Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/qswjHcqLBQY9Z2nmcWTR62TphaY.roa
File: qswjHcqLBQY9Z2nmcWTR62TphaY.roa (raw, json)
Hash identifier: p4pPSzszW4Gf4Jz9O3n/L0PF3Vv3naASMu8aongMgFA=
Subject key identifier: AA:CC:23:1D:CA:8B:05:06:3D:67:69:E6:71:64:D1:EB:64:E9:85:A6
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 019427B56F6FB75298273C319138DB909B85
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/qswjHcqLBQY9Z2nmcWTR62TphaY.roa
Signing time: Thu 02 Jan 2025 15:49:49 +0000
ROA not before: Thu 02 Jan 2025 15:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62206
IP address blocks: 95.215.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6f:6f:b7:52:98:27:3c:31:91:38:db:90:9b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Jan 2 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aacc231dca8b05063d6769e67164d1eb64e985a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:44:d8:6b:51:df:6e:e3:21:86:de:09:83:
3b:88:f5:25:57:ce:c5:5f:20:59:1b:ca:29:fb:9c:
12:33:5c:23:12:d2:e0:da:40:35:47:78:f3:c3:28:
94:79:6a:93:bd:a8:e5:62:a3:d1:13:82:95:d5:50:
06:b6:85:c5:cb:59:37:06:dd:77:8c:ec:65:ae:5d:
ba:2a:a3:28:41:8d:f9:14:cd:87:83:d2:46:47:e2:
9c:df:fa:68:56:cc:ae:f4:36:09:d0:9d:3c:db:1b:
18:1a:3f:51:f3:1a:ab:b9:b4:23:c9:b5:f4:ed:18:
d6:69:f3:a8:6d:0b:67:30:66:5b:3e:25:1b:2b:4f:
e1:2d:49:8a:99:1f:6c:3b:d9:e3:f4:1e:c2:a3:a5:
89:d1:40:82:1f:be:f5:41:ad:b2:7c:b0:e0:53:8e:
5d:b0:2a:80:09:ce:47:b8:25:b6:dc:fd:93:0a:c0:
e4:6d:4f:2a:bb:74:6c:6a:d1:10:0c:36:6a:f6:9e:
48:0b:81:ee:18:10:60:60:73:5d:0e:e8:d9:49:37:
b9:46:8e:70:34:d2:8d:4d:85:38:40:64:81:98:00:
c2:0f:6b:0a:f7:bb:b3:a2:1f:65:0c:84:03:e1:9d:
c3:b7:39:40:d8:dd:09:c2:a8:30:90:c3:27:68:6a:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CC:23:1D:CA:8B:05:06:3D:67:69:E6:71:64:D1:EB:64:E9:85:A6
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/qswjHcqLBQY9Z2nmcWTR62TphaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.40.0/22
Signature Algorithm: sha256WithRSAEncryption
77:47:0b:c8:3d:e6:f6:73:24:ff:1a:e5:12:81:b2:e6:26:65:
57:c6:3a:e1:52:30:ea:1d:7a:99:1c:bc:cf:ea:8d:c0:89:3b:
b7:ae:be:81:55:55:20:86:8b:89:7f:b6:96:9e:cd:3b:0a:20:
ba:e0:90:52:14:5a:42:7f:b0:3b:2c:0e:cf:71:06:2d:ea:96:
b6:ab:ec:d9:73:99:ef:48:47:0e:b3:36:44:63:a1:15:bb:9d:
8a:43:75:26:20:78:41:8e:d4:53:6c:cc:e2:75:48:1e:88:f7:
bd:ae:39:91:e0:ca:92:33:43:62:0d:94:fb:21:75:88:1d:bb:
a1:c0:2d:ce:a5:f7:f4:24:3d:ff:2e:a4:03:0d:43:7e:20:54:
81:96:43:bd:d9:45:64:ff:e6:23:ed:e4:3b:45:a8:a0:dc:9c:
9d:4a:e2:48:5e:52:3b:39:26:e2:9c:33:ba:8f:a0:45:24:07:
d6:63:87:62:ff:3c:a7:cc:45:69:f1:be:0e:9f:1e:97:75:df:
30:de:9c:5f:a5:59:b8:f9:dd:2b:8f:79:30:cc:a0:ed:4f:cc:
e7:94:df:85:db:e5:6f:a0:27:13:1c:ca:3b:dc:7f:cf:80:54:
e4:3c:91:35:c0:6f:a0:90:89:1f:ef:bc:c4:a8:9a:39:4f:46:
d1:86:f3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:45 2025 by rpki-client