Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/qs9auAFh2pBR3JizXaVl9ahPIZw.roa
File: qs9auAFh2pBR3JizXaVl9ahPIZw.roa (raw, json)
Hash identifier: rWVPduWCAoKm2gglbIKEXbvoDR4rX+//s9Ke5NqI9jo=
Subject key identifier: AA:CF:5A:B8:01:61:DA:90:51:DC:98:B3:5D:A5:65:F5:A8:4F:21:9C
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 0194282391E6767A9B3CC395FA0C97C5ABC0
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/qs9auAFh2pBR3JizXaVl9ahPIZw.roa
Signing time: Thu 02 Jan 2025 17:50:07 +0000
ROA not before: Thu 02 Jan 2025 17:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28685
IP address blocks: 145.128.128.0/19 maxlen: 19
145.128.160.0/19 maxlen: 19
145.128.192.0/19 maxlen: 19
145.128.224.0/19 maxlen: 19
145.131.64.0/18 maxlen: 18
145.131.128.0/19 maxlen: 19
145.131.160.0/19 maxlen: 19
145.131.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:91:e6:76:7a:9b:3c:c3:95:fa:0c:97:c5:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 17:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aacf5ab80161da9051dc98b35da565f5a84f219c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:d5:2b:d6:61:a1:29:2f:52:b6:ae:43:31:
6c:42:e5:a3:74:df:b7:35:df:2d:36:d1:4e:8a:3b:
cb:b6:d7:47:44:c3:0d:55:d7:61:09:82:b1:c1:00:
0c:e8:fc:9e:51:8d:cb:1a:5d:44:ec:03:87:c6:82:
78:1c:5a:e1:73:76:06:43:87:9e:c6:5e:17:c7:c5:
36:83:a2:07:f4:21:b8:a1:90:5e:94:49:9a:28:95:
d2:32:b3:93:82:a3:86:a0:62:02:38:8d:36:5f:dc:
3d:c3:de:db:5b:fa:7f:ca:61:e1:48:ac:34:98:18:
2e:54:56:b3:0e:c5:34:69:85:df:4b:e1:4d:3a:47:
68:48:52:f3:11:9e:59:58:56:f6:a5:17:1b:0d:06:
22:4f:84:56:40:ef:e0:44:b9:d3:8f:2f:7b:d0:4d:
04:63:88:23:c2:81:c5:bb:ef:05:c3:df:d4:62:b8:
d3:8c:d0:1b:65:0c:cf:43:62:2a:5c:f5:81:f0:8f:
63:09:d9:60:04:41:b0:22:97:e0:c0:3d:6d:6c:a1:
87:75:ea:7d:e9:d5:29:ed:e0:d6:42:a1:f7:98:49:
d2:a1:3d:ff:28:58:a8:c1:21:60:ad:0a:d0:5f:bd:
02:94:bf:85:2a:b0:05:a9:ab:98:34:7a:11:59:67:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CF:5A:B8:01:61:DA:90:51:DC:98:B3:5D:A5:65:F5:A8:4F:21:9C
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/qs9auAFh2pBR3JizXaVl9ahPIZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.128.128.0/17
145.131.64.0-145.131.255.255
Signature Algorithm: sha256WithRSAEncryption
5c:46:15:1c:7c:cd:88:62:31:f5:c2:ff:2d:cf:84:de:08:33:
a7:95:66:a6:0f:8e:ab:45:e9:51:3f:64:20:38:c9:bc:a2:b6:
8e:05:ab:f0:0f:f4:bf:35:60:d7:84:e5:5a:4e:87:e0:3a:05:
ae:34:e5:4f:18:d7:4a:41:10:01:53:87:82:0e:a2:92:85:1a:
ea:a1:89:b5:2e:ed:9e:59:e6:73:16:10:9c:ec:b4:2c:a8:96:
6f:af:6f:2a:76:92:81:4d:ec:e5:02:98:42:8c:97:7a:ed:fc:
0a:5d:87:5d:47:5d:15:f8:5f:eb:74:6d:d3:ea:55:81:57:02:
6b:37:86:fb:3e:8b:22:1d:8c:c7:63:22:9a:4c:eb:36:f4:fb:
f1:47:ac:a4:5c:c1:7f:b5:16:6f:63:33:e1:f3:4f:a3:57:94:
ec:0a:cb:c8:56:5a:3c:bc:75:9c:55:d7:07:b3:e3:66:03:90:
fe:3d:2c:f5:70:45:59:7c:5b:66:96:67:b6:1c:07:df:0b:3c:
3c:24:27:c4:5e:27:50:e5:e8:dc:83:f3:7c:e6:31:79:d6:d8:
e0:a9:63:15:f3:0e:eb:b4:b2:ff:8a:a7:89:4d:4b:42:a8:4c:
54:3e:91:48:26:01:aa:6d:ba:9d:a3:85:26:6b:d1:f1:45:a9:
f2:8f:b9:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:08:26 2025 by rpki-client