Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/akMGCQIi3m5Z6oQfmYWwXm6Sr6E.roa
File: akMGCQIi3m5Z6oQfmYWwXm6Sr6E.roa (raw, json)
Hash identifier: hIvO4f0efFyMLQwXwU2X9ARgI00goXkJDlPknTYgoNk=
Subject key identifier: 6A:43:06:09:02:22:DE:6E:59:EA:84:1F:99:85:B0:5E:6E:92:AF:A1
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B56DA9C3C7F107E42CABA3DE32C2DB
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/akMGCQIi3m5Z6oQfmYWwXm6Sr6E.roa
Signing time: Thu 02 Jan 2025 15:49:49 +0000
ROA not before: Thu 02 Jan 2025 15:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205194
IP address blocks: 192.162.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6d:a9:c3:c7:f1:07:e4:2c:ab:a3:de:32:c2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a4306090222de6e59ea841f9985b05e6e92afa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:d2:57:04:dc:3f:2a:54:56:c0:0f:7e:d3:
64:b2:b3:b2:5f:3a:80:e6:16:2d:3f:f3:d9:a1:e2:
99:80:1e:26:85:65:6c:75:17:f7:08:e8:c4:2f:83:
b7:66:5a:dc:a6:e2:3f:80:96:ea:8f:d2:17:28:ae:
3d:2d:7d:2b:ac:75:fd:3f:8a:4d:66:9f:bb:f8:29:
97:3b:78:b0:b5:3f:2f:c7:8f:de:55:b9:6a:5f:05:
07:32:64:bb:6c:aa:77:92:18:bc:e4:69:d6:12:f7:
b6:4a:de:11:dc:8e:40:04:7d:59:cc:11:af:cc:b4:
b1:90:61:2e:b4:51:d4:5c:9b:dd:b3:f5:8f:84:87:
76:b7:36:13:30:4f:d2:14:9d:ac:1c:64:25:b1:cb:
52:39:79:40:36:74:a1:7e:63:d6:b7:0a:47:14:66:
83:33:cd:39:b8:80:e8:3a:f0:f6:65:8e:cb:e4:ba:
de:d0:b0:19:51:9f:45:c4:ba:8e:44:6f:8a:d3:31:
8f:ad:74:62:1a:8c:6d:f8:0b:66:f1:47:e2:26:d8:
ac:de:df:93:54:0e:1b:bb:5d:32:1b:80:3c:66:b4:
fa:a6:33:8d:84:74:39:ad:df:0a:8d:cf:36:3c:3a:
27:58:06:04:3d:37:d2:da:85:9d:33:af:31:7c:69:
74:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:43:06:09:02:22:DE:6E:59:EA:84:1F:99:85:B0:5E:6E:92:AF:A1
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/akMGCQIi3m5Z6oQfmYWwXm6Sr6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.65.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:02:bb:85:2a:2e:2f:dd:05:b2:ea:57:2c:ba:5a:70:c0:7c:
83:43:0b:9f:12:53:b9:da:05:91:f5:b3:23:89:36:e8:09:85:
38:6d:de:67:07:35:5b:d7:14:3d:2e:18:3a:32:1c:09:13:52:
72:82:da:9a:82:c8:68:d3:ac:c9:a4:07:7c:50:6b:00:32:db:
44:0c:84:e6:05:f0:db:41:4c:30:04:ad:4a:58:df:29:24:54:
33:16:89:18:69:8f:ae:cd:29:2f:bf:e9:e3:54:66:e2:bb:20:
45:5c:65:9f:64:c5:1e:cc:4e:c9:b0:f7:a1:db:cd:99:fa:0a:
ff:e6:73:89:f3:14:34:2f:7c:15:a5:ff:b2:85:82:2e:fb:dd:
22:5a:56:08:c9:e1:67:ef:a7:26:0b:35:5d:82:7e:6a:db:bc:
04:11:4d:9f:7e:13:42:9d:5d:24:4e:b0:6c:23:e3:0e:22:e7:
ae:ab:95:4f:dc:18:09:fe:ba:53:23:f3:90:cb:76:5d:7d:76:
8a:7d:ac:c8:ce:f7:35:2b:5a:a9:73:66:0e:e2:ee:06:14:1b:
34:ff:4d:2d:24:10:73:3a:82:65:eb:5e:c1:a7:23:d6:17:64:
b9:d3:d0:29:a9:8b:2f:f9:42:98:c3:48:33:74:96:b0:9c:e9:
d0:db:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:18 2025 by rpki-client