Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/Q--C0irvMpEnsSFDblZpFtPtBqc.roa
File: Q--C0irvMpEnsSFDblZpFtPtBqc.roa (raw, json)
Hash identifier: JFaxMibJvUby0GCOLMJkygjTHxA6xj2IL0k6gCeBVCA=
Subject key identifier: 43:EF:82:D2:2A:EF:32:91:27:B1:21:43:6E:56:69:16:D3:ED:06:A7
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 019424B2913A5ADF2A56D085C2FF6661950B
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/Q--C0irvMpEnsSFDblZpFtPtBqc.roa
Signing time: Thu 02 Jan 2025 01:47:49 +0000
ROA not before: Thu 02 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 94.125.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:91:3a:5a:df:2a:56:d0:85:c2:ff:66:61:95:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Jan 2 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43ef82d22aef329127b121436e566916d3ed06a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:39:93:9f:8a:38:7d:d3:b3:58:20:1f:ad:
14:30:f3:fd:73:1e:db:3c:5a:4e:34:21:78:07:bb:
87:15:2e:22:3d:73:d0:2f:24:07:b4:b6:e3:66:50:
39:2d:f1:61:a7:aa:0c:ba:49:75:f1:1a:7e:0b:0b:
3d:38:e4:2f:c0:34:93:c4:59:a0:e3:a7:36:67:94:
ba:f0:f5:42:73:98:99:2b:f3:58:16:89:db:bb:e5:
01:b2:3c:11:0e:13:80:c7:85:fc:c5:04:75:a9:88:
ac:a2:cb:8b:fb:e4:97:b2:0d:63:23:b3:df:78:ea:
e3:d5:b6:bb:14:46:51:4e:0d:50:fc:7c:24:85:6d:
67:c7:93:ef:a3:4d:9f:3e:30:07:1b:12:c2:f4:13:
58:62:7d:fb:09:76:2e:5b:52:f6:30:1e:ec:ed:23:
4a:a6:3c:52:11:a0:52:cb:de:66:01:8c:46:a9:9d:
01:de:d9:d2:50:36:f9:14:6f:d4:e3:3f:30:4f:97:
28:75:42:9c:3b:e6:9c:de:28:21:d7:33:da:a5:7d:
38:0f:a9:9f:61:f3:cf:05:88:b8:12:1d:c8:63:75:
3f:9c:95:7a:db:0b:ac:6c:63:72:9b:a9:1e:4b:b8:
44:21:c2:60:22:9a:9d:5b:a4:9b:86:1a:d1:5b:32:
bc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EF:82:D2:2A:EF:32:91:27:B1:21:43:6E:56:69:16:D3:ED:06:A7
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/Q--C0irvMpEnsSFDblZpFtPtBqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:5a:98:15:e1:04:1e:4a:6b:5c:9c:b3:64:b2:8f:ee:85:96:
8c:d4:ef:a9:64:f3:b9:2f:88:85:d1:fc:67:28:b6:3f:c9:ea:
f6:4a:49:18:0b:04:82:00:98:37:31:ad:c5:8e:d7:79:c5:69:
b0:d7:3d:fe:c3:8f:48:98:8c:fa:47:74:3a:53:84:c9:12:14:
03:95:8e:18:5c:37:e3:de:09:51:8d:d2:75:3d:8f:7e:96:03:
27:74:a4:cd:2a:47:f8:35:93:c3:45:11:c0:85:ec:a6:77:92:
b9:9b:83:35:97:c8:54:01:0d:ae:c5:08:55:47:e2:fc:66:0f:
3f:52:92:5c:df:de:e0:5d:3e:3a:f8:c7:19:e3:9e:7e:c6:6a:
e5:b5:d3:fe:cc:5e:a8:c0:00:22:7b:6a:27:3a:02:2f:63:69:
ed:29:3e:1d:5e:44:88:c7:95:c3:7f:6d:30:c6:c2:6e:91:83:
2d:06:e4:7d:4f:61:93:c7:80:59:5e:dd:6b:50:2c:5c:72:88:
47:b3:f2:ba:cd:8a:77:0b:8c:8e:7e:f3:ea:de:0f:ae:9d:ef:
76:ca:78:bf:3b:8d:ea:20:97:54:67:9c:fc:fd:e5:b0:7e:95:
e1:6a:3b:20:c8:2f:dd:6c:de:5c:00:71:70:56:a5:f2:cd:23:
fd:ee:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:53:43 2025 by rpki-client