Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/1-QMPtoomm6W5CX-SS0fyQ5AS734.roa
File: 1-QMPtoomm6W5CX-SS0fyQ5AS734.roa (raw, json)
Hash identifier: hcd0LKLxrMub9hVDF7pi719s+IDTrzb/8hX4yl7gw2w=
Subject key identifier: F9:03:0F:B6:8A:26:9B:A5:B9:09:7F:92:4B:47:F2:43:90:12:EF:7E
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 01942747BA48578992F2F2C154F122FB9C1B
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/1-QMPtoomm6W5CX-SS0fyQ5AS734.roa
Signing time: Thu 02 Jan 2025 13:49:59 +0000
ROA not before: Thu 02 Jan 2025 13:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 193.17.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ba:48:57:89:92:f2:f2:c1:54:f1:22:fb:9c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9030fb68a269ba5b9097f924b47f2439012ef7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:80:21:d8:b7:ca:7b:13:a4:3a:18:8c:2a:b9:
90:d3:f9:b6:71:09:15:00:4f:e7:20:32:f8:1e:54:
38:bd:3e:b4:39:18:cb:ad:b8:93:52:11:88:45:8d:
ae:63:ae:86:fd:6a:03:68:f5:44:32:39:ef:49:ce:
9d:f7:05:5b:a2:f9:5c:27:b5:e9:d3:7f:09:9a:23:
d4:79:d3:7b:fd:d3:43:8a:68:40:0b:fb:32:07:07:
99:dc:86:4f:47:51:d6:26:6a:03:a7:c5:90:a1:fc:
dd:f0:6c:d7:b8:e0:36:dd:b1:77:0c:7c:b6:5b:66:
f4:1f:79:32:c8:53:b3:c7:4e:c5:40:01:fe:79:57:
4e:d4:71:ff:b2:c8:f9:75:1c:33:fd:71:ef:73:da:
98:a0:9d:95:e3:86:3f:2e:f8:fc:e3:e6:c8:cd:63:
c4:44:5c:78:21:dc:29:d6:4c:2b:17:75:bc:8f:3f:
8b:ec:37:1b:f0:a1:c7:a4:d7:88:23:12:62:e6:d8:
85:57:56:bc:f9:62:f6:98:26:d5:23:3a:1a:ef:15:
ad:51:15:8c:6d:49:da:a4:9f:50:9f:84:63:fa:45:
a7:d8:17:1e:cd:84:11:e5:4e:d6:90:89:4f:5c:7e:
4f:f5:e3:78:29:74:cc:cf:6d:5e:06:fb:76:b2:cd:
32:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:03:0F:B6:8A:26:9B:A5:B9:09:7F:92:4B:47:F2:43:90:12:EF:7E
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/1-QMPtoomm6W5CX-SS0fyQ5AS734.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.195.0/24
Signature Algorithm: sha256WithRSAEncryption
91:85:95:79:c6:bb:e4:13:47:79:65:40:e2:b9:11:f3:fe:c7:
9f:db:ef:bc:c0:70:37:de:59:4e:ef:c7:c1:f7:a5:db:a5:7d:
78:9a:c7:66:80:8a:9e:59:e9:76:03:ec:82:0d:ba:d4:f6:ef:
82:e8:93:df:44:6d:e9:34:f1:5d:4d:6e:e1:28:8a:a3:2c:53:
ef:60:46:ef:e8:11:56:76:48:86:ed:9f:cd:8d:c3:4a:77:57:
4b:aa:1f:f0:20:9c:c9:a4:6c:89:e9:6f:75:e5:4c:35:4c:d7:
67:a4:6c:ff:67:92:be:0e:14:6f:20:ed:f7:87:cb:c6:29:d9:
d9:00:b7:bf:25:25:b8:cf:3b:23:8a:e9:a7:40:69:50:d6:1d:
3d:25:ed:c9:b4:31:4d:2c:65:19:a3:c5:84:d5:5a:08:8a:1d:
02:ca:aa:df:44:7b:89:b6:ac:de:f0:0a:a8:de:98:59:85:f6:
9a:ed:e6:71:69:4b:bd:ec:fa:86:c5:51:54:18:d4:a6:8a:b1:
28:03:eb:55:3f:5f:b5:2d:dc:1b:1e:2a:0a:07:71:14:3e:ec:
5f:64:02:ce:d2:61:8e:3d:2b:d0:c4:bf:38:8f:af:f6:00:90:
f6:4a:89:fd:45:19:f1:a3:ac:fb:07:85:f9:ae:20:ea:50:81:
a7:b2:8e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:05:33 2025 by rpki-client