Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/0xlQ3OoAf3jw6dFpT3Cm7wgpHUc.roa
File: 0xlQ3OoAf3jw6dFpT3Cm7wgpHUc.roa (raw, json)
Hash identifier: MQMgI1VWvUX5TVbBWyEo2dcW4NQMw/+uEaquqgjFfto=
Subject key identifier: D3:19:50:DC:EA:00:7F:78:F0:E9:D1:69:4F:70:A6:EF:08:29:1D:47
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 019427B3DAA831E93B3D4054C6B44C2BBB5E
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/0xlQ3OoAf3jw6dFpT3Cm7wgpHUc.roa
Signing time: Thu 02 Jan 2025 15:48:05 +0000
ROA not before: Thu 02 Jan 2025 15:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19930
IP address blocks: 57.250.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:da:a8:31:e9:3b:3d:40:54:c6:b4:4c:2b:bb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Jan 2 15:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d31950dcea007f78f0e9d1694f70a6ef08291d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:98:c8:64:49:3a:15:37:1e:95:51:cf:24:
0d:0a:f8:d0:96:07:a5:2b:51:73:26:f3:a3:32:e9:
af:59:cb:c1:cd:ba:ff:80:dd:c0:ef:d4:f9:84:ab:
95:0d:f4:11:5e:7f:ca:d3:b5:4d:0b:f3:9a:08:28:
89:5f:e4:d4:e3:02:fd:98:3a:9c:b1:52:47:fa:b6:
c6:0d:a8:37:83:2e:12:89:49:17:dd:d3:04:17:ee:
8a:0d:69:74:29:6f:ab:ec:87:2f:5e:c4:4a:4f:6d:
c9:8d:c1:75:30:2d:88:b0:c7:b5:ef:34:2d:69:97:
76:18:c8:81:45:4e:f6:ce:fc:53:94:9c:e2:f9:75:
10:23:f5:b6:d0:03:99:81:a1:14:fc:9f:26:42:c5:
73:2d:4f:92:fe:85:f2:f1:7e:02:d7:15:c2:41:06:
46:7b:09:c3:4f:6d:c4:29:65:15:f9:fe:f2:b2:80:
39:2a:7f:f8:1a:04:6e:ca:16:d6:2c:e5:21:df:c4:
c9:42:d1:6f:a3:1f:4f:a6:d8:20:f0:d6:99:12:cb:
0b:38:ea:ea:8e:f6:20:27:48:5b:47:4a:9b:9e:4d:
fa:27:82:a9:9e:38:e0:23:82:a1:51:49:d3:49:74:
57:3d:73:6b:28:25:db:d2:2a:5e:c3:2f:13:7c:dc:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:19:50:DC:EA:00:7F:78:F0:E9:D1:69:4F:70:A6:EF:08:29:1D:47
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/0xlQ3OoAf3jw6dFpT3Cm7wgpHUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.250.58.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d8:4c:30:31:52:b1:1f:20:f3:17:41:c7:26:d4:90:2d:cd:
df:2b:42:27:3f:3d:f9:fc:84:d3:e3:d0:55:98:0c:6c:2e:86:
53:30:48:61:6a:46:7f:8b:50:44:d4:c9:9d:a7:e2:44:07:a2:
20:3c:21:82:7e:c2:ae:54:be:0c:54:78:d7:a6:40:b4:5c:57:
88:3b:41:93:7d:94:f8:16:6b:0d:13:af:ee:83:76:37:ff:be:
d9:5e:c0:b9:71:ee:9c:0e:2b:bc:2b:df:4c:65:71:1e:19:ad:
12:e2:35:4c:8b:75:0e:e5:31:7c:ce:62:2d:39:0c:da:90:1a:
47:69:16:03:7f:68:0f:ef:0d:65:3f:80:1a:87:dd:20:02:ac:
29:7b:a2:06:e4:e5:f8:1b:41:f8:1e:9d:10:2e:93:07:3b:bc:
6a:a9:7e:a8:71:61:8d:48:e8:c1:2f:84:9f:c2:fc:eb:4c:a5:
9a:6b:50:fa:06:1e:42:0e:4f:a6:1f:97:b9:b1:d2:3b:e3:d8:
92:a1:e8:65:0c:41:78:7a:58:0c:0b:b1:09:8d:cd:2b:d0:08:
32:27:17:f1:f1:0d:8e:25:1d:33:69:1d:08:e4:e8:7d:c7:be:
35:11:29:e3:69:45:8b:78:90:ed:69:9e:e7:c5:3d:fb:d9:20:
cc:2a:86:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:55:59 2025 by rpki-client