Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/QiNs8gokL-flgVcsd8U4lFDRp4s.roa
File: QiNs8gokL-flgVcsd8U4lFDRp4s.roa (raw, json)
Hash identifier: UXR1DOfnS2IWAz7nxqWRH+4q1PG2ecyi6IcgDSBgXMM=
Subject key identifier: 42:23:6C:F2:0A:24:2F:E7:E5:81:57:2C:77:C5:38:94:50:D1:A7:8B
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01943947E06B56F9B2187D2CC908025C02C3
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/QiNs8gokL-flgVcsd8U4lFDRp4s.roa
Signing time: Mon 06 Jan 2025 01:43:19 +0000
ROA not before: Mon 06 Jan 2025 01:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50922
IP address blocks: 2a0e:aa07:f000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:39:47:e0:6b:56:f9:b2:18:7d:2c:c9:08:02:5c:02:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 6 01:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42236cf20a242fe7e581572c77c5389450d1a78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:a8:4c:f2:6b:0c:0f:18:a8:a5:fe:bf:03:
c2:1d:b0:d1:2c:3f:14:17:bd:0a:12:49:f7:a1:eb:
3c:8a:5c:06:e5:db:7a:20:fd:c1:2e:f6:74:12:81:
3d:39:03:5e:2b:32:30:16:b6:26:bb:a1:dd:f9:35:
a4:02:93:32:cd:58:a8:98:e3:b1:7c:42:49:16:3a:
68:fc:fd:e5:21:e4:f1:4e:ea:21:c4:79:c1:41:4f:
fb:3c:8f:55:a0:97:67:46:af:76:e4:a4:8c:b4:e6:
72:b9:b9:d0:09:5f:4b:63:58:a9:e8:bc:66:96:a8:
ed:f6:ee:e8:41:33:bb:48:39:ff:04:fa:44:0b:63:
fd:20:f5:32:04:7b:75:29:7d:59:92:69:ec:0c:a4:
f8:39:fd:d1:03:c8:77:6b:b8:60:cb:a1:f4:d1:86:
cc:d9:04:6f:dc:55:6a:d8:99:c6:62:5c:4d:53:36:
8d:f2:6d:61:dc:1a:22:ea:47:c3:b4:eb:90:b0:7a:
19:8c:77:2f:34:86:f9:8c:c6:b6:4e:d8:06:6c:60:
dd:f6:b2:15:b8:9e:03:b8:cb:bc:2c:dc:b0:7d:42:
31:c8:f6:27:58:d1:b5:c0:7a:1d:9d:bb:13:61:44:
7e:28:09:c3:f1:e6:51:cc:e2:18:1d:05:c5:6d:b6:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:23:6C:F2:0A:24:2F:E7:E5:81:57:2C:77:C5:38:94:50:D1:A7:8B
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/QiNs8gokL-flgVcsd8U4lFDRp4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:f000::/44
Signature Algorithm: sha256WithRSAEncryption
9f:56:34:9c:e3:1b:36:b5:33:4e:b1:5f:d7:74:c8:4c:7e:15:
af:f9:d0:31:25:6a:7f:e1:f7:b3:ba:45:1e:df:8c:0f:86:b0:
0f:f0:03:10:66:47:46:ab:c6:de:e2:a6:5a:ff:dd:20:dc:7e:
51:66:e1:5e:49:31:fa:f0:71:42:fb:c6:d3:1e:5e:be:79:df:
27:41:2f:cc:de:5b:61:2e:00:92:53:77:88:40:4f:b8:ec:f7:
c9:ae:a4:d1:8e:34:fd:41:08:1c:0e:c9:e9:26:b0:c0:01:0d:
ec:54:07:94:e3:a8:70:5f:75:e8:88:9e:c1:34:da:f1:18:94:
39:54:0d:a8:00:65:8b:d8:38:f2:e3:d7:f4:7b:58:03:52:38:
af:1d:81:65:15:29:07:95:5f:b4:71:78:9e:e3:32:4c:2e:b1:
40:85:16:ee:8c:e6:b8:f6:41:06:52:8a:ee:4a:a4:83:40:14:
2c:95:d0:b0:d1:12:46:a3:8b:f8:bc:69:7b:44:09:05:94:67:
39:9e:2b:a6:c2:5a:2b:87:5b:83:94:9f:ba:b6:ee:6f:51:15:
f6:4d:91:14:fb:00:33:dc:97:f2:7e:7b:e8:19:b0:06:02:a1:
ef:53:66:9f:39:9a:6f:0e:cd:14:ee:55:66:ca:13:4a:a0:3b:
1f:3c:e2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:49 2025 by rpki-client