Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/gqvKWohVcj0Z7jlOtSMQwdCwp3g.roa
File: gqvKWohVcj0Z7jlOtSMQwdCwp3g.roa (raw, json)
Hash identifier: hvyUYeos7vf6+TZ2NgvLPFstgzyNO3xqXZO7/gB/Dow=
Subject key identifier: 82:AB:CA:5A:88:55:72:3D:19:EE:39:4E:B5:23:10:C1:D0:B0:A7:78
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 0194228E16A3349FA219FC024B5813B646E4
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/gqvKWohVcj0Z7jlOtSMQwdCwp3g.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61135
IP address blocks: 194.50.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:16:a3:34:9f:a2:19:fc:02:4b:58:13:b6:46:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82abca5a8855723d19ee394eb52310c1d0b0a778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:8f:c9:96:6f:4f:97:ad:70:8a:75:96:1b:
c3:e0:3b:32:1c:12:a1:9e:46:ef:fb:50:e9:77:e4:
7a:bc:d5:1c:6b:51:f5:fd:c2:ee:8c:22:e1:39:8b:
12:0a:99:09:c2:15:30:cd:bf:51:70:36:32:f7:7b:
90:3e:f5:ed:ed:d4:8f:a0:4e:e0:8a:91:de:cd:d6:
52:f2:63:c8:7a:c1:91:55:32:6d:3f:3c:58:f5:57:
1b:fd:f5:21:d1:c4:22:0d:9c:f3:42:06:5b:1d:eb:
78:71:a7:81:ed:c5:44:f1:1b:74:c5:36:90:9a:28:
16:e3:43:31:8b:9a:14:75:a6:0c:16:69:bb:35:9a:
ec:7b:a4:fb:27:a3:3d:39:bc:4e:7f:a4:f9:3c:42:
32:78:4c:ce:8f:01:3b:9e:87:cd:28:89:06:b3:c2:
d6:31:55:97:50:af:c1:78:40:b0:18:34:60:4e:f3:
3a:a8:46:f0:4d:77:8c:57:6f:04:4d:37:21:af:b6:
69:33:68:81:63:8e:55:59:ee:34:0b:fe:ff:d8:ba:
8e:a1:a5:74:2b:11:6d:94:70:de:02:47:65:ef:1c:
31:71:a2:eb:8d:a1:1c:8f:2b:64:76:ab:5f:cd:a0:
32:8b:11:17:62:10:09:42:ef:68:d9:68:56:ab:8c:
20:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AB:CA:5A:88:55:72:3D:19:EE:39:4E:B5:23:10:C1:D0:B0:A7:78
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/gqvKWohVcj0Z7jlOtSMQwdCwp3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.197.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f3:d6:99:cc:62:53:37:d6:01:2b:56:c7:a7:3f:96:df:31:
01:80:e5:bf:e9:03:a2:96:bf:18:a6:c1:46:a9:b1:f3:13:95:
ab:48:bb:7c:2c:2d:f6:df:f2:ab:ac:12:2b:7d:f8:c5:db:40:
02:f1:a6:2b:b6:a6:88:f3:34:d1:66:29:f4:8a:6b:99:ca:f3:
e7:c9:08:d9:3a:47:d5:9e:d4:30:54:40:c8:83:c8:57:08:67:
96:ef:64:50:6a:07:5e:2f:59:5a:ad:8f:ce:bd:08:e4:96:31:
7d:d5:50:3b:53:01:80:f6:d9:39:f2:48:cb:d5:25:c9:9b:cb:
a4:9f:f9:fa:bb:0d:00:72:95:87:c0:1a:eb:bb:be:45:9f:ce:
74:59:95:cf:b5:98:65:87:9f:c5:5e:9a:d7:3a:d7:fb:d9:85:
10:bb:dd:c5:68:7c:3b:ef:a0:28:91:2a:df:86:97:bc:53:82:
ff:59:8f:0a:fd:32:15:ad:f4:1f:f5:de:82:0f:6e:44:a1:1c:
37:be:65:34:40:40:4b:09:8e:c2:d9:fc:43:e8:35:ba:33:88:
3e:03:e9:1b:ae:2d:5d:c9:0b:b5:ac:d6:31:67:c8:40:f1:dc:
cd:4c:a6:6c:31:66:28:71:ca:f8:67:e7:21:28:3a:7b:2e:79:
2d:8d:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:35:57 2025 by rpki-client