Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/QeY7vGKOe5WJwx2PdFZMhuvqcrM.roa
File: QeY7vGKOe5WJwx2PdFZMhuvqcrM.roa (raw, json)
Hash identifier: iFsqZE7xTmoV7CGhuU56miv5nf81Wm5pGm3tJX+o8Gg=
Subject key identifier: 41:E6:3B:BC:62:8E:7B:95:89:C3:1D:8F:74:56:4C:86:EB:EA:72:B3
Certificate issuer: /CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Certificate serial: 01942368C526F842B8CA2DDE445BB2CE5C69
Authority key identifier: C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/QeY7vGKOe5WJwx2PdFZMhuvqcrM.roa
Signing time: Wed 01 Jan 2025 19:47:36 +0000
ROA not before: Wed 01 Jan 2025 19:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55002
IP address blocks: 194.33.68.0/24 maxlen: 24
194.33.70.0/23 maxlen: 23
2001:67c:2994::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:c5:26:f8:42:b8:ca:2d:de:44:5b:b2:ce:5c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a2e4eb9fd3ccd1ba44a362f76f989b7b44d5f2
Validity
Not Before: Jan 1 19:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41e63bbc628e7b9589c31d8f74564c86ebea72b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:f0:81:fe:da:a7:94:50:d9:f3:d3:a0:32:
11:9c:41:78:b1:6e:e3:f0:93:ab:43:f0:6a:ef:87:
b8:cb:93:26:18:49:0c:ee:b4:9c:41:03:c1:09:ee:
82:fa:76:cb:b4:69:4d:9d:28:46:1c:6a:ef:a5:cb:
bc:e6:de:0b:e4:0a:23:91:bb:5d:aa:f3:93:68:1d:
55:9d:d8:75:b3:f5:38:3b:02:8b:86:84:10:fd:15:
e8:f8:21:62:a9:8f:3a:cf:ba:0e:03:cc:09:ce:de:
6c:d2:aa:c6:9c:e0:5d:bc:03:5d:12:35:63:2e:20:
49:a1:a4:9c:df:35:80:94:6e:6b:d5:cf:c5:7f:fb:
6a:01:07:ce:f6:c7:42:f3:41:0c:4d:85:91:bf:e5:
08:7e:99:8a:73:74:58:5a:48:43:11:2b:29:2d:64:
14:ed:39:2f:2a:db:cb:7e:45:af:ed:fc:13:24:26:
af:0c:09:ab:c7:d8:24:fc:4f:e1:ac:41:b0:24:4f:
c9:92:e8:e1:a8:78:74:89:d2:2f:21:0e:22:21:21:
2a:eb:57:19:1d:d9:32:af:ae:ff:ef:27:7a:48:6c:
ea:75:43:43:12:26:63:79:e1:51:e4:9c:55:c1:28:
38:a3:55:ff:35:f6:e7:1f:0c:21:4c:cf:2e:3f:90:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E6:3B:BC:62:8E:7B:95:89:C3:1D:8F:74:56:4C:86:EB:EA:72:B3
X509v3 Authority Key Identifier:
keyid:C7:A2:E4:EB:9F:D3:CC:D1:BA:44:A3:62:F7:6F:98:9B:7B:44:D5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6Lk65_TzNG6RKNi92-Ym3tE1fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/QeY7vGKOe5WJwx2PdFZMhuvqcrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0e4976-e750-4568-8583-de6ef7c95526/1/x6Lk65_TzNG6RKNi92-Ym3tE1fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.68.0/24
194.33.70.0/23
IPv6:
2001:67c:2994::/48
Signature Algorithm: sha256WithRSAEncryption
13:4c:fe:b1:e8:6d:ef:d4:1c:98:94:55:0e:68:e2:2c:cb:5f:
f8:fc:e8:70:2a:ed:f0:c6:6a:f7:d8:7a:ae:70:2e:40:a6:1f:
3d:f2:9f:0a:b0:e3:6c:7b:71:d8:38:b7:41:8b:b8:f6:b0:ad:
43:ae:06:ff:7c:95:d4:23:55:03:37:8e:0d:d9:93:03:0c:5d:
22:34:36:25:58:e2:5f:2d:ab:e6:1f:45:92:57:b1:2a:68:be:
e6:42:0b:1a:c2:ac:b0:c7:dc:84:c1:cb:60:4d:a3:c6:3e:2d:
ae:bf:59:dc:3d:ab:38:72:13:b0:27:b4:71:90:cf:77:96:19:
77:4d:5c:fb:08:c8:ac:bf:68:7c:67:1a:38:57:f8:e9:3f:40:
82:65:3a:e4:1b:0a:81:7e:36:35:d1:e0:c5:5b:0f:f2:11:b4:
a8:54:79:31:20:f2:59:d8:41:99:02:92:57:3b:f8:cf:08:ee:
d3:66:70:7c:c4:3d:1b:46:88:2b:6f:a7:8a:f4:95:ae:c1:8e:
a8:d2:c1:70:d3:60:fe:09:a9:9c:12:d6:20:9e:57:a0:d0:67:
9f:98:eb:b6:8e:0f:cd:96:42:70:bc:26:1c:15:cd:58:a2:aa:
a6:0b:c1:7e:e3:d4:b2:dc:b6:d0:65:4b:25:a0:4f:bd:7d:14:
a7:45:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:34:13 2025 by rpki-client