Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/DqHnzYWuxMllYj4fNdyjlN5bOt8.roa
File: DqHnzYWuxMllYj4fNdyjlN5bOt8.roa (raw, json)
Hash identifier: Ct+oA/iZNUzEaqp34vmPr/rb2NLctNCZu0gWWKERVjE=
Subject key identifier: 0E:A1:E7:CD:85:AE:C4:C9:65:62:3E:1F:35:DC:A3:94:DE:5B:3A:DF
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 019423D6BB798E713373574C2165779349B6
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/DqHnzYWuxMllYj4fNdyjlN5bOt8.roa
Signing time: Wed 01 Jan 2025 21:47:42 +0000
ROA not before: Wed 01 Jan 2025 21:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3292
IP address blocks: 185.149.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:bb:79:8e:71:33:73:57:4c:21:65:77:93:49:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Jan 1 21:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ea1e7cd85aec4c965623e1f35dca394de5b3adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:87:23:30:c6:3a:e4:59:07:29:b8:eb:0d:
7e:4f:48:2f:54:8b:06:dc:01:1b:2e:18:15:b7:fa:
35:05:59:b7:35:a4:c7:88:64:c9:da:a1:e3:31:2e:
72:62:a2:b7:f6:9c:1b:6a:a6:d7:06:76:ee:b9:65:
52:40:3e:9c:81:cf:c3:5f:ae:4a:be:85:37:bb:46:
b1:18:36:4e:2c:b5:46:22:fa:be:99:12:15:8b:14:
7b:99:5b:21:91:e9:94:0b:59:fa:e7:38:ff:a5:c2:
86:39:b8:db:5b:17:e0:7e:bb:bc:79:63:6c:ad:c9:
8b:9f:4d:55:22:c1:ef:31:bb:af:5d:67:5e:a4:32:
b4:ec:d3:d1:2b:f0:9d:e0:89:32:01:01:a6:30:4f:
49:52:57:b1:51:fc:8d:c3:f7:ba:e9:65:92:be:a6:
a1:41:6c:2f:32:d4:b3:e7:d1:87:e5:6c:79:12:cd:
dc:8c:9b:f0:0b:76:98:6a:cd:11:2f:d2:29:67:16:
7b:91:fa:8a:9a:af:a0:f9:cd:4a:bd:8a:cc:12:cd:
9f:e9:31:8f:91:6c:1c:08:2e:fb:56:36:b7:35:b2:
76:14:ef:ce:e7:1c:67:1b:c4:4c:36:b0:2f:1e:d0:
70:58:1d:11:1a:0d:d6:c4:99:6f:07:45:8e:28:9d:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A1:E7:CD:85:AE:C4:C9:65:62:3E:1F:35:DC:A3:94:DE:5B:3A:DF
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/DqHnzYWuxMllYj4fNdyjlN5bOt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:26:a1:10:92:22:09:e1:b1:91:75:2b:c2:12:7a:48:ce:b2:
62:0e:4e:c4:fb:2c:d3:bd:83:72:d1:3d:db:68:01:9a:7b:d0:
45:45:49:c2:91:e2:3d:05:74:ae:14:3a:39:dc:35:fb:91:d1:
fc:f7:e5:73:a3:49:cb:c7:e1:a9:c2:eb:8b:c7:c7:34:af:4c:
44:b5:1b:da:5f:74:88:95:57:fb:a0:41:87:2a:d8:c8:ed:56:
87:2b:08:e1:bb:62:65:9a:ba:79:c2:42:fd:8d:01:67:a4:30:
b7:52:66:ee:92:df:d1:84:cf:6e:65:60:e5:16:81:9f:d8:4c:
29:76:2d:0d:06:8d:7f:c4:29:e4:f2:ff:44:e0:ed:3a:a4:a1:
36:da:a3:c7:62:71:79:e8:1a:10:bc:d2:53:21:3f:d0:2d:eb:
7e:05:5c:67:b5:5a:18:d5:85:b3:fc:0a:d5:2e:4d:b5:2b:3b:
26:22:e9:b5:a1:45:74:09:95:b6:2a:21:23:6d:1d:ea:ec:87:
e8:94:4c:f1:7c:e2:dc:d0:54:1c:a2:6f:e0:45:be:50:90:31:
aa:13:b9:f2:57:ca:92:54:36:b9:d2:44:37:b9:d6:e7:f3:0a:
d7:c6:33:31:d6:8a:7b:9d:59:84:96:52:07:fc:35:fa:7f:13:
63:73:92:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:55:51 2025 by rpki-client