Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa
File: Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa (raw, json)
Hash identifier: 3b2rcgvaeO3+9CrEYVWEp7XSo1030UaTBYseGkhn6jc=
Subject key identifier: 43:D2:18:68:F1:CA:28:A9:4E:E2:C0:3D:5C:25:A6:B7:3F:05:72:00
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 0194228D92DF6076570036423770DB8DDAB7
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa
Signing time: Wed 01 Jan 2025 15:48:10 +0000
ROA not before: Wed 01 Jan 2025 15:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50297
IP address blocks: 185.110.132.0/24 maxlen: 24
193.200.209.0/24 maxlen: 24
2a06:5600:28f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:92:df:60:76:57:00:36:42:37:70:db:8d:da:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Jan 1 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43d21868f1ca28a94ee2c03d5c25a6b73f057200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:93:03:b1:27:2f:96:a9:a3:76:76:cc:7e:
3a:bc:12:81:21:d2:db:9a:36:46:42:28:93:8f:79:
81:85:4a:ca:a6:ca:37:16:af:1e:61:dc:a9:58:ca:
c2:20:14:82:04:2c:bb:8b:08:7e:5d:7d:65:2f:33:
52:e0:81:91:f8:01:0f:5c:d7:0a:2d:20:b9:22:92:
39:94:af:cb:69:17:5f:70:01:51:0d:3c:75:13:8e:
a5:1a:90:c1:1b:26:0f:de:71:b1:9c:06:4b:c1:31:
c4:9f:ac:34:93:50:44:36:f0:61:a6:44:60:16:54:
f3:1f:aa:d4:0a:97:ec:dc:de:69:20:f6:d2:6e:27:
e0:25:f7:25:89:bd:61:91:1b:60:e3:29:22:a8:4a:
1b:b6:b0:01:68:21:ac:ce:a3:d8:0d:21:37:9e:a8:
4f:02:ee:17:fa:de:90:81:37:64:b3:75:f8:d3:c2:
92:57:ae:fe:40:db:ef:84:7d:95:93:c1:39:51:a7:
27:1d:f4:96:db:37:d7:d3:e7:e4:68:89:24:b8:1d:
8f:cb:22:fb:b1:2c:17:58:aa:df:a1:00:51:f3:9f:
13:29:fb:f8:49:cd:5d:9d:ff:d1:30:2e:8d:fd:f4:
e1:bb:ac:da:f5:84:2b:b0:0b:a5:75:36:e0:dc:12:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D2:18:68:F1:CA:28:A9:4E:E2:C0:3D:5C:25:A6:B7:3F:05:72:00
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.132.0/24
193.200.209.0/24
IPv6:
2a06:5600:28f8::/48
Signature Algorithm: sha256WithRSAEncryption
4d:97:56:d3:77:bf:94:3e:cf:c1:7e:13:a1:2e:bd:28:aa:0f:
d4:e9:b3:ed:a2:e9:cf:37:59:34:14:5f:5a:c3:45:9b:77:f4:
36:a8:cb:cf:07:0d:c0:af:7e:f4:fb:49:a9:7a:02:92:fe:29:
d1:52:f4:13:2d:ae:f7:fd:d5:12:4e:57:ab:6a:43:e4:98:cb:
2c:21:fd:17:67:f0:10:6e:9a:b2:77:65:88:c3:16:7c:df:30:
4a:7d:c6:c8:21:d2:6a:8a:68:c8:ea:9b:fd:23:9a:f7:0b:03:
02:03:81:cc:6d:bd:28:d2:07:27:dd:b5:8e:f1:86:b2:c5:27:
c1:6a:a4:80:a0:18:9a:f2:0a:a2:ae:9a:ba:10:c1:2f:d0:2f:
0f:e6:8f:52:6b:e8:7c:4a:0f:dc:bb:86:8b:54:e8:e8:05:40:
ac:61:c8:f8:5d:4a:93:19:e6:15:18:19:3b:ef:3f:5e:3a:a0:
30:23:b4:c7:5f:90:97:39:43:2d:af:9a:b1:00:69:4e:53:92:
98:39:94:de:74:96:71:06:8c:69:2f:15:82:d4:32:af:b3:c2:
23:d8:91:3d:d3:fc:79:63:8d:ed:d8:03:ec:86:39:25:2a:21:
eb:93:1f:d0:4e:7f:cd:53:e4:08:79:8b:0d:61:36:c2:88:50:
a6:53:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:02:40 2025 by rpki-client