Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/qAgR3U_rmhTk9ylZXwkHVA3MlH0.roa
File: qAgR3U_rmhTk9ylZXwkHVA3MlH0.roa (raw, json)
Hash identifier: aIy0e102scbWahaNYsLiO2Tj1Fxcl0+tQeOdYm8oqFU=
Subject key identifier: A8:08:11:DD:4F:EB:9A:14:E4:F7:29:59:5F:09:07:54:0D:CC:94:7D
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 0194221FAC001444E5EB9383E3176851A884
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/qAgR3U_rmhTk9ylZXwkHVA3MlH0.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36351
IP address blocks: 5.62.22.0/24 maxlen: 24
5.62.23.0/24 maxlen: 24
5.62.33.0/24 maxlen: 24
5.62.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ac:00:14:44:e5:eb:93:83:e3:17:68:51:a8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a80811dd4feb9a14e4f729595f0907540dcc947d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ed:71:34:f7:49:f6:cc:3b:cd:1d:6c:7d:12:
7d:b3:d6:f0:20:fe:a9:34:01:85:d6:c0:52:20:95:
87:84:55:b4:73:2c:c2:7f:2a:1b:0a:6e:f2:18:6a:
08:1d:bf:12:f9:00:c5:30:6b:fc:7c:ec:27:16:18:
8a:2d:be:c1:ea:3b:30:0d:38:29:8a:4f:de:f9:b2:
08:ea:c2:37:82:c2:e9:4c:03:3d:3c:5e:c7:46:4b:
6b:2d:5f:d7:82:be:0a:f3:60:02:6a:16:e4:84:3f:
90:b4:9e:15:7e:7f:6a:68:d2:d6:2a:74:f6:81:2b:
a1:48:53:8a:30:a5:14:38:a7:6e:46:92:54:c8:a5:
89:ff:ae:a1:f6:e0:9f:ac:8a:06:87:0b:e0:06:d9:
61:61:6f:e1:9b:27:f6:ed:cf:b2:79:10:0a:fb:c2:
23:18:b6:7d:fc:d3:40:54:fb:bd:bb:3f:59:f2:51:
20:12:43:d1:9b:30:06:2d:43:15:9a:d8:c1:98:8e:
24:c6:64:ff:20:f2:4b:5c:e3:8b:a5:1f:ae:db:2d:
e7:89:4d:0d:47:01:f7:7a:7b:dd:07:b9:a9:a6:05:
78:45:9f:77:b3:da:17:3f:9e:3f:6f:38:57:f6:34:
5b:b3:f1:88:12:64:39:1b:c1:c5:ce:8f:70:c8:90:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:08:11:DD:4F:EB:9A:14:E4:F7:29:59:5F:09:07:54:0D:CC:94:7D
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/qAgR3U_rmhTk9ylZXwkHVA3MlH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.22.0/23
5.62.33.0/24
5.62.35.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ff:66:46:36:46:c3:a8:2d:e3:c3:71:b3:a6:a4:5f:ac:b0:
8f:ef:fd:f0:33:a9:57:c3:3a:37:7c:ef:25:c5:44:19:64:d9:
8b:3b:5b:93:55:36:b3:4c:b2:c2:a3:a1:c3:b1:59:a8:a4:d2:
c6:be:fc:69:8c:d4:b8:09:0f:a2:2c:a7:ce:71:82:44:c7:ad:
44:b7:71:b2:76:11:52:be:12:19:3f:97:0b:8e:fe:fe:6c:4c:
99:51:59:84:42:6a:a3:24:b2:8c:f1:13:88:09:e1:2d:23:2d:
a4:8f:46:37:97:72:9f:f3:3e:2d:bc:70:a3:d7:d7:6d:17:e2:
ac:b8:da:2d:a9:98:b7:af:09:84:79:79:2e:c5:9f:df:6f:8c:
09:fc:98:5b:6a:b8:94:f9:3e:d9:42:90:4e:fb:6f:a5:be:59:
ea:1e:d0:57:6c:77:0e:0c:86:b1:42:fe:fb:c7:33:3c:b4:be:
38:32:a8:ad:7f:6a:70:f3:c0:c4:e6:86:c8:04:5f:e4:b6:4d:
be:b1:7f:96:52:0e:d1:13:f0:34:e5:10:98:f3:e0:f2:ec:86:
43:c8:4e:e8:96:10:75:61:bf:1b:4a:62:53:fb:a6:7b:c7:7f:
04:c7:2d:70:54:46:ab:10:8b:00:14:10:3b:ac:be:80:43:27:
f9:a1:fd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:11:21 2025 by rpki-client