Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/dQRcXbaUmUfF90KS22BXIg291TI.roa
File: dQRcXbaUmUfF90KS22BXIg291TI.roa (raw, json)
Hash identifier: INHKZWNtoARt0nFWlEkMqZvBaUgAKsKb3c/i+Zug1Dc=
Subject key identifier: 75:04:5C:5D:B6:94:99:47:C5:F7:42:92:DB:60:57:22:0D:BD:D5:32
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6C945CD19F049EC74361341F3977C
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/dQRcXbaUmUfF90KS22BXIg291TI.roa
Signing time: Wed 01 Jan 2025 21:47:46 +0000
ROA not before: Wed 01 Jan 2025 21:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204221
IP address blocks: 185.101.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c9:45:cd:19:f0:49:ec:74:36:13:41:f3:97:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75045c5db6949947c5f74292db6057220dbdd532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:8b:87:12:80:15:2e:24:4f:c3:15:0e:9d:
58:90:76:0d:82:e3:70:a3:b3:bb:da:42:c3:12:a4:
8a:eb:29:b6:e6:8e:0f:80:9c:0e:2f:1b:f3:25:86:
aa:33:69:80:d9:59:e9:a6:4f:e8:52:68:c8:11:08:
a2:ab:16:14:17:e7:93:f7:5d:5a:51:42:e3:48:85:
e3:59:14:0c:5f:9d:ed:1c:85:54:e2:01:0c:6e:45:
69:d5:ec:31:8a:aa:8f:e0:25:08:a6:a6:18:1d:ce:
3f:8c:54:8c:02:00:f8:71:ed:4d:66:fd:e3:90:ad:
20:d9:3b:b9:1d:35:c3:68:2b:af:aa:7e:ee:25:2c:
fb:b4:ff:1c:53:48:c5:3a:19:b4:47:7a:70:46:7f:
e8:e4:33:7a:eb:93:d9:eb:eb:51:9b:c3:da:a7:9f:
12:07:ac:e3:b3:7e:99:22:d8:b7:48:8a:16:20:2d:
59:49:4b:0f:07:51:99:21:66:12:c8:7d:62:99:4d:
83:cf:af:04:51:b0:25:0a:32:62:72:39:53:ea:45:
b2:02:6d:4c:66:27:2a:57:0f:c4:85:cf:b2:c7:59:
04:80:45:aa:b7:67:fe:43:74:5e:5d:37:e6:5e:5b:
7a:0d:bf:d9:17:c6:e4:98:57:62:49:be:6c:60:22:
29:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:04:5C:5D:B6:94:99:47:C5:F7:42:92:DB:60:57:22:0D:BD:D5:32
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/dQRcXbaUmUfF90KS22BXIg291TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.106.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ec:c3:8c:73:f4:de:ec:dc:7a:1c:82:55:54:3a:49:87:f2:
5f:26:2f:21:0d:37:eb:db:92:0f:80:82:bd:ef:d9:97:34:c2:
06:75:9c:a7:10:7f:8d:85:ab:f6:91:24:7a:e2:18:5a:52:00:
a6:c8:c6:b8:70:fa:08:b3:17:07:03:ab:48:8b:6a:65:cd:d9:
6e:74:ab:48:4a:73:16:cf:fb:87:3b:f5:4d:ec:69:26:90:04:
af:dd:5a:9d:68:c2:1a:a4:72:a3:a4:ca:95:eb:a2:08:fd:6b:
e4:b4:0f:b0:83:78:54:c2:ec:56:9e:7b:ec:ea:e5:17:4e:2a:
3d:78:46:f7:7f:39:e8:25:bd:dd:2d:7f:5f:2a:61:3a:eb:a1:
11:28:ca:2a:5d:81:b6:dd:c1:29:e3:1b:01:7e:15:9e:7a:cb:
27:65:68:c8:d2:91:6c:be:fc:6d:35:cd:5b:bb:13:6b:89:29:
9a:43:c7:0e:b5:53:7b:76:2e:73:2a:46:3b:c6:a6:e7:94:93:
3e:0f:69:50:54:17:14:39:ea:c5:63:89:0b:ff:0d:a7:b2:7d:
02:12:ce:59:21:6b:d9:4a:39:ab:00:1e:38:82:f0:db:65:ce:
67:1e:8c:56:17:11:97:45:52:1c:9e:52:e6:fa:ff:15:b2:0c:
a0:a1:fe:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:32:34 2025 by rpki-client