Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/q3PjiJcA5Wmvu-x4hS5Ctn6vg7k.roa
File: q3PjiJcA5Wmvu-x4hS5Ctn6vg7k.roa (raw, json)
Hash identifier: aR28mDR0AXgw+ne2p9IcwrnOZCQ+luqP2WRf/HY4Z7Q=
Subject key identifier: AB:73:E3:88:97:00:E5:69:AF:BB:EC:78:85:2E:42:B6:7E:AF:83:B9
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 0194266B44CA99DF2554B9B078C7E8B07600
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/q3PjiJcA5Wmvu-x4hS5Ctn6vg7k.roa
Signing time: Thu 02 Jan 2025 09:49:11 +0000
ROA not before: Thu 02 Jan 2025 09:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51815
IP address blocks: 185.31.196.0/22 maxlen: 22
213.185.224.0/19 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:44:ca:99:df:25:54:b9:b0:78:c7:e8:b0:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Jan 2 09:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab73e3889700e569afbbec78852e42b67eaf83b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6f:80:b7:76:22:ed:0e:37:d8:0e:5b:7b:a5:
14:c2:9f:5a:3f:97:dd:c0:08:ff:aa:59:7d:ee:41:
c8:fe:6f:b7:9e:d3:03:55:7f:cf:73:1c:eb:df:9c:
17:c1:d7:80:b9:2e:15:e9:a7:e3:ca:cc:0e:5b:5e:
b1:02:d8:ab:79:4a:e7:d7:ee:1f:6f:d6:01:c9:05:
b1:8d:5e:07:0f:70:85:7f:bd:06:b9:a5:20:4e:ba:
92:ff:77:7e:8e:46:83:48:1e:8a:1d:af:36:fa:ba:
1b:7e:00:d5:a6:a8:33:a4:68:76:06:af:1b:1f:64:
de:b8:c3:92:64:ce:e3:51:96:d4:54:23:0b:10:a2:
f3:9e:ca:60:d2:c0:d2:f7:23:af:52:89:76:1d:31:
cf:8f:6a:ae:02:ba:96:11:22:41:c7:b4:f2:88:de:
a3:6e:c9:95:6c:5d:1e:1d:1e:f6:c1:46:46:06:9b:
90:08:f4:96:6d:d8:f9:3d:53:a9:cf:26:b2:8b:bb:
21:38:6e:df:25:73:08:4e:3e:72:b3:a9:aa:1e:5a:
de:3c:54:07:7b:05:f1:dd:f2:b9:2e:9c:d3:81:b9:
51:ae:86:35:91:aa:33:3e:d5:ff:29:18:69:93:e4:
c7:f8:9a:bb:09:cd:07:5c:3e:ab:67:f3:90:40:26:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:73:E3:88:97:00:E5:69:AF:BB:EC:78:85:2E:42:B6:7E:AF:83:B9
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/q3PjiJcA5Wmvu-x4hS5Ctn6vg7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.196.0/22
213.185.224.0/19
Signature Algorithm: sha256WithRSAEncryption
76:3e:16:ff:f0:09:84:a6:81:a1:81:78:6a:8f:ff:1a:bf:c0:
2c:b0:29:25:ab:67:f1:80:7f:22:51:e7:40:18:c9:f0:89:f4:
a6:bb:14:07:d8:af:8e:4d:72:ab:9c:a4:af:09:b6:30:08:ad:
0d:c5:50:84:2a:d7:4b:3a:c1:c0:f3:a2:31:6c:e1:22:fc:2c:
de:f1:0e:ad:a2:37:39:5c:1a:5f:74:21:1b:88:68:81:d5:c8:
56:62:17:b0:3d:70:93:d9:c6:30:44:2a:cf:ef:ab:64:93:4d:
6c:c9:09:41:47:8a:ce:6f:f3:18:0c:44:24:26:ef:8e:d8:79:
26:95:de:ba:d2:4e:93:07:cc:9c:68:93:c0:68:d7:35:5d:24:
47:f4:f1:8f:9a:fa:a9:10:e5:d2:b9:bb:cf:2c:35:94:a7:76:
ea:05:4e:68:4c:3e:b1:33:31:c1:e7:50:2a:99:ce:b4:f3:a0:
99:7c:cf:d9:60:8a:e2:20:21:0e:d4:d0:34:a2:6f:fb:0a:44:
b8:98:aa:ef:7a:e5:36:e5:46:08:71:a5:b6:54:1f:fd:db:3e:
ba:ab:a5:a3:a7:c0:30:0c:41:98:0f:71:fb:bb:8f:ee:e6:08:
75:b5:02:37:53:aa:80:cc:da:2a:e3:09:3c:9c:6d:36:66:1a:
73:43:e3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:39:03 2025 by rpki-client