Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/qEuf4JoFbNqWgmvGk1XHQxSlk4w.roa
File: qEuf4JoFbNqWgmvGk1XHQxSlk4w.roa (raw, json)
Hash identifier: FprxjmSrJVIdrJmDZ/hiSKkUv6KnjJr3J8MVoY0gd6M=
Subject key identifier: A8:4B:9F:E0:9A:05:6C:DA:96:82:6B:C6:93:55:C7:43:14:A5:93:8C
Certificate issuer: /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial: 0194282384E9129243BD5BE060B315AC2156
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/qEuf4JoFbNqWgmvGk1XHQxSlk4w.roa
Signing time: Thu 02 Jan 2025 17:50:03 +0000
ROA not before: Thu 02 Jan 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 5.180.188.0/22 maxlen: 24
185.185.77.0/24 maxlen: 24
185.185.78.0/24 maxlen: 24
2a0f:a0c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:84:e9:12:92:43:bd:5b:e0:60:b3:15:ac:21:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Validity
Not Before: Jan 2 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a84b9fe09a056cda96826bc69355c74314a5938c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:60:23:2c:20:81:b0:fc:de:aa:5e:55:4f:
10:a5:e0:d4:08:b9:bc:de:f9:e7:5f:35:f7:0f:29:
a7:6a:b4:5f:41:93:8d:4f:85:c1:2d:46:12:c0:21:
8c:08:b7:bc:dc:83:34:60:b3:b3:c6:53:9f:99:60:
5a:c1:e5:6a:ff:ac:90:07:13:b1:f8:24:18:55:4a:
0c:9d:4a:4c:af:96:98:f0:2a:d0:9b:82:8a:7b:54:
86:47:66:86:f5:5b:a7:31:ba:7a:ef:e2:e5:f9:fc:
79:64:fa:9c:f2:dc:1a:80:1c:ba:68:24:d7:4d:56:
f7:e1:3b:28:f1:db:9d:05:cc:bc:b1:0f:cb:20:9b:
d4:75:ca:f0:72:3c:b8:86:e2:46:62:2f:50:f3:e6:
26:1b:b4:ee:59:0d:74:98:95:b0:50:ee:1f:d0:12:
81:d5:3a:36:cb:5b:21:e1:06:d5:1c:34:86:a6:0b:
73:81:e6:74:b8:b5:05:59:db:fd:b2:98:3e:d8:75:
23:a2:19:82:4b:68:97:e5:e1:fa:52:97:d9:81:12:
84:b6:ab:17:f0:b4:85:09:f3:5f:a5:17:44:51:4a:
a2:eb:dd:70:b3:3f:b9:44:4c:7c:52:ed:52:07:30:
27:e6:dd:52:14:0c:96:a7:2c:34:3f:ae:01:bf:6e:
76:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4B:9F:E0:9A:05:6C:DA:96:82:6B:C6:93:55:C7:43:14:A5:93:8C
X509v3 Authority Key Identifier:
keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/qEuf4JoFbNqWgmvGk1XHQxSlk4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.188.0/22
185.185.77.0-185.185.78.255
IPv6:
2a0f:a0c0::/29
Signature Algorithm: sha256WithRSAEncryption
91:e7:53:18:06:6a:16:73:2b:ed:59:d1:ab:a0:3e:ab:a8:88:
ef:a3:61:41:18:04:9a:78:f1:dc:34:69:d1:0d:d3:92:1d:70:
01:5f:b0:be:3a:62:27:80:ff:b4:b3:a6:3c:5e:a0:47:50:f1:
db:b5:66:3b:ac:6c:74:6a:77:21:3d:3d:9e:3f:23:01:67:73:
45:ef:04:40:e7:78:a7:8c:30:3b:c9:58:f0:a6:80:c5:34:8c:
f5:15:ff:6c:cf:82:31:55:30:fe:8b:52:4a:d7:75:e7:51:58:
bc:f0:90:34:59:2b:2e:15:69:c4:2c:5d:0f:df:f2:96:f4:2b:
b5:c5:b8:78:9d:ce:88:10:b6:a5:00:b4:94:c8:72:b1:40:5c:
5a:12:4d:bc:3d:ad:ef:b4:73:c4:33:82:4d:17:ea:a0:b4:76:
28:de:54:cf:cc:e0:98:1e:c0:17:6b:c8:1f:d5:9c:4b:89:bf:
8a:05:94:90:36:9e:35:3b:78:f8:97:7e:73:7f:de:80:d4:5c:
09:9c:11:42:60:9f:60:9e:a0:ac:aa:8d:f8:cd:1a:d4:60:95:
a4:60:fc:da:9e:d6:f0:1d:24:26:68:d5:16:6b:92:d9:a6:66:
50:d0:12:06:28:d4:d4:20:24:a8:08:73:69:58:a4:66:b1:64:
e6:59:19:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:38 2025 by rpki-client