Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jZqouaQgrepKCmCWKCwiJ8kW1k0.roa
File: jZqouaQgrepKCmCWKCwiJ8kW1k0.roa (raw, json)
Hash identifier: lmmhfX8mUiX4NJHYRwULjToR9HpYETlN4x+G52y9sds=
Subject key identifier: 8D:9A:A8:B9:A4:20:AD:EA:4A:0A:60:96:28:2C:22:27:C9:16:D6:4D
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01967FFEDA4FB0A21409D0EF712852088C22
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jZqouaQgrepKCmCWKCwiJ8kW1k0.roa
Signing time: Tue 29 Apr 2025 05:22:10 +0000
ROA not before: Tue 29 Apr 2025 05:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.251.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:fe:da:4f:b0:a2:14:09:d0:ef:71:28:52:08:8c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 29 05:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d9aa8b9a420adea4a0a6096282c2227c916d64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:72:84:0f:78:80:13:b9:45:55:18:17:fd:
47:b5:8a:ab:09:4f:9a:34:4b:41:b7:2b:0b:f3:00:
27:27:62:70:66:e5:42:24:ff:fd:30:3b:65:3c:a4:
d1:8f:d9:09:e6:24:71:d6:a7:00:37:f5:a4:b9:7b:
16:2c:35:9d:98:f1:71:39:d4:38:37:9e:a5:17:57:
44:48:2a:f7:f9:9f:87:2d:2e:3e:47:9b:7f:c9:32:
97:3d:97:46:fa:d5:b9:84:48:77:5c:28:d7:b1:00:
54:ee:4e:f4:95:9c:c3:42:87:74:3c:f7:d9:a9:e9:
f8:bd:83:4d:83:eb:9a:d3:b1:e8:c0:84:c7:e0:87:
b4:35:a6:8a:9c:40:69:72:1d:b4:d2:10:8f:2f:6b:
a0:ca:2d:20:8b:aa:b3:53:ab:48:6b:a2:58:e8:ac:
a9:64:38:4c:ed:1d:6a:2f:b5:1e:41:e1:60:50:38:
b1:bc:2e:58:3a:e4:95:58:fe:c4:36:df:bc:a2:a6:
46:77:3b:2a:57:a0:33:62:e5:04:1d:fb:d2:ba:f4:
df:97:5e:53:f4:2d:87:40:45:db:68:7e:06:bc:5d:
19:05:b1:6b:f2:1e:ff:83:03:1f:b2:c6:7b:e6:51:
0c:0a:d4:39:95:7a:78:eb:32:5d:21:61:42:e7:6e:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9A:A8:B9:A4:20:AD:EA:4A:0A:60:96:28:2C:22:27:C9:16:D6:4D
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jZqouaQgrepKCmCWKCwiJ8kW1k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.28.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ac:8c:cc:3f:a1:db:9a:0a:1f:17:a0:69:3e:5f:fb:48:a0:
2c:bf:af:28:94:de:b6:20:2a:e7:4b:f5:de:f1:86:99:57:c7:
70:fa:2a:b9:f0:a6:0a:91:ff:78:42:10:9b:5b:74:60:94:3c:
ce:bc:56:8d:1c:6a:c8:ff:03:10:ff:97:cb:9e:60:ef:0d:40:
10:bd:d3:52:f2:a7:a2:23:b2:e2:65:0e:26:06:00:43:36:ee:
46:bc:61:a7:f9:75:fd:e9:2e:1c:82:2d:63:50:0b:c1:d2:19:
f2:a9:3f:a0:72:8d:2c:e5:2f:48:b8:d2:e9:07:f2:10:c4:cc:
bb:4c:e0:71:ea:6c:fb:3d:8a:06:a9:de:71:30:46:fd:e0:ad:
db:ff:1e:5a:e7:85:67:45:14:e8:0e:f0:97:e0:c8:2b:26:fb:
4b:fa:a8:39:e7:92:de:68:7b:4b:c7:4d:1d:49:55:ed:ca:a1:
2b:28:b4:79:a9:65:e5:a3:51:09:c9:55:42:fc:4b:f6:02:b9:
b1:24:bb:5b:e5:4d:68:7c:0f:8d:c8:7d:74:c5:0c:ff:c0:ee:
e1:1a:78:7c:43:17:22:62:5f:00:48:26:3b:97:ae:8b:bd:51:
05:1b:90:a6:06:38:4d:6f:f0:53:b6:00:45:f1:72:b5:f0:d0:
ce:6e:b0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:11:06 2025 by rpki-client