c:ce:06:b7:41:84:10:38:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab7143c76d69f2c9847c060f4e8d1940b80f92aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:2b:97:72:1e:a9:55:45:29:e3:97:10:77:
43:6f:ca:65:1e:ab:f4:65:53:f5:fd:47:68:54:b2:
23:d7:e3:b4:c5:bb:7f:3a:b4:ef:af:f0:89:fc:9f:
10:bd:61:14:b5:55:d2:22:32:dd:f9:15:98:6e:b4:
f3:e0:be:bc:d6:50:58:be:8c:72:08:58:7a:56:46:
67:f5:17:09:ff:d9:63:ba:54:f7:b7:3d:19:96:73:
a8:d4:d5:06:42:96:12:30:c2:26:57:ff:55:70:1e:
12:89:44:2c:d8:d8:ed:eb:fe:f5:0a:c5:a5:d3:a0:
c7:a1:1c:9e:0d:02:49:58:6c:48:c8:fb:10:be:87:
5d:c1:8c:c8:b4:1a:5a:be:1a:f0:0b:e0:54:be:b8:
ae:fc:59:7b:65:c9:21:4a:90:b6:34:6c:80:4e:98:
aa:a3:83:34:41:2c:08:b9:e8:93:30:3e:b9:5d:92:
30:6f:cb:c1:27:07:63:78:df:8a:7a:d2:42:cc:13:
ef:b6:fd:bf:39:eb:34:7a:0b:ac:0a:89:38:f2:b5:
4d:4d:39:ed:cf:a1:f1:ce:db:5e:46:82:48:ab:d9:
5d:0d:10:5f:17:a6:9b:66:3e:c0:5e:05:80:7e:c0:
ab:29:80:ec:c9:cd:47:a7:0b:59:26:c4:a7:a9:e1:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:71:43:C7:6D:69:F2:C9:84:7C:06:0F:4E:8D:19:40:B8:0F:92:AA
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/q3FDx21p8smEfAYPTo0ZQLgPkqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.116.0/22
Signature Algorithm: sha256WithRSAEncryption
67:18:d5:e0:6b:22:6c:9b:cd:34:a9:2e:5a:11:f0:8c:4d:82:
25:a7:0e:a4:f9:ff:c6:33:92:69:e9:15:c4:81:dd:6b:67:87:
02:10:a9:3e:0b:c0:ee:95:9b:94:ac:7c:e9:ca:ff:8d:3a:be:
80:14:ba:52:5d:83:69:b2:52:43:80:2a:e4:bf:8e:6f:95:3d:
c0:86:bb:c8:f1:6a:c8:2a:cb:ec:3f:aa:9a:12:a8:d2:9f:e2:
c9:a0:6d:5a:0b:c8:d7:ee:d0:f3:32:7f:0d:70:57:4b:7a:39:
01:bb:3d:67:da:6e:b0:7c:7e:98:89:ca:da:26:34:c3:52:9b:
1d:cd:69:78:fc:11:c7:aa:2c:f4:b0:da:1a:f1:84:d5:00:e8:
97:1a:76:65:5d:b8:82:cd:1c:2d:82:6a:49:f8:47:ce:be:c4:
bd:fa:00:18:84:1e:4e:92:32:1e:72:d1:44:46:dc:e1:56:7d:
b3:1c:b3:26:c5:c8:c3:a9:6d:e9:3e:1d:31:c3:79:6e:a1:37:
0e:81:d7:68:b9:39:37:dc:81:27:30:3d:fe:0b:64:a3:2f:1d:
e6:fe:c0:7e:9e:de:21:b7:92:bd:e0:ba:2e:a7:aa:f9:55:37:
08:b8:bd:28:58:6f:dc:39:d6:d0:58:72:e4:ae:b3:17:cc:83:
0b:a6:24:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:52:14 2025 by rpki-client