Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa
File: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (raw, json)
Hash identifier: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=
Subject key identifier: FB:7A:AB:77:3F:ED:CE:11:68:2B:B5:1C:8E:5E:AD:08:BD:2C:D8:E3
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 019425220AE0C09515AD36B4B0A8531DFED5
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa
Signing time: Thu 02 Jan 2025 03:49:35 +0000
ROA not before: Thu 02 Jan 2025 03:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 176.221.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0a:e0:c0:95:15:ad:36:b4:b0:a8:53:1d:fe:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb7aab773fedce11682bb51c8e5ead08bd2cd8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:bc:1e:be:2e:ed:48:65:3a:29:35:2d:65:
f5:47:be:05:78:74:bb:58:b5:d5:90:cf:21:c5:94:
c1:9a:7c:07:2d:d4:24:a8:25:b9:9e:9d:e0:68:e9:
c8:65:2c:48:cb:17:9f:8f:ac:7a:11:ff:1b:e0:4f:
b0:ea:0f:ae:f4:9b:23:99:4d:ac:37:db:b0:fa:66:
bf:77:41:c1:05:44:0b:9b:a1:c0:21:b6:73:5c:62:
4f:77:af:a6:d4:ad:e7:db:52:76:ec:65:fb:f8:aa:
87:c1:a6:48:41:1b:6f:bf:ee:78:2e:3a:03:a3:1f:
30:98:52:1e:84:a9:03:c4:d9:22:3a:43:b1:80:39:
8c:35:c4:37:1e:21:3e:58:b8:73:98:4b:2f:7a:2e:
d5:78:d6:f8:3a:b8:93:6b:e0:7d:73:d9:32:5d:65:
f9:19:00:7b:fb:67:41:b0:6c:2e:92:20:fa:64:69:
56:d3:75:36:18:2b:dc:6c:0c:5d:0c:25:e5:ec:f9:
96:82:fc:3a:a4:db:8a:b5:8e:38:e9:87:40:74:91:
f1:13:10:12:cb:47:4f:cb:b0:e0:5b:7c:a4:28:11:
c9:08:56:7a:e4:56:c6:e7:f8:ca:49:f4:ad:16:e6:
a4:d6:4f:ba:52:dc:17:60:c5:c7:bf:39:c4:cb:c1:
02:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7A:AB:77:3F:ED:CE:11:68:2B:B5:1C:8E:5E:AD:08:BD:2C:D8:E3
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.80.0/22
Signature Algorithm: sha256WithRSAEncryption
40:e1:0f:a0:14:0c:60:c5:87:66:7c:c1:c5:1f:1d:9b:d2:85:
b0:d9:d5:1d:21:d2:20:8b:83:af:7f:fd:97:a7:98:1f:08:80:
9c:32:55:64:30:84:d1:b5:79:1c:5d:c2:0c:d6:57:2a:32:86:
f9:c0:fe:30:89:4a:0b:a6:59:7b:fc:23:83:8d:09:9e:c7:b2:
9a:ad:c9:5c:2d:79:2e:1b:e2:3b:57:4a:2d:c2:e3:08:90:dd:
a6:61:b7:a8:b8:f0:6b:99:b3:2e:5f:7c:5e:e8:7b:37:25:be:
88:03:f6:e1:d5:1b:c7:8e:be:1b:3c:ed:ce:71:b1:98:85:83:
c5:bd:9e:a9:9c:db:55:5d:fb:fc:97:bd:1d:ea:27:25:db:73:
d5:c8:fe:ef:e9:aa:d6:3a:f9:e3:6a:dc:aa:fd:34:f7:77:68:
76:f9:b3:e5:ce:e1:0b:77:75:c2:1e:35:3e:4a:16:48:50:c7:
71:1d:fc:ee:9a:64:4d:33:ea:fb:c4:55:24:55:21:c6:27:00:
5d:d3:ce:54:cd:c5:20:39:59:55:47:1e:00:53:61:2c:d0:23:
bf:4b:fc:a4:45:ff:e8:24:3c:3e:cc:f9:f3:8c:db:e4:5b:64:
6f:fa:8f:88:64:0a:36:ec:43:f1:25:6a:85:5c:d3:ed:ea:20:
de:fe:9d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:29:09 2025 by rpki-client