Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa
File: Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa (raw, json)
Hash identifier: 6OpDkd4to1irtWv8vpsm2jxisQw9dR70exo6gT09Ccs=
Subject key identifier: 42:58:7D:6C:58:81:89:90:C9:EC:4E:1B:27:A4:26:ED:4F:1C:7E:99
Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial: 019426D9A012D16BCEACD0D9B792B5823BF2
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa
Signing time: Thu 02 Jan 2025 11:49:43 +0000
ROA not before: Thu 02 Jan 2025 11:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43522
IP address blocks: 91.198.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a0:12:d1:6b:ce:ac:d0:d9:b7:92:b5:82:3b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Validity
Not Before: Jan 2 11:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42587d6c58818990c9ec4e1b27a426ed4f1c7e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:e6:59:91:0d:fc:31:9b:9e:4e:73:da:b9:32:
43:9a:a1:2f:cb:b1:ba:6c:be:57:2f:9c:56:b7:ea:
00:05:cf:40:d2:20:4b:79:3f:8d:ea:96:df:34:3c:
c2:84:94:fb:2e:e3:f2:cd:90:5f:0e:c8:5c:1d:52:
78:9e:83:cd:20:e6:30:ff:82:56:03:4a:dd:a6:a2:
f5:a4:b8:80:b3:40:6d:b1:25:01:a9:b1:be:87:4f:
99:2f:e3:dc:6a:a8:bb:18:c0:e1:b7:9a:1f:20:77:
65:e1:9b:8b:9c:bb:f9:57:2c:6a:fa:54:5f:a6:89:
5a:6f:32:3e:2e:e9:bc:f6:17:8a:cd:a1:ea:5f:a5:
74:94:2c:05:8f:60:03:04:2b:7c:28:19:42:ed:df:
44:39:76:71:a1:bc:9e:73:fe:f7:52:f9:9d:b3:f9:
f0:01:05:c8:e8:2e:3b:2f:92:0c:d6:7a:94:30:37:
e1:74:77:04:29:0d:1c:b8:f3:69:c5:d5:2b:21:92:
66:ea:73:d0:b9:21:37:63:9e:07:76:41:a1:1f:e5:
42:e2:bf:d1:46:17:5a:ee:47:04:be:c8:f4:d1:24:
68:6b:eb:8e:e0:0f:a7:26:32:26:ca:95:c1:8b:55:
83:43:ee:c3:9d:69:9f:59:43:51:5e:c4:91:c0:a2:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:58:7D:6C:58:81:89:90:C9:EC:4E:1B:27:A4:26:ED:4F:1C:7E:99
X509v3 Authority Key Identifier:
keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.45.0/24
Signature Algorithm: sha256WithRSAEncryption
49:02:d8:1b:93:94:fd:05:f5:1e:00:f2:a1:b3:df:28:52:6b:
24:8f:5d:a1:61:b7:81:b3:62:40:ae:32:39:c1:61:b3:50:81:
04:c4:de:53:de:d7:8a:20:53:6b:29:b6:11:2e:6b:77:de:d5:
ef:8d:7c:0f:88:46:66:c3:f9:3c:2b:11:a4:46:71:67:bb:7d:
a0:1d:ae:0d:a3:b0:c6:58:40:d5:99:e0:38:3f:26:88:bd:88:
6b:72:32:6c:be:09:9f:fd:f4:22:8c:ff:df:77:0e:94:65:90:
b5:f0:7c:ad:26:3e:a4:20:de:40:d6:c4:d4:f3:a3:93:6e:d1:
21:25:30:a6:ef:88:ed:fe:ec:20:38:1c:b3:b6:43:96:52:12:
a0:62:2b:db:d8:de:98:28:ec:fc:bd:45:b5:3b:51:b2:51:1b:
36:a8:6c:a0:73:a4:93:a9:89:9c:d6:b4:27:9f:ff:15:8b:29:
a6:80:d6:16:9c:86:d2:55:8c:af:88:c1:b5:fa:5c:b1:b8:f5:
d5:49:7d:25:61:09:e0:45:c5:bf:43:d6:ee:f4:aa:30:18:13:
00:cb:bc:86:35:20:53:32:33:4f:34:32:52:d4:84:56:6f:e0:
de:01:fa:06:ac:78:c9:8c:e8:a0:42:dd:df:d3:ab:3b:d1:18:
84:b7:93:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:22:15 2025 by rpki-client