Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa
File: Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa (raw, json)
Hash identifier: uMbe0TM0fIuYtnHf63Llp9sJ+CZVXJ/tOzlQU2AOjts=
Subject key identifier: 5A:A8:B5:74:B6:6C:1E:FA:0C:5D:4A:52:95:96:99:34:73:E0:4B:FE
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 019423D76A26D9DBC112398A9B49F3B11476
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa
Signing time: Wed 01 Jan 2025 21:48:27 +0000
ROA not before: Wed 01 Jan 2025 21:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204797
IP address blocks: 195.22.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:6a:26:d9:db:c1:12:39:8a:9b:49:f3:b1:14:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Jan 1 21:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5aa8b574b66c1efa0c5d4a529596993473e04bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ec:ee:54:ef:68:d2:0f:f9:b7:8e:6b:98:cf:
cf:c3:9c:97:f3:70:96:ee:a4:a5:c6:fd:05:ae:44:
37:f0:09:20:c3:ea:8d:b1:f0:db:04:56:2d:a0:7c:
20:a4:5b:70:bc:f8:2b:cb:c3:7b:3f:07:7d:65:7d:
94:41:c9:a9:42:15:c4:00:ad:38:51:e3:47:66:93:
b0:0e:5b:f4:e8:cd:63:94:e5:a1:70:20:3e:66:99:
43:8f:82:bd:d3:08:4d:b8:95:8b:93:43:da:a4:48:
b5:a3:fe:e0:dc:8b:7c:81:6f:03:3a:7c:fa:67:04:
21:47:02:3f:b2:58:fe:46:36:2c:49:36:9e:43:f5:
82:49:d7:1d:1a:62:7e:90:4e:e0:6f:88:cc:6c:7b:
80:40:4a:00:a7:ac:4e:6f:86:4d:ec:37:c7:f7:5e:
7c:0f:c4:69:9f:d8:9b:63:40:05:a2:8e:95:32:3d:
13:bd:76:7f:b4:24:b0:1b:9a:33:5f:9d:9f:11:af:
6b:b6:8e:45:34:63:f7:47:e1:fc:57:55:fd:46:7a:
a4:38:2d:75:52:a3:f8:13:78:50:e4:04:a2:df:d6:
82:4b:fc:c2:b0:af:20:f0:cf:0c:86:89:86:2a:04:
92:9f:de:ff:2a:b0:4a:b0:48:85:09:70:14:61:65:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A8:B5:74:B6:6C:1E:FA:0C:5D:4A:52:95:96:99:34:73:E0:4B:FE
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.116.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:02:ff:e6:98:72:7b:4e:39:a8:36:22:6a:90:37:cc:be:12:
9f:50:ff:ec:96:57:21:45:80:67:76:3e:9c:35:3f:d2:6e:c9:
0f:1d:2d:0b:bf:5c:3b:6b:2a:2c:ab:b1:d0:28:7f:5b:99:73:
5e:e5:4f:2a:6c:6a:1d:ed:62:20:c4:75:9d:53:a8:0a:a7:86:
39:e4:9b:de:9b:ea:1d:9b:61:b4:bb:64:75:2d:0e:1e:64:3a:
bf:64:9d:5a:f3:f2:72:8d:ae:56:7c:8d:33:a5:3f:06:a9:31:
74:00:2d:2e:83:d0:68:a2:1e:d5:6d:20:4a:4f:30:d7:b6:81:
14:b4:ea:8b:57:4b:db:f4:11:44:4c:13:7d:eb:75:27:86:17:
b2:37:72:15:b7:e7:4b:c7:8a:07:1f:ea:34:a2:4b:e0:98:4b:
54:a8:93:44:0e:f0:dd:88:0a:7b:cf:62:8b:7a:d9:62:8e:41:
a6:29:74:0d:cc:be:89:20:29:81:26:ef:36:94:9a:45:ac:48:
e8:73:75:ff:73:cc:7c:69:a4:00:d1:89:da:d7:3c:48:3d:92:
b2:58:40:6c:66:8d:df:bd:54:0c:9a:cc:2d:04:7a:ae:3d:08:
a3:1e:fa:e6:5f:52:32:1e:ff:2b:86:49:5a:a8:35:a7:ee:5f:
13:52:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:43:09 2025 by rpki-client