Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa
File: AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa (raw, json)
Hash identifier: 6o18WCqQ1vQmdpr+KgNhHjoy4zxFnk5Txpn2BtXndjc=
Subject key identifier: 02:AC:13:16:DF:AA:CA:BF:5C:B5:F6:55:87:F2:DC:F8:79:82:2C:8E
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 019427B4B3D17334CAE2405AEBA06D074561
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa
Signing time: Thu 02 Jan 2025 15:49:01 +0000
ROA not before: Thu 02 Jan 2025 15:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60615
IP address blocks: 195.28.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:b3:d1:73:34:ca:e2:40:5a:eb:a0:6d:07:45:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Jan 2 15:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02ac1316dfaacabf5cb5f65587f2dcf879822c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:e4:50:46:56:4d:b2:fb:c1:47:86:8c:c0:
6a:91:17:6f:28:01:cf:d8:f0:89:77:3d:6a:c4:6d:
0a:c7:4f:fb:d4:2d:35:05:60:37:88:f0:c4:08:5d:
63:5f:6f:ed:9a:d9:ea:26:32:5c:f4:d6:ff:b3:5f:
fd:00:59:51:03:a8:51:b7:60:4f:44:9f:b8:a6:95:
df:a4:2b:32:98:3a:0b:14:19:7c:ec:52:75:63:c8:
e7:74:13:0d:33:bd:c8:e8:db:d7:56:30:33:05:1d:
61:68:51:c4:19:e2:a3:89:4f:43:5f:4d:77:ad:89:
00:1e:b1:d7:50:21:de:41:4c:bd:5d:3b:fe:e1:ac:
bb:09:c5:a2:d5:44:04:f1:1d:ba:b5:44:51:07:34:
40:a9:84:11:78:6b:a7:49:dc:1d:3f:e6:ab:10:67:
47:6e:6a:bd:2d:5f:94:cb:88:4c:ce:53:da:6d:a8:
48:f6:81:4b:47:4a:db:f3:4c:fd:85:da:be:d9:68:
95:62:59:ad:32:19:ef:09:68:89:47:30:c9:db:53:
ce:b5:d7:6e:c4:7f:60:7b:8c:8d:c7:39:a7:f2:ce:
48:0f:7e:7e:7e:1a:8c:ef:e9:e9:83:21:cd:23:76:
92:45:77:1f:e2:85:cb:e6:7d:6e:27:af:30:91:af:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AC:13:16:DF:AA:CA:BF:5C:B5:F6:55:87:F2:DC:F8:79:82:2C:8E
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.162.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:1c:1f:14:73:04:62:a4:21:6b:60:b3:5a:3e:74:66:2c:06:
1c:6e:02:58:a3:87:bf:62:45:a2:fa:0e:4a:2e:b4:a8:db:ce:
65:0c:17:59:a8:09:09:e1:9d:e0:7a:ee:24:ba:27:e5:71:2d:
74:cb:b5:0d:09:9b:45:55:0c:76:5a:21:11:3d:b6:0f:ca:68:
0a:6f:aa:1f:62:39:de:04:2f:0c:14:b1:73:90:be:2f:f0:79:
95:d2:5d:1d:b2:c1:51:d9:f8:87:78:b7:34:f1:e0:a4:85:ae:
76:a7:6b:de:29:d5:ca:c4:f0:a5:f6:0d:4c:75:81:3a:5f:9e:
1c:cf:07:6a:dc:37:61:19:ba:6c:c5:38:6f:01:4a:d3:9e:25:
6a:46:85:7b:77:49:fd:9c:eb:c7:b7:e6:60:08:9f:02:0e:d2:
1b:25:5e:ae:8d:be:49:da:59:a1:8e:94:f0:2f:9d:d4:a8:49:
ba:17:2b:51:ee:e3:d9:a7:3e:5b:54:fb:ca:eb:5c:80:b9:85:
d6:6a:f0:bf:d6:3c:a7:67:8c:e5:5d:b6:49:25:53:f6:8f:cf:
9b:78:c1:3a:28:3d:c8:2f:89:d9:bf:a8:9c:cc:5b:de:2f:0a:
ae:f7:6c:50:bb:fe:24:37:71:77:98:26:07:38:34:ee:c4:27:
8a:1c:92:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:33:32 2025 by rpki-client