Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/C324i-QiLStBQtj8SlSM_WsRhgA.roa
File: C324i-QiLStBQtj8SlSM_WsRhgA.roa (raw, json)
Hash identifier: 57MQFbrSaZ/38tAVb1G6ejMsXoqYvy5V/+YD5WOhbAY=
Subject key identifier: 0B:7D:B8:8B:E4:22:2D:2B:41:42:D8:FC:4A:54:8C:FD:6B:11:86:00
Certificate issuer: /CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Certificate serial: 01942747E471A853E4C3243D6CFA91995A79
Authority key identifier: 72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/C324i-QiLStBQtj8SlSM_WsRhgA.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47568
IP address blocks: 94.100.32.0/23 maxlen: 23
94.100.36.0/23 maxlen: 23
185.122.24.0/23 maxlen: 23
185.122.26.0/24 maxlen: 24
185.122.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e4:71:a8:53:e4:c3:24:3d:6c:fa:91:99:5a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b7db88be4222d2b4142d8fc4a548cfd6b118600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:ae:65:7e:5b:05:99:ff:40:dd:47:c1:e8:
07:89:eb:58:7d:d0:33:d3:b8:a5:0e:c7:16:77:eb:
6e:7e:9e:3d:4e:2e:d8:36:46:1e:61:b5:12:f6:54:
e3:52:5f:ca:ef:e1:12:fb:7f:94:13:16:a1:3a:ea:
84:02:b6:47:c7:30:17:90:ca:86:46:33:cd:a0:a1:
1c:fc:97:08:62:3a:6e:cf:27:53:54:fd:c3:6a:49:
37:a5:5f:e3:b8:11:b5:3b:5e:d8:fa:dd:28:a8:36:
74:ee:4d:11:b5:4b:81:97:36:1d:88:8c:3e:e0:60:
94:7e:70:57:8a:9a:e9:2d:74:27:a5:e6:b8:c4:45:
a1:cb:4e:c4:f0:26:6f:68:d4:26:1d:3d:ae:8d:1f:
ae:aa:98:73:5c:29:62:df:5d:76:71:57:b1:8d:08:
ee:6a:21:c2:01:39:5f:79:54:cc:53:db:2b:93:1c:
e3:ef:6d:df:93:6d:aa:3d:91:0e:a3:2d:1f:8a:3e:
3a:9b:4b:93:0a:11:ea:78:0f:54:d7:a2:e1:ea:88:
e5:5b:2a:7a:24:c7:64:45:bc:1f:93:5f:e0:6d:88:
fa:63:c5:30:e7:a5:d2:2e:70:69:67:9f:dc:cc:96:
ae:68:0d:8e:42:7c:1b:91:87:06:2e:73:74:7b:d3:
4f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7D:B8:8B:E4:22:2D:2B:41:42:D8:FC:4A:54:8C:FD:6B:11:86:00
X509v3 Authority Key Identifier:
keyid:72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/C324i-QiLStBQtj8SlSM_WsRhgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.32.0/23
94.100.36.0/23
185.122.24.0/22
Signature Algorithm: sha256WithRSAEncryption
69:4c:0b:39:69:ca:6d:84:45:6f:3d:77:b4:08:01:71:da:33:
d3:ec:98:63:de:b9:67:a5:2e:6c:6f:66:d5:0e:46:d8:ff:db:
55:da:15:6f:80:e3:46:ea:77:6d:6e:0f:c2:e7:9a:e5:5a:c7:
ba:16:fc:59:75:90:6a:5a:6d:77:5b:7c:a5:14:6d:21:18:31:
5f:f5:37:3d:ce:d5:51:52:40:9e:c7:cc:8b:70:15:5c:44:a1:
b5:c4:32:4f:6b:75:35:f7:5a:44:4f:b8:97:31:33:ba:82:f5:
3d:b5:09:10:cf:e5:94:b1:91:4f:ab:91:1e:69:eb:85:7e:54:
e3:46:ba:f3:94:8a:ad:75:18:3d:42:43:cb:b5:43:f0:d0:60:
18:b7:45:3c:66:49:61:3b:79:8b:6a:bf:b3:94:81:fc:b0:8a:
05:f5:f6:0a:4a:af:5b:1f:02:33:6d:b2:b1:a5:d0:0b:f2:2d:
f1:a9:30:cf:7e:39:71:a0:78:45:51:9a:f6:9e:4b:04:8f:67:
15:09:bc:42:4a:4d:28:e8:ff:6e:43:d9:96:4e:2d:56:c0:4b:
ac:44:4d:fc:6b:01:bb:88:15:eb:e2:bb:34:a7:a3:3f:bc:50:
af:08:35:b6:2e:eb:f3:43:8d:71:1e:ba:33:80:12:b7:dc:f0:
f0:03:37:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:44:13 2025 by rpki-client