Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/QB5_xxRGXCHsGPaKE_F_HuFsFXc.roa
File: QB5_xxRGXCHsGPaKE_F_HuFsFXc.roa (raw, json)
Hash identifier: e7wfZoRrHPAl9YgBZA9mESSygC6N1gWRWhEiStosBqs=
Subject key identifier: 40:1E:7F:C7:14:46:5C:21:EC:18:F6:8A:13:F1:7F:1E:E1:6C:15:77
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3EAFAAD363181B109A63864A9F17E
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/QB5_xxRGXCHsGPaKE_F_HuFsFXc.roa
Signing time: Thu 02 Jan 2025 01:49:18 +0000
ROA not before: Thu 02 Jan 2025 01:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207475
IP address blocks: 45.12.27.0/24 maxlen: 24
193.38.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ea:fa:ad:36:31:81:b1:09:a6:38:64:a9:f1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=401e7fc714465c21ec18f68a13f17f1ee16c1577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:b2:51:fc:84:42:e8:44:36:4f:8e:df:ff:
2f:fc:fb:a6:d1:aa:95:31:70:96:43:bd:a9:2c:67:
d5:a5:28:f1:9e:f7:7f:b2:8e:f6:79:51:d6:c2:41:
c5:a7:da:57:b1:6e:0c:7e:f6:c6:23:e9:2f:cc:20:
d4:7c:3d:31:22:6d:15:58:51:e0:7b:35:fc:81:d6:
bf:82:cc:24:01:09:78:49:35:af:2e:32:3b:95:5b:
b2:a3:54:cb:b7:c2:a5:d3:59:fc:3f:72:7b:d5:80:
58:a0:c9:3d:19:dc:83:f8:a4:a1:6d:7a:f9:32:27:
ae:ab:36:36:c6:94:19:63:e3:5e:47:83:33:8d:fc:
1f:a5:4e:7c:79:08:e8:f1:4b:88:3a:bf:47:fa:5a:
f6:56:81:1d:d3:dc:d4:79:fc:05:93:c2:71:08:5b:
d8:c4:d7:70:5c:02:7f:b1:e6:42:c6:4f:13:bb:d5:
30:d1:cf:47:4c:9a:bb:3d:4f:3a:90:7f:65:d3:2a:
d6:4c:6f:4f:c6:24:a7:5c:e0:32:fc:6d:a7:aa:0f:
be:41:86:45:0d:25:d5:6d:52:11:99:7e:59:f5:e2:
f6:0d:be:0a:2c:3a:3e:78:8c:54:05:09:92:d8:c9:
05:fd:de:62:83:a6:63:68:8e:26:98:9a:43:c9:b2:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1E:7F:C7:14:46:5C:21:EC:18:F6:8A:13:F1:7F:1E:E1:6C:15:77
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/QB5_xxRGXCHsGPaKE_F_HuFsFXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.27.0/24
193.38.255.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:af:02:dd:f3:43:5d:0e:ed:50:6d:79:38:d6:9a:50:7b:59:
b2:83:9a:1e:b5:00:b7:04:93:eb:80:2a:a5:ed:ec:f8:95:c5:
07:1d:2f:20:b1:a9:69:77:86:a9:d5:96:b0:77:b5:43:09:50:
5f:55:8f:72:ff:85:f4:5f:02:76:ec:a8:a1:14:c0:eb:aa:e9:
0e:c9:80:75:54:64:25:fd:99:0a:2a:b5:85:08:b9:bb:dd:c3:
72:27:6b:bf:fc:2a:19:4e:9f:a6:54:95:1e:b7:be:08:ff:da:
2b:9a:f6:c1:c2:b9:c8:4c:5f:c5:0d:2d:bc:24:9c:28:ba:fd:
e8:cc:f5:03:da:f5:83:2e:48:09:b5:30:d2:ff:59:cc:04:94:
67:1f:12:cb:54:e7:76:64:90:ca:76:20:fe:73:3a:71:c0:08:
41:f8:c3:06:42:bf:06:28:98:fe:05:a2:35:3c:f0:eb:ec:9d:
51:16:05:fa:b2:97:3b:9e:9a:cb:b0:bc:99:1c:1e:82:dd:ea:
a8:d1:e6:3c:e7:24:da:a9:69:17:de:c0:02:23:84:88:bf:32:
25:81:f2:04:7f:c7:f7:32:84:a4:d0:85:44:29:fa:7d:73:3e:
92:d7:c6:70:76:10:cb:aa:5b:6c:dc:b9:4e:ec:67:f2:1c:cc:
b4:62:b4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:08 2025 by rpki-client