Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/QWJn3q0Lr5gGgTezlymenkp6b1w.roa
File: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (raw, json)
Hash identifier: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=
Subject key identifier: 41:62:67:DE:AD:0B:AF:98:06:81:37:B3:97:29:9E:9E:4A:7A:6F:5C
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019427B5B8AD96BECF45837BC38A1DE56011
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/QWJn3q0Lr5gGgTezlymenkp6b1w.roa
Signing time: Thu 02 Jan 2025 15:50:08 +0000
ROA not before: Thu 02 Jan 2025 15:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 80.246.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b8:ad:96:be:cf:45:83:7b:c3:8a:1d:e5:60:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 2 15:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=416267dead0baf98068137b397299e9e4a7a6f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:12:a4:a2:d0:b2:98:f0:2a:90:ae:79:43:45:
e7:9d:fb:ed:64:a0:55:c9:a5:de:06:e0:14:43:16:
2b:d1:39:f8:60:c4:30:6d:d1:82:13:97:7c:09:3c:
5a:d5:7a:67:65:eb:65:16:d7:26:b4:7e:14:63:2a:
d5:3d:d3:af:4a:33:d2:4b:d2:96:bb:7a:ca:56:c2:
8a:72:b4:16:9f:10:db:d7:77:9d:a7:84:50:cc:ef:
04:98:45:f2:04:a8:c7:ef:a9:27:e5:bb:5a:50:8b:
30:92:98:1f:61:44:cf:c6:f1:61:9d:6d:91:24:ba:
3f:bf:6b:ca:89:bd:29:8f:27:61:13:4a:05:e5:37:
ad:a3:a7:a2:df:2d:e9:56:ae:82:16:6b:7e:1c:68:
55:1b:0a:77:8c:3b:4e:68:7d:69:12:8d:d0:a4:00:
aa:45:1a:82:0f:b0:36:49:a2:da:47:43:29:30:5e:
ab:c4:db:50:db:38:59:cd:f5:23:7f:e9:59:2e:51:
97:74:11:39:ed:44:09:8d:ba:a2:ff:24:e9:8e:b2:
d0:b2:ed:fe:7d:ab:97:93:24:20:56:1d:22:1d:e2:
5b:00:eb:08:5b:77:a4:ee:d7:52:76:f9:91:8c:62:
49:f2:61:8a:0c:aa:92:01:bf:7c:10:5d:d5:46:46:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:62:67:DE:AD:0B:AF:98:06:81:37:B3:97:29:9E:9E:4A:7A:6F:5C
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/QWJn3q0Lr5gGgTezlymenkp6b1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ff:7e:35:e5:f4:79:18:35:65:0b:41:44:f7:41:7f:ef:07:
8a:b6:2b:73:fb:c4:19:52:7d:1e:a3:27:b5:85:c4:8b:37:66:
df:ef:8e:4d:00:f6:bd:1a:91:af:95:29:9c:b5:34:c3:e1:ec:
f5:0f:22:e3:ab:5e:4c:b0:be:c9:8f:53:f1:de:af:da:14:e5:
90:44:30:70:c7:2c:ae:d5:92:9d:a9:62:85:ce:9a:e7:39:8b:
80:0f:4a:a4:c7:f7:c8:09:53:90:4f:cf:8a:17:d5:cf:0e:54:
ad:08:32:b5:06:ea:16:91:b1:6f:80:5f:49:92:43:89:f3:31:
e9:c4:4a:ed:52:06:78:4b:3e:b2:04:86:15:b3:e4:5f:a6:d6:
02:87:55:af:cd:22:aa:6e:49:83:1f:bf:78:e9:07:ad:d5:ac:
54:44:78:2d:6c:7e:d4:04:17:09:59:92:e4:0d:25:0f:30:25:
38:e5:b8:fd:36:1c:96:bc:1d:54:81:a9:b3:11:f5:bf:ac:3b:
48:24:ea:ff:97:07:4e:7b:a6:88:b2:fc:ee:62:8a:6e:7f:4c:
ed:bd:7e:7f:04:c6:93:69:f9:65:15:9d:69:48:17:3e:9c:bd:
ae:44:29:01:71:46:07:3a:42:b5:52:b7:5f:0b:ff:0d:ce:f4:
82:6f:0f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:05 2025 by rpki-client