Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/qF-2BgBNvB9Rp0K_VFhuwpTNLrY.roa
File: qF-2BgBNvB9Rp0K_VFhuwpTNLrY.roa (raw, json)
Hash identifier: h4z+iViHaDAdXrYk5TZebHBt4+M5KGpzETHGgdp4Ztc=
Subject key identifier: A8:5F:B6:06:00:4D:BC:1F:51:A7:42:BF:54:58:6E:C2:94:CD:2E:B6
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 019427475231ABB931C9D83414E2C529B845
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/qF-2BgBNvB9Rp0K_VFhuwpTNLrY.roa
Signing time: Thu 02 Jan 2025 13:49:32 +0000
ROA not before: Thu 02 Jan 2025 13:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 37.143.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:52:31:ab:b9:31:c9:d8:34:14:e2:c5:29:b8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Jan 2 13:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a85fb606004dbc1f51a742bf54586ec294cd2eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:af:96:4e:be:39:7b:b9:5f:df:f1:59:51:
fc:2c:c1:5b:c4:05:c8:1a:05:c6:17:44:d3:f2:ac:
1c:c0:f4:8e:e3:73:39:51:01:cd:b6:f7:27:35:77:
49:21:bf:58:80:ae:f1:bf:7a:af:39:fc:ae:c3:54:
bc:29:db:9e:e0:ff:dc:7c:51:a4:0d:6e:c7:f0:44:
5d:e6:a2:4d:ac:5a:d2:ae:d2:b9:0d:18:b2:e8:b9:
f8:81:f2:3f:b9:ff:ec:71:51:2d:86:9b:60:b3:13:
7f:02:6d:42:ec:01:7e:a2:50:15:cc:45:de:94:ea:
db:7e:9f:08:92:dc:29:4c:e1:fd:05:10:b7:71:58:
6a:8f:da:60:7a:e0:5e:cd:8e:41:1e:36:92:66:e4:
fb:81:5e:d1:85:0d:81:42:d2:5a:39:ed:3c:c0:44:
95:cf:8b:d0:f0:9e:c0:36:3b:8e:cc:a2:67:3e:18:
d4:2c:99:40:eb:56:4d:43:3f:ca:03:41:ef:7d:ec:
f3:f9:db:b9:aa:b7:7a:73:96:f0:44:4a:8e:57:a0:
eb:24:6c:3c:e9:f0:86:f7:6a:4f:b9:e3:63:97:0a:
fd:51:c6:9b:b4:12:fb:af:a1:06:5b:2f:01:d0:b3:
71:65:e5:0c:da:22:04:22:b9:99:86:d9:df:d8:cb:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5F:B6:06:00:4D:BC:1F:51:A7:42:BF:54:58:6E:C2:94:CD:2E:B6
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/qF-2BgBNvB9Rp0K_VFhuwpTNLrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/22
Signature Algorithm: sha256WithRSAEncryption
72:95:2a:08:83:f3:a3:ab:ed:73:ab:b2:31:78:13:6c:5f:02:
06:e5:e2:7e:0f:90:df:06:e4:d0:3b:46:fc:e0:d2:f4:43:21:
da:90:32:f0:bd:ad:2c:2f:a6:6d:50:08:07:30:f5:17:af:d3:
5c:8e:7f:21:5e:42:e4:54:59:78:e1:0a:e2:68:88:56:03:c0:
d1:9b:33:8a:84:46:3f:4e:22:29:da:d7:15:1a:01:17:8e:c2:
9f:83:4c:08:83:be:1c:a2:8b:f2:2a:69:b3:7c:4f:7c:c1:69:
dd:54:09:00:17:3c:cb:2c:39:d7:f4:11:2d:26:0a:cd:c8:1c:
09:63:56:e4:8d:c9:c9:76:3e:bc:99:cb:02:39:ca:0e:99:4c:
e0:e6:4b:b5:e0:39:c1:ba:9a:d9:1f:cb:57:72:96:bd:5c:3e:
4e:a9:95:5b:df:66:51:5b:cf:93:03:59:0d:b1:1c:aa:78:67:
57:d5:5a:ff:0e:23:91:97:b1:1f:2b:8c:77:42:43:7f:6a:cc:
88:7d:a3:a5:50:7c:ba:c1:62:b4:98:d1:4b:c2:a4:90:7e:ae:
41:b8:d3:7a:3f:cc:00:8d:83:f3:04:2a:00:ab:44:c2:57:bb:
59:f4:c0:ad:10:86:fd:4e:37:50:19:81:e4:16:a6:df:e6:3d:
28:e2:92:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:05 2025 by rpki-client