Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa
File: q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa (raw, json)
Hash identifier: ngAOffGRyvYQRrwPTGAOl5xDF8KPN9jghcxNAguGiMA=
Subject key identifier: AB:4A:A3:9D:57:69:4D:0C:F9:57:85:B1:EA:3B:5B:AC:53:17:04:F3
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01965C63DBF3CB0C6F2A3EAC501B55CE1E81
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa
Signing time: Tue 22 Apr 2025 07:26:10 +0000
ROA not before: Tue 22 Apr 2025 07:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 176.103.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:63:db:f3:cb:0c:6f:2a:3e:ac:50:1b:55:ce:1e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Apr 22 07:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab4aa39d57694d0cf95785b1ea3b5bac531704f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:9d:cf:e1:45:c1:a8:7d:38:3c:85:cf:35:
a8:4f:57:5a:03:ff:c8:a2:9d:80:79:51:e6:d9:a6:
cd:34:ee:e7:54:56:6f:63:3d:cf:d1:02:b9:c9:ac:
3c:9d:6a:01:c0:b0:5d:75:5f:a1:29:ce:a2:cc:63:
92:77:3b:b6:27:7b:49:00:ab:aa:71:44:69:78:c6:
6b:c1:bc:29:40:fa:28:0d:33:0e:50:1d:a4:e7:72:
0f:95:30:d6:65:1e:3a:67:fc:e6:1a:97:3f:e8:bc:
e3:6a:aa:77:5b:3b:36:72:e1:8d:f9:48:1f:fd:dd:
c3:65:a5:c7:96:db:d4:ff:68:bc:65:e4:02:4b:58:
f0:68:03:44:18:06:72:e1:50:94:4b:43:9a:1f:0d:
b9:7f:0b:66:60:ac:e2:33:cb:87:e4:95:59:82:d4:
bc:b9:0a:93:88:87:c7:45:4f:17:62:62:5c:ea:e4:
bf:bc:6e:5f:98:12:97:43:4b:77:d4:ca:e2:57:73:
d2:02:c0:57:a9:94:9b:7c:48:4a:00:eb:66:d9:24:
b5:4c:70:ec:02:e5:f0:18:c0:57:16:4b:73:eb:db:
18:46:d5:35:10:50:a7:dc:c1:ee:e2:d9:70:ad:ae:
a8:c9:5f:94:fb:13:ae:db:1b:c1:81:b2:fe:10:26:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4A:A3:9D:57:69:4D:0C:F9:57:85:B1:EA:3B:5B:AC:53:17:04:F3
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/q0qjnVdpTQz5V4Wx6jtbrFMXBPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.180.0/22
Signature Algorithm: sha256WithRSAEncryption
78:aa:2e:6f:e8:51:53:21:7e:33:96:10:46:d2:40:dd:67:fc:
06:bb:1b:67:0c:bc:60:ee:ce:2d:c2:70:cc:49:2a:77:2b:7a:
55:21:9e:e7:c4:85:b4:09:78:0a:a3:48:61:77:f2:10:fb:e9:
87:ea:f9:c2:dc:38:8c:24:40:7d:b2:93:27:57:5b:d7:1a:3f:
e2:82:f7:74:6a:16:20:98:aa:36:85:fe:ba:0b:6d:4c:d2:7f:
a8:30:77:de:d8:3a:9f:d6:34:d8:fa:36:e0:07:1f:93:62:73:
62:02:86:16:c5:7f:60:b3:a5:f6:70:79:e4:14:b5:ec:be:89:
6d:ef:52:53:80:0c:6f:ed:48:9c:80:9c:7c:a3:a7:6e:b0:d7:
d0:f7:ec:8e:18:90:da:c7:10:2b:4b:e2:9f:28:c4:f8:ff:04:
b5:f3:58:78:11:aa:7f:cb:3c:8f:45:91:48:51:27:99:59:1c:
f9:7b:1f:ee:d7:81:77:cb:2b:da:ff:5b:41:a0:f8:9f:12:8a:
df:af:57:ca:80:a2:10:d0:ef:77:f5:be:1b:11:ae:55:f9:7c:
8b:05:5d:cd:85:89:db:88:92:d3:83:78:26:11:78:88:28:04:
c7:29:5a:d2:c4:93:2c:48:14:12:30:34:bd:4d:12:81:3f:2f:
2c:e1:c6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:10:08 2025 by rpki-client