Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/QsLvEx96RjvRlQJYm9855IcfN1s.roa
File: QsLvEx96RjvRlQJYm9855IcfN1s.roa (raw, json)
Hash identifier: hOgbB8MBxcebp+xpozXSPiL48SB/8JuLkNg0TGu94TU=
Subject key identifier: 42:C2:EF:13:1F:7A:46:3B:D1:95:02:58:9B:DF:39:E4:87:1F:37:5B
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019424455AD9233A3F26C5496AC5DF1A1D60
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/QsLvEx96RjvRlQJYm9855IcfN1s.roa
Signing time: Wed 01 Jan 2025 23:48:32 +0000
ROA not before: Wed 01 Jan 2025 23:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50875
IP address blocks: 31.145.82.0/24 maxlen: 24
212.15.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5a:d9:23:3a:3f:26:c5:49:6a:c5:df:1a:1d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42c2ef131f7a463bd19502589bdf39e4871f375b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:41:3e:73:82:f3:9b:51:6d:71:49:69:f6:
17:7a:04:7d:c1:91:17:63:d2:74:c5:a4:df:21:4e:
92:5a:f6:b2:8d:d8:10:b7:4f:ad:ce:08:d7:c3:67:
00:76:01:95:ad:36:b6:84:35:f1:0b:10:9b:0c:e6:
d7:7f:64:78:bc:a6:bd:6a:8e:b2:e9:e3:bf:e7:a2:
ca:3a:4e:c0:dc:98:d3:d7:71:81:0d:48:d5:e5:e9:
7e:3b:d7:9d:d4:36:e2:14:fe:90:f6:d2:a7:de:cb:
e1:a9:66:98:8b:ac:3e:cc:48:94:85:71:ae:c0:43:
05:50:15:d3:4b:3c:a9:3c:09:73:c3:4f:7e:d8:82:
39:be:ac:dd:2e:ff:50:e3:23:c3:93:2e:e1:1c:76:
68:e1:3e:f7:c7:ed:34:35:a0:34:ec:ff:89:e4:5a:
f3:32:85:59:76:76:57:96:34:7d:f6:47:b7:ff:f2:
12:16:e2:c2:26:49:fb:fe:5c:25:3e:8a:95:c9:2b:
93:75:0f:b8:bb:b4:cf:2f:d6:b8:e2:0c:ac:85:45:
86:3c:e2:8b:21:15:7a:65:ae:f2:6d:b4:25:9d:f7:
0a:e2:39:42:a6:fd:47:e1:00:b8:83:4f:47:bb:2d:
8f:67:94:1d:da:06:75:c6:8d:b2:22:34:3f:37:de:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C2:EF:13:1F:7A:46:3B:D1:95:02:58:9B:DF:39:E4:87:1F:37:5B
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/QsLvEx96RjvRlQJYm9855IcfN1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.82.0/24
212.15.25.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d9:91:0d:9f:71:6d:a6:b6:8a:f5:ab:5a:10:5a:6f:9c:63:
87:59:92:38:bb:82:29:e6:ca:5f:f6:0a:81:46:e9:77:56:6d:
9f:e3:4a:bd:4b:46:45:33:db:7c:48:b2:78:98:6b:80:f9:2a:
b7:29:3b:35:84:b0:98:a7:eb:18:ad:0b:d6:33:07:86:cd:9e:
4d:01:9f:78:73:3b:c1:e3:61:4c:38:aa:97:65:a4:6d:44:50:
2c:a4:b9:0c:32:9e:76:7a:4e:70:d0:0f:ca:49:38:84:ef:be:
c7:b3:22:dd:86:fa:f5:e3:f9:2b:26:d7:0d:2e:88:26:07:ea:
f9:4b:cf:4f:64:6e:fe:80:f9:df:e6:60:b7:b6:ef:15:b0:04:
c3:c4:dd:ba:e2:a6:1d:b7:1f:30:73:3f:c1:ea:d9:11:c7:b4:
32:a8:1f:04:5f:d9:40:08:df:db:cb:07:f9:07:84:58:f6:5a:
57:2e:00:f8:08:fb:60:0a:cc:92:76:92:23:11:a0:81:b8:d1:
13:81:0c:47:e7:7d:d5:5e:0d:dc:6b:0d:9f:6e:7d:46:bc:17:
9e:93:56:d1:e4:02:c5:1c:8c:09:f1:9d:24:69:30:88:5b:c0:
11:80:57:f8:6e:88:90:1a:fa:1a:df:4b:63:bf:88:41:ef:2f:
49:65:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:54:25 2025 by rpki-client