Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/Cqe38rpbTYcW3IBIj3GE-axW20k.roa
File: Cqe38rpbTYcW3IBIj3GE-axW20k.roa (raw, json)
Hash identifier: rFb4HKGqgMrSh0TmO+Kz12Dni5W90nAeu/GsQNE5QbI=
Subject key identifier: 0A:A7:B7:F2:BA:5B:4D:87:16:DC:80:48:8F:71:84:F9:AC:56:DB:49
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 019421B21D726669169201EFE7B622C29AD0
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/Cqe38rpbTYcW3IBIj3GE-axW20k.roa
Signing time: Wed 01 Jan 2025 11:48:28 +0000
ROA not before: Wed 01 Jan 2025 11:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39841
IP address blocks: 84.17.75.0/24 maxlen: 24
84.17.83.0/24 maxlen: 24
84.17.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1d:72:66:69:16:92:01:ef:e7:b6:22:c2:9a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0aa7b7f2ba5b4d8716dc80488f7184f9ac56db49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:ec:68:a8:74:40:b0:12:88:30:15:f5:fa:
97:d4:41:23:62:0a:8b:3e:45:9e:1f:ba:6d:ba:4c:
7c:1f:56:fd:49:da:9c:81:bd:34:b0:6b:10:38:0b:
0a:49:43:1a:2a:b9:39:67:3a:95:2b:0f:b4:19:5d:
68:65:6b:74:b5:e8:f4:9b:6f:79:2f:5f:60:57:a6:
31:a9:5c:e3:fc:4e:b9:05:18:9d:24:d0:5f:41:e2:
79:af:72:6f:a1:4e:bb:1d:5a:bb:dc:18:dd:b5:37:
cc:7e:2a:bf:d6:fa:54:0e:9d:9a:9b:71:82:71:e7:
92:72:72:62:0f:0f:47:d2:cc:c8:52:72:2d:fe:f8:
45:e1:7a:2b:39:d8:e4:8c:3e:2e:e1:ad:85:a0:ad:
0d:74:e5:1f:5c:ff:23:a0:20:2e:81:06:39:3c:ca:
85:8d:25:0a:93:a3:c8:65:1f:e2:1e:d7:6d:2a:d5:
e6:fc:a8:65:46:5a:f5:0e:a1:ed:d2:55:3f:e7:b8:
c5:4f:b6:e9:dc:ed:7e:02:89:37:e7:22:f9:49:4a:
65:05:e5:38:96:9b:27:37:e7:b0:0d:ad:05:d8:12:
b4:e5:03:68:08:a0:41:98:09:41:69:71:a7:f6:3b:
b6:b1:eb:03:67:e3:1b:e8:c7:01:a5:72:b9:61:80:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A7:B7:F2:BA:5B:4D:87:16:DC:80:48:8F:71:84:F9:AC:56:DB:49
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/Cqe38rpbTYcW3IBIj3GE-axW20k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.17.75.0/24
84.17.83.0-84.17.84.255
Signature Algorithm: sha256WithRSAEncryption
27:5e:b0:eb:49:78:00:dd:ea:f0:50:87:33:c4:15:2a:fc:69:
a5:b0:33:7b:52:d2:f6:9d:24:7d:d9:df:92:91:bd:96:fc:02:
c2:8f:dc:8c:29:1f:fc:52:f6:da:b9:62:20:16:6f:7b:a2:a1:
02:0b:10:a8:cb:7e:f7:2a:09:02:b6:a4:5f:83:c3:10:c9:1b:
b7:0e:ee:cf:fc:53:4f:69:00:12:be:c8:14:0a:85:c0:a9:7d:
22:74:7e:4c:f0:af:99:43:95:b3:cb:20:cf:dc:64:4c:e5:b2:
f0:42:b3:2e:c6:e8:68:61:59:97:36:34:5c:5d:04:4b:d9:c8:
c8:b4:8a:43:72:70:b1:78:85:7e:b5:5b:70:45:26:89:d5:24:
20:5f:c4:4e:40:00:81:4d:2a:1c:5f:d5:19:57:10:7a:70:16:
ad:2a:9a:c2:3f:b4:9a:d9:c0:45:1c:6c:40:57:e0:6c:5a:d5:
f7:36:03:57:d3:38:90:d4:ee:45:7b:5d:0a:3f:a5:de:2c:f5:
ba:2e:d8:cf:94:24:e1:93:e8:30:03:57:4b:dd:12:03:8a:71:
8a:4b:ba:a3:8c:fe:57:21:f4:23:43:dd:c9:db:bd:6b:2d:2a:
65:ec:27:43:04:2e:e7:9c:31:30:90:56:a6:97:a4:a2:da:2d:
c6:27:f0:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:15 2025 by rpki-client