Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/lQ20cZ9OUrcSqb6gIxN40wQjpAk.roa
File: lQ20cZ9OUrcSqb6gIxN40wQjpAk.roa (raw, json)
Hash identifier: WgCV5F0Lo1vsx71+iRrim7ywAzohxnYAfe2pxSvyfPA=
Subject key identifier: 95:0D:B4:71:9F:4E:52:B7:12:A9:BE:A0:23:13:78:D3:04:23:A4:09
Certificate issuer: /CN=7b18bcea227a4eac61b5300b304deef14694dc91
Certificate serial: 019423D6B3C985F8CEE31D2C8E80DBC16752
Authority key identifier: 7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/lQ20cZ9OUrcSqb6gIxN40wQjpAk.roa
Signing time: Wed 01 Jan 2025 21:47:40 +0000
ROA not before: Wed 01 Jan 2025 21:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201157
IP address blocks: 185.79.64.0/22 maxlen: 22
2a03:5c60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b3:c9:85:f8:ce:e3:1d:2c:8e:80:db:c1:67:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b18bcea227a4eac61b5300b304deef14694dc91
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=950db4719f4e52b712a9bea0231378d30423a409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:fc:b1:2d:24:5f:2d:15:44:cb:0c:f6:f1:
9f:f8:66:65:c8:dc:da:83:7d:48:fc:44:eb:72:47:
57:56:10:9b:99:7a:da:6c:b7:15:db:a7:b2:b6:65:
9b:e8:a5:94:51:b3:af:a0:a7:3c:16:7c:af:df:1c:
c0:07:76:ae:5b:c0:34:c8:e7:d3:c4:f1:f3:1c:b0:
9d:c5:fa:7d:cc:fe:9f:9c:6f:1e:ca:10:9f:26:26:
e5:1c:54:98:71:ea:a5:77:c6:9e:b1:b0:f3:d6:6d:
fa:14:37:c9:42:4c:17:2e:a4:f9:5e:d2:f1:e0:15:
2e:ae:c5:22:92:5d:76:c6:6b:cf:6f:bd:b3:0f:2e:
23:ae:ef:8a:e1:1a:9f:15:23:f2:36:86:36:71:05:
74:8b:f2:e0:67:f1:a9:b0:c1:3a:77:e4:ea:00:17:
e7:e7:77:ef:24:98:85:5e:f4:79:42:9a:d1:2c:a9:
7f:1b:fd:21:55:40:e5:fa:80:ce:48:69:1a:e2:38:
d3:92:db:ba:ae:42:d7:d4:63:07:16:a9:a0:0d:dc:
9b:11:8f:a6:58:08:8d:ef:8f:54:70:9c:bd:b1:e4:
d0:36:7f:76:0f:75:a2:13:9d:c4:66:9d:78:be:5b:
e7:8e:63:17:1d:64:93:7c:58:b6:55:be:0e:ae:0b:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0D:B4:71:9F:4E:52:B7:12:A9:BE:A0:23:13:78:D3:04:23:A4:09
X509v3 Authority Key Identifier:
keyid:7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/lQ20cZ9OUrcSqb6gIxN40wQjpAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.64.0/22
IPv6:
2a03:5c60::/32
Signature Algorithm: sha256WithRSAEncryption
8d:f8:bb:98:da:c0:f4:45:08:b9:0b:cf:62:98:ad:36:da:c5:
b1:f5:43:2f:45:dc:9a:ff:4c:52:6d:d9:44:e8:f1:17:35:98:
0e:a7:55:0f:14:b1:94:bb:e4:dd:65:44:a2:19:cf:09:88:f9:
20:43:4b:49:16:f3:b6:13:37:6c:27:a7:d9:f8:c7:e4:70:61:
8f:a5:55:b9:96:ba:f9:ff:42:09:26:35:f2:a5:39:2a:cf:64:
8f:9e:4c:00:8e:6e:4c:cc:9a:0f:d2:66:40:80:41:4d:d7:71:
c3:43:f2:37:5e:69:3e:27:cb:c8:54:0d:8a:74:f6:11:66:bc:
fc:60:a7:1e:97:11:34:f4:13:f1:c6:67:b4:3e:4c:47:c2:f3:
06:36:a2:6e:6d:0b:1a:a3:69:f2:1a:9c:e6:5f:eb:2e:30:cf:
9c:49:d1:04:20:39:5f:29:8a:d7:67:ac:98:a2:c0:68:ce:1e:
38:be:43:6f:bb:11:2b:cd:9f:f6:08:9c:48:cc:33:cc:8f:cd:
1d:e2:03:3e:38:c7:be:b4:18:d4:0b:a6:63:e3:4f:1c:a8:d4:
4f:e3:a8:da:d8:bf:67:2b:8f:bf:4f:10:de:ca:34:b9:52:54:
41:cb:4e:f3:d7:38:59:ca:30:22:13:07:9a:ef:ec:c3:c9:3d:
bc:09:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:47:09 2025 by rpki-client