Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/q0f1k5cWGTNBB6sr_OG4msQd7iY.roa
File: q0f1k5cWGTNBB6sr_OG4msQd7iY.roa (raw, json)
Hash identifier: 0ETx8QIfDrUgHdlw++HTyLQZKu+EyPer5KYC9N7tzIc=
Subject key identifier: AB:47:F5:93:97:16:19:33:41:07:AB:2B:FC:E1:B8:9A:C4:1D:EE:26
Certificate issuer: /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial: 019425219505C1E61CC06F1C44A1A03EE5E0
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/q0f1k5cWGTNBB6sr_OG4msQd7iY.roa
Signing time: Thu 02 Jan 2025 03:49:05 +0000
ROA not before: Thu 02 Jan 2025 03:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54103
IP address blocks: 130.185.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:95:05:c1:e6:1c:c0:6f:1c:44:a1:a0:3e:e5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Validity
Not Before: Jan 2 03:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab47f593971619334107ab2bfce1b89ac41dee26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:47:d7:b6:5e:2b:2c:60:5f:58:24:09:12:
82:2c:f7:1b:20:a3:6c:b9:45:20:0e:0a:49:9f:59:
68:3c:fc:c9:2e:79:e5:58:bd:ef:83:ec:42:52:d5:
1c:09:4a:a2:71:94:9e:6e:64:27:2e:c7:4b:98:c3:
42:87:b7:04:17:74:32:cf:ce:11:d7:2f:fa:a3:6c:
f7:7d:d7:0f:5a:85:9d:1d:0c:ca:21:4a:9c:29:4f:
a6:58:a7:da:84:fd:91:cb:68:4e:48:4e:82:74:ca:
77:90:ce:2b:b4:7a:cf:97:09:7d:d9:d1:4c:b1:ee:
01:1c:bc:3c:46:1e:d3:05:f9:c8:8c:78:36:8b:08:
77:3c:7b:67:78:53:a6:e4:17:23:66:0d:6a:08:f6:
b3:bd:ea:8e:1e:6b:9a:2c:95:ea:8a:dc:dc:a4:60:
5d:12:be:b1:5d:56:36:68:28:fb:40:68:25:4a:23:
1b:1a:41:97:ff:3a:9e:40:cb:8e:e4:be:b1:31:31:
27:3e:c8:e0:be:07:92:d8:cf:0d:7b:3f:4d:a0:a8:
21:9d:06:0f:35:5c:9b:b2:be:4d:63:48:90:c8:33:
29:1e:c9:49:80:20:f0:06:ee:bf:ce:f7:08:86:ea:
b8:f1:48:b4:e3:44:a6:f9:fb:45:f1:e9:40:fa:3c:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:47:F5:93:97:16:19:33:41:07:AB:2B:FC:E1:B8:9A:C4:1D:EE:26
X509v3 Authority Key Identifier:
keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/q0f1k5cWGTNBB6sr_OG4msQd7iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.172.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:3d:db:bc:96:29:4f:e5:d7:2d:c7:4a:e7:6d:6e:af:d2:36:
c8:fc:50:e0:1d:03:22:01:4d:bd:2d:3e:30:b5:b6:90:0e:c7:
c8:5c:cb:ff:8e:eb:95:bc:d8:40:a3:0b:cf:79:aa:2e:48:99:
40:6e:32:37:31:e6:0d:68:3d:24:75:48:41:d3:f8:a5:84:47:
47:27:38:24:60:a5:d0:29:98:b2:22:55:58:fc:8b:26:b2:0b:
40:e8:b0:10:05:b8:1f:22:ac:3b:b0:33:36:5d:7e:5e:ac:7c:
90:f9:8a:72:f8:c3:c4:de:31:ec:39:f3:1d:c8:41:63:e1:2c:
b3:93:24:28:50:22:8c:15:23:8f:e3:43:05:c0:71:eb:87:9d:
0f:73:60:6f:f9:1a:1d:a7:28:77:9e:11:19:bd:ca:9f:bb:d2:
86:07:1b:8b:a0:d6:f8:09:cd:d5:b6:a6:ae:8b:c4:27:0d:aa:
22:65:68:d2:91:e8:65:32:07:68:d5:a0:b5:4f:fd:1e:30:a3:
5f:53:98:6e:e5:e7:58:32:e9:10:1f:97:7b:2f:2a:85:2a:1a:
00:ab:94:64:ab:52:18:9b:84:04:ef:bd:cd:09:94:33:04:3f:
75:a7:3e:b3:7f:23:55:1a:6e:f2:9a:56:c3:93:47:3b:a8:0d:
da:c2:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:29:26 2025 by rpki-client