Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/KqaueV9hoJCow2ggLZVEN6Aq14w.roa
File: KqaueV9hoJCow2ggLZVEN6Aq14w.roa (raw, json)
Hash identifier: m49ywOVO+P5/nCXp3LP+DFkgcnb10IgZ5YOzfhx6zR4=
Subject key identifier: 2A:A6:AE:79:5F:61:A0:90:A8:C3:68:20:2D:95:44:37:A0:2A:D7:8C
Certificate issuer: /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial: 01941F8C1C85A0C418088570ED7BF40CE5B3
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/KqaueV9hoJCow2ggLZVEN6Aq14w.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205262
IP address blocks: 185.246.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1c:85:a0:c4:18:08:85:70:ed:7b:f4:0c:e5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2aa6ae795f61a090a8c368202d954437a02ad78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:43:b1:26:19:8e:38:13:34:ba:0c:af:c2:
bc:37:6a:80:51:41:ff:82:eb:30:61:e9:d0:53:c6:
89:3c:0d:af:28:5b:4c:62:49:2f:fc:55:cd:40:01:
10:88:dc:55:5a:ff:4b:d7:74:99:e0:68:e0:0d:1d:
d5:11:d7:13:c2:77:a2:aa:e7:96:4d:d0:53:06:1f:
24:b3:22:c7:88:6e:dd:1b:5a:d0:16:8d:d4:4c:14:
d8:d8:ec:cd:31:e3:39:88:60:94:11:57:a5:26:1b:
26:94:7e:ee:4d:df:32:0b:f9:d7:00:29:6e:9d:e8:
54:5e:c7:74:3c:7b:fd:ac:27:5f:dc:29:01:2c:4e:
99:af:e4:f4:a2:e9:84:19:c5:68:b5:f6:13:a5:09:
63:4d:3e:40:63:1c:d6:4d:fc:e9:44:63:45:f2:88:
88:f8:82:ca:18:62:3e:58:4d:d8:29:86:95:4e:6b:
cb:8d:bb:1e:ba:a1:b0:8d:08:9f:40:ba:e1:71:e9:
87:75:0d:d6:24:28:07:84:30:66:bb:25:28:23:e9:
00:9f:68:0c:04:b8:8a:74:10:3c:e6:ef:95:eb:39:
c1:f2:00:2c:64:bd:cb:fa:70:6a:24:cf:a2:17:95:
d9:4a:a8:31:b4:cf:16:e6:37:54:fc:d4:22:df:15:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A6:AE:79:5F:61:A0:90:A8:C3:68:20:2D:95:44:37:A0:2A:D7:8C
X509v3 Authority Key Identifier:
keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/KqaueV9hoJCow2ggLZVEN6Aq14w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:b1:2a:91:c7:32:b8:9a:c8:2c:ee:11:32:15:bc:f1:ff:59:
1f:7a:22:0f:d5:0f:84:38:5f:c3:92:d9:f9:51:6e:7c:75:98:
28:b5:18:c9:b0:00:ac:41:43:f5:34:a9:46:6b:3f:5a:14:3a:
2f:7a:bb:76:6c:2b:6f:44:68:8a:0b:37:5f:31:3a:1e:be:ae:
f4:48:54:71:d7:30:64:b1:96:6b:ef:aa:40:76:48:cd:35:55:
02:c8:3f:e9:94:ae:b1:69:a3:86:ed:9d:93:20:59:ad:bd:56:
be:49:13:be:27:0f:56:68:11:d1:a4:f6:ff:39:10:a0:b5:44:
73:4b:7b:db:a0:87:65:ca:1c:f8:f7:ec:8f:84:d6:dc:47:17:
82:1a:45:50:54:b2:58:9f:5b:3e:da:e7:d3:2d:f3:be:ec:41:
e9:68:ba:89:14:f7:53:2f:c8:6d:45:71:d5:83:a3:46:1e:f6:
83:a5:ba:d9:22:de:6c:a5:83:3d:67:3f:0f:f3:e1:cb:2c:2c:
f2:76:74:a1:94:d4:c2:19:be:94:5b:5e:44:b8:12:37:98:4d:
1c:a2:84:38:45:13:6f:d1:26:c7:b8:55:ea:32:32:a2:0f:bc:
54:f1:8e:41:83:71:fa:76:42:21:83:d5:f9:23:1d:4f:8a:ea:
71:b2:3e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:43 2025 by rpki-client