Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/kQmgrAanOZoOdA-4PbXWYAS9_Cc.roa
File: kQmgrAanOZoOdA-4PbXWYAS9_Cc.roa (raw, json)
Hash identifier: OvdkZzlx4GDhrRDRIhoTB0lqGB519lq0sYMZBqzO8uc=
Subject key identifier: 91:09:A0:AC:06:A7:39:9A:0E:74:0F:B8:3D:B5:D6:60:04:BD:FC:27
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 01946F3E12B8A0CB6412D94724544D1836D8
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/kQmgrAanOZoOdA-4PbXWYAS9_Cc.roa
Signing time: Thu 16 Jan 2025 13:12:06 +0000
ROA not before: Thu 16 Jan 2025 13:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199414
IP address blocks: 89.22.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:3e:12:b8:a0:cb:64:12:d9:47:24:54:4d:18:36:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 16 13:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9109a0ac06a7399a0e740fb83db5d66004bdfc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:de:9f:db:91:0f:d7:83:51:33:f3:50:7c:
23:fe:c8:f3:c6:30:33:78:6b:a0:8e:4c:91:5c:57:
50:00:8b:14:f7:b5:39:7b:ca:52:07:83:4e:7f:3b:
71:93:51:23:58:03:e2:aa:42:19:dd:8e:39:fa:01:
bf:aa:ce:b9:66:6d:31:17:13:19:3c:92:5c:65:ca:
5c:5e:d5:09:f7:e7:75:f0:a0:85:65:4b:bf:38:43:
73:ab:7e:5d:62:a1:f3:bd:13:9d:d8:6e:c9:3b:b4:
b0:a1:c4:81:93:ad:2c:9f:5c:2a:d4:49:d2:da:cc:
70:be:d6:97:56:c6:bc:e7:1d:79:bc:20:5a:2d:75:
53:61:e9:fe:b4:26:44:08:76:5e:1e:1f:e1:d1:7a:
0b:ab:01:ad:ff:25:85:81:64:64:e4:90:0a:76:cb:
8d:16:ce:9f:13:3f:f3:14:aa:10:f4:6c:4a:ff:cc:
b3:9b:bd:9d:d0:3f:7f:21:ec:b4:b8:e0:1a:31:be:
81:26:55:f2:d7:18:5e:58:66:e8:5b:ca:99:da:9e:
0a:5d:38:ac:7f:c5:c7:8c:ad:92:d9:f9:0a:9c:39:
3d:89:d5:aa:3b:71:8f:f8:93:2c:74:ba:31:fa:68:
25:44:61:62:0c:06:7e:b3:2a:6b:09:56:a5:fd:d5:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:09:A0:AC:06:A7:39:9A:0E:74:0F:B8:3D:B5:D6:60:04:BD:FC:27
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/kQmgrAanOZoOdA-4PbXWYAS9_Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.194.0/24
Signature Algorithm: sha256WithRSAEncryption
20:50:6c:06:66:81:8d:d4:ef:ee:10:92:c0:dc:ad:ad:8e:89:
ad:d1:fa:36:d2:6e:bf:ef:79:83:49:21:3e:ee:29:59:73:b0:
4e:28:ac:8a:21:03:0c:04:00:3a:50:3e:31:70:7b:d4:84:a4:
78:64:87:22:57:c2:a4:4a:1c:5c:19:ab:a7:5e:49:a0:cf:92:
04:15:84:b6:45:c4:81:61:5f:04:1e:30:1a:40:0d:ce:cc:76:
38:7b:86:94:ec:5e:72:78:2a:e9:0c:73:6f:b6:18:be:bf:2a:
5b:0c:59:da:6e:b8:da:85:71:08:c0:80:8a:e1:58:a6:2c:e0:
73:18:e2:b2:29:6b:02:b2:16:4b:6c:ea:36:51:45:e0:74:49:
cd:d1:59:d5:53:1e:a1:13:98:94:a1:a8:3b:fd:f7:d1:ea:40:
46:d5:05:69:67:70:29:48:89:b5:b0:a3:37:09:40:1e:39:f4:
63:29:70:97:3b:6c:46:bd:6f:e1:65:d1:d7:41:65:a4:a2:7c:
a3:e3:8a:7a:4c:87:fe:7f:b3:46:da:66:3b:ff:04:46:fa:57:
63:03:41:2c:9e:09:ed:e9:30:4d:6b:9c:97:21:f1:60:7c:10:
ee:39:72:30:7b:f3:83:11:fa:68:5c:6a:89:93:a1:b3:ae:12:
3c:a2:ec:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:49:58 2025 by rpki-client