Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/qaAnyBes9jUnUhuZgA6_0wh2Utk.roa
File: qaAnyBes9jUnUhuZgA6_0wh2Utk.roa (raw, json)
Hash identifier: SqePUXPFn7aMkbwwWNRWIjpMhjMen/HlDEhNyjcwe8Q=
Subject key identifier: A9:A0:27:C8:17:AC:F6:35:27:52:1B:99:80:0E:BF:D3:08:76:52:D9
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 0194228DCE17F2711A1BD2F03E1F222E1673
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/qaAnyBes9jUnUhuZgA6_0wh2Utk.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34996
IP address blocks: 193.202.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ce:17:f2:71:1a:1b:d2:f0:3e:1f:22:2e:16:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9a027c817acf63527521b99800ebfd3087652d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:64:20:fb:16:7c:05:bd:8c:6c:44:37:fc:
49:ab:12:de:d1:9d:e7:1d:3c:55:79:ff:2d:bd:30:
d4:7c:67:39:cf:90:ce:cc:bc:22:71:64:1d:5a:ea:
89:10:cc:a2:cb:8c:c6:9c:ec:b1:56:70:79:52:50:
8e:1d:56:8e:3f:48:cc:1c:24:c8:40:6d:06:a1:d7:
b0:f1:09:0c:4e:d7:51:3f:29:20:03:76:1e:2f:8d:
96:39:c7:dc:db:07:95:d8:93:d7:74:4a:f7:6d:87:
a9:ea:d5:b4:64:b3:33:19:59:29:3d:8a:df:88:bd:
2f:8b:fc:6e:ed:38:98:fb:d1:ef:e4:05:68:08:ac:
14:3a:d7:b0:f3:46:cf:0d:1b:8e:ed:83:a0:75:82:
c6:5b:8c:64:c6:c9:83:e9:26:07:d4:c8:50:ca:5f:
22:27:9f:f8:7c:01:35:7b:b3:f0:77:ba:53:e5:0a:
7a:1a:60:7b:dc:49:e7:f1:0c:73:14:a1:c7:b3:54:
84:dd:e1:b1:d0:1d:a1:7f:ad:fe:64:93:38:e2:b5:
60:8a:68:96:67:85:e9:06:e5:03:f0:1f:b7:59:22:
5c:9e:82:0e:65:a7:f7:cf:0f:38:11:40:65:46:8e:
d4:38:35:39:10:08:9d:76:94:62:5c:35:59:13:61:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:27:C8:17:AC:F6:35:27:52:1B:99:80:0E:BF:D3:08:76:52:D9
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/qaAnyBes9jUnUhuZgA6_0wh2Utk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:75:7d:d4:9c:30:c5:fc:9e:0c:7c:0f:c4:71:f5:10:73:1b:
05:c4:f0:76:2c:6c:98:c6:43:2f:ae:77:85:02:46:d4:15:1f:
9c:f6:12:08:e5:08:92:eb:23:1f:b7:5c:0d:83:db:7d:77:bc:
57:a5:dd:1d:67:ef:e0:1d:d3:17:c3:c1:32:db:ec:67:2c:7b:
df:b5:a1:51:0a:ff:c9:39:03:a9:8b:71:c6:68:dd:7e:22:55:
c8:aa:6d:59:d1:f8:29:a8:bb:0e:0b:3a:a0:40:26:c5:30:b5:
d6:c9:b5:c4:4b:51:e7:51:9d:29:7f:a5:d9:7f:26:20:7b:56:
b8:8c:5e:39:0e:e3:48:eb:10:b6:a7:40:76:aa:6e:7f:56:1b:
5a:6c:98:be:ed:fa:e7:39:3b:74:18:16:4d:96:78:98:5e:53:
db:ac:c1:0a:5f:0f:5f:9a:c4:16:1f:d0:a1:9a:12:a7:35:75:
a9:c1:c9:bb:c6:9c:29:d2:0c:f8:2f:68:89:99:46:31:80:c0:
e2:cd:58:ab:ec:00:61:7e:b2:cd:eb:84:49:9e:c9:0d:b7:3d:
d8:6c:4c:02:e8:df:84:b2:49:2b:b1:6a:95:23:e2:e5:51:53:
e5:b5:2f:dc:fa:41:9b:df:2b:62:2c:6c:69:db:3e:ff:5b:9e:
1d:15:50:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:01:17 2025 by rpki-client