Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/7qGCgpIfKLXoJsT35rezDziDBhA.roa
File: 7qGCgpIfKLXoJsT35rezDziDBhA.roa (raw, json)
Hash identifier: 5kmqeNrinp9lsuCAyZflpq/OiszbJU7jNmzUel6IR+E=
Subject key identifier: EE:A1:82:82:92:1F:28:B5:E8:26:C4:F7:E6:B7:B3:0F:38:83:06:10
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0194267E9D180D19BE161192B904F2A1B5C1
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/7qGCgpIfKLXoJsT35rezDziDBhA.roa
Signing time: Thu 02 Jan 2025 10:10:19 +0000
ROA not before: Thu 02 Jan 2025 10:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57237
IP address blocks: 194.12.235.0/24 maxlen: 24
194.12.236.0/24 maxlen: 24
194.12.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:7e:9d:18:0d:19:be:16:11:92:b9:04:f2:a1:b5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 2 10:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eea18282921f28b5e826c4f7e6b7b30f38830610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:03:e5:da:54:a5:25:71:5a:c0:42:87:33:
4a:bd:5c:5e:2b:48:5a:24:b4:be:fc:20:cd:75:e3:
be:f3:57:90:cf:d4:c3:6b:99:6f:d0:ff:11:fd:3a:
2a:75:f0:97:ca:2c:d8:cc:c4:0e:3d:fc:a6:25:c9:
95:17:d9:6e:f7:3a:8c:06:83:57:80:a6:b2:98:cf:
8d:4c:d6:6b:33:3c:90:5e:e7:a8:65:6a:29:8a:f8:
6d:a8:3a:56:e6:bf:ac:17:4f:a1:01:c7:76:16:5f:
53:96:ec:b1:41:46:8f:29:3a:a1:9d:d3:36:2a:1b:
63:83:d8:9d:12:0b:70:ce:06:37:4a:1a:a9:17:4b:
1c:f6:10:3a:74:19:47:bb:c3:3f:17:39:27:f3:fd:
22:ca:e1:10:2a:3a:3c:7d:ae:77:f5:d2:4e:9d:1c:
81:6d:7a:04:17:a5:2a:79:e3:cd:39:8b:c6:41:82:
fb:cf:eb:ed:bd:70:03:ec:cd:4d:d6:13:c1:78:af:
92:ed:c2:4c:ef:3c:2f:b0:bf:13:7a:f1:61:44:7a:
fb:61:af:ba:1c:ec:d5:2e:f2:55:9b:a1:dd:b0:d3:
69:e3:a6:06:db:41:74:3d:00:2c:6c:57:ee:0f:a2:
00:d8:e4:a1:4a:58:f4:95:72:83:2f:b8:b2:f1:58:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A1:82:82:92:1F:28:B5:E8:26:C4:F7:E6:B7:B3:0F:38:83:06:10
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/7qGCgpIfKLXoJsT35rezDziDBhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.12.235.0-194.12.236.255
194.12.243.0/24
Signature Algorithm: sha256WithRSAEncryption
55:9b:35:34:bf:45:eb:05:63:4d:26:54:ca:c3:88:21:91:a1:
1f:24:9e:44:e8:67:e0:5a:06:38:5b:87:d2:8b:99:1e:90:09:
a4:21:f5:fa:e8:2e:8d:e9:fe:5f:e8:66:a7:ce:34:23:77:f5:
b7:f0:55:a1:2e:75:79:f0:5d:e2:fb:90:52:37:d4:a2:9c:c5:
45:e7:ba:8b:56:60:38:a2:26:5e:e2:c8:e3:51:c5:a3:62:58:
3b:d0:94:ab:bc:56:8d:3a:f1:8a:29:a2:26:03:05:e5:11:2b:
10:20:b6:91:46:c9:15:10:6a:f6:d9:75:a0:ed:51:89:40:32:
7d:84:6f:42:87:3e:26:e4:e4:4c:52:5f:d7:19:a5:e0:ab:5c:
89:eb:d9:f3:62:09:0b:7a:c5:de:5c:6e:85:ee:25:3b:58:53:
d1:21:a0:7b:7a:de:6f:5b:eb:d9:40:c3:22:18:e5:00:1f:ea:
75:e1:ae:d0:ad:9e:50:9f:c0:8c:d0:84:3d:35:41:c8:9c:2a:
6a:ce:08:d8:ec:30:5c:98:0b:83:35:2d:15:04:4d:88:d7:92:
81:10:95:0d:23:a8:e7:49:69:70:af:87:11:c9:ed:7f:25:24:
53:54:c4:08:66:5f:14:61:d3:50:69:d2:db:93:12:10:ab:df:
03:23:12:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:55:18 2025 by rpki-client