Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qHxS0Upzq1WDKNSU1yIoCmpHFaE.roa
File: qHxS0Upzq1WDKNSU1yIoCmpHFaE.roa (raw, json)
Hash identifier: MwWS5R8/ONUVKMEnIWWMGCS5GrcN5A7R+t5cBipJ6eg=
Subject key identifier: A8:7C:52:D1:4A:73:AB:55:83:28:D4:94:D7:22:28:0A:6A:47:15:A1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01967403D66327226C89993A2D773ED58340
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qHxS0Upzq1WDKNSU1yIoCmpHFaE.roa
Signing time: Sat 26 Apr 2025 21:32:10 +0000
ROA not before: Sat 26 Apr 2025 21:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26548
IP address blocks: 5.231.124.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:03:d6:63:27:22:6c:89:99:3a:2d:77:3e:d5:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 26 21:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a87c52d14a73ab558328d494d722280a6a4715a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:2f:8d:7e:c1:63:3a:f3:60:5b:c6:32:7b:
d6:62:4c:6b:ed:19:76:09:38:f7:06:52:88:d2:9d:
dd:54:ea:a5:9b:ca:88:3e:7f:76:3a:12:d3:cf:4f:
cd:2e:b6:b5:38:e3:c9:47:6b:64:02:da:37:6a:0a:
ba:e3:a7:cd:11:97:7d:02:8f:b8:8d:39:d6:af:58:
e6:6f:46:b9:84:fc:e2:5b:9b:1f:f3:62:8d:5e:85:
49:7e:de:0b:20:40:ee:63:c2:18:87:80:33:70:36:
1e:c9:03:e9:f3:1e:da:b4:fd:a1:a4:f4:59:9b:6b:
74:f3:9f:a6:9a:02:23:8d:d3:8e:09:cc:58:44:3d:
37:f5:1e:ea:95:05:05:85:88:f3:79:8f:d5:25:76:
92:79:7a:e7:39:27:af:46:7e:20:66:6b:14:f9:11:
9a:ad:4a:72:ff:38:31:9f:5a:98:57:57:10:ae:be:
eb:3d:7d:7a:8b:ab:90:b8:14:12:da:29:f0:dd:dd:
76:2c:42:b9:ff:f9:07:e5:15:b6:7f:a2:5c:3c:6f:
0a:75:13:af:9e:43:52:58:68:66:35:ad:63:9f:5a:
81:ae:0b:05:81:2e:f1:31:ec:5c:78:90:c4:66:76:
fd:0c:de:10:1a:f7:89:47:6b:b8:66:b3:15:d4:e0:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7C:52:D1:4A:73:AB:55:83:28:D4:94:D7:22:28:0A:6A:47:15:A1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qHxS0Upzq1WDKNSU1yIoCmpHFaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.124.0/24
89.144.22.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b1:a2:a6:78:66:4e:2e:7f:8b:7f:e8:b5:4d:2b:4e:6b:21:
02:01:63:d8:40:e8:d4:93:0c:64:1d:0d:7e:16:87:bd:ff:f7:
bb:2c:08:e2:db:87:f9:36:e0:b4:07:f3:31:89:05:f8:74:72:
14:a8:98:2f:f0:17:33:28:bf:01:d2:9a:52:11:17:b0:b9:42:
07:55:1d:20:6d:1c:21:14:45:07:fc:b0:f5:3d:d4:55:68:4a:
83:14:70:d8:a2:3a:64:2a:53:04:8a:35:bf:a8:06:13:de:e5:
74:7e:2a:78:be:1b:5f:37:55:57:22:95:d5:21:b1:80:23:4a:
5e:cc:20:dd:eb:fb:82:54:d2:67:5e:52:ef:72:a7:f3:ae:67:
22:19:12:6d:87:d2:42:fe:50:3e:38:44:16:b2:57:73:0d:ec:
ac:d5:f2:91:10:70:99:49:f2:52:2c:b0:74:3d:a2:f7:0d:e0:
0a:a9:7f:64:f5:c7:ec:a2:a4:e3:62:8f:54:0d:ab:42:8c:b7:
0e:18:03:d4:71:6d:95:96:b8:09:61:0d:64:5b:0f:bf:32:86:
bf:96:b2:ee:29:b8:ed:2c:71:2c:82:af:06:a0:25:4b:18:e2:
85:f5:9e:97:57:33:b1:ae:c4:33:4f:c6:2c:29:fe:08:e6:c2:
2a:32:09:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:37:45 2025 by rpki-client