Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/qTT5EzYYejgHx_-gozkgtiyWSxE.roa
File: qTT5EzYYejgHx_-gozkgtiyWSxE.roa (raw, json)
Hash identifier: WcMM5EKO8L7zVDvgOOXzTCPHLyfkpMtxpa7CTFKHemk=
Subject key identifier: A9:34:F9:13:36:18:7A:38:07:C7:FF:A0:A3:39:20:B6:2C:96:4B:11
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 01942521458B8104956A0657F562B016DC08
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/qTT5EzYYejgHx_-gozkgtiyWSxE.roa
Signing time: Thu 02 Jan 2025 03:48:44 +0000
ROA not before: Thu 02 Jan 2025 03:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206353
IP address blocks: 185.186.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:45:8b:81:04:95:6a:06:57:f5:62:b0:16:dc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Jan 2 03:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a934f91336187a3807c7ffa0a33920b62c964b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:54:4a:d9:97:36:54:12:02:c5:bf:f5:99:
a3:92:6f:3a:c3:37:b7:c2:ba:1e:40:d8:c7:a0:ee:
4e:f7:03:8f:19:b1:1e:02:ff:d6:d0:4b:e1:6a:3c:
14:91:46:06:d0:c3:55:5c:4e:4a:39:8e:c7:37:bd:
65:30:5a:a3:90:1e:24:1b:58:63:87:77:68:b7:07:
c6:d6:20:5f:06:b4:84:1f:9a:d7:ae:48:a6:9c:1d:
40:50:6a:f2:52:22:07:50:03:38:e0:56:e7:9e:69:
4e:ae:69:01:6d:52:24:98:c9:ff:03:94:76:18:7b:
67:16:14:05:50:c3:41:10:fc:27:ff:95:c0:c7:2d:
e3:7e:31:7a:5f:33:5d:8d:f5:2d:61:41:e7:22:27:
50:03:f4:62:59:49:4f:ec:d9:20:ca:ec:cb:1b:8d:
ce:79:92:d0:ee:73:f3:45:b6:9a:d4:e6:ac:b9:c8:
98:b6:f4:3f:e4:e4:08:b6:7f:6f:13:c6:f4:94:2f:
12:d3:53:2c:01:0b:6a:cb:d7:ae:a2:ae:2a:ae:6a:
02:6d:15:c6:61:e1:6f:cc:b6:c5:c4:cd:02:ae:4e:
a4:51:6c:31:9a:8f:8f:09:fb:cd:4e:cf:ed:02:b2:
d0:ec:c3:70:b6:a3:44:df:5c:89:aa:41:2b:5b:9c:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:34:F9:13:36:18:7A:38:07:C7:FF:A0:A3:39:20:B6:2C:96:4B:11
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/qTT5EzYYejgHx_-gozkgtiyWSxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.128.0/24
Signature Algorithm: sha256WithRSAEncryption
45:14:35:d4:48:d8:11:70:e5:2c:ad:08:28:4f:84:0a:51:a2:
ca:fd:3f:9a:8a:5b:03:5f:59:3c:4c:ae:72:2d:62:5e:1b:6b:
fa:c0:f4:e5:9b:d0:79:c7:20:82:d9:e3:00:02:cc:ed:4d:e6:
dd:ce:1e:54:a7:09:8f:d8:db:29:b0:40:f9:a6:f4:7e:70:ca:
af:ce:2d:32:51:41:94:db:b0:cf:64:62:87:aa:18:43:a9:3e:
51:13:ac:6b:7a:3f:d4:58:c1:ad:b3:0d:22:fd:85:a1:dd:88:
98:14:a0:44:87:37:3f:64:23:d8:45:34:93:7f:51:ef:27:ab:
71:4d:f6:41:90:79:f6:8d:ab:6e:81:9f:4c:11:cc:e7:29:61:
26:15:90:da:d9:6c:e8:8b:d1:a2:25:e9:49:55:54:a8:c4:cd:
c2:1f:22:5d:90:9e:c2:f3:ac:ad:e1:20:44:2d:09:fc:d2:83:
d9:ee:bf:59:f9:05:f0:45:49:ab:7b:2e:db:de:8b:52:f7:8d:
74:8a:f8:1e:b7:0d:d5:1a:3b:df:7b:48:6d:48:92:4a:0d:71:
42:df:77:15:6b:52:aa:20:9e:e0:1f:af:2a:ec:37:ef:a2:b0:
f0:53:40:b7:e4:68:31:80:e5:08:2c:80:01:b0:a8:78:ab:e3:
cd:04:5d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:44 2025 by rpki-client