Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/QqVG_Jig1AWpsZjXM3ozkcck_rk.roa
File: QqVG_Jig1AWpsZjXM3ozkcck_rk.roa (raw, json)
Hash identifier: cuOJ8bahzoMT5MnSdXLE/ebuIEkibnbU4Phcnk8deko=
Subject key identifier: 42:A5:46:FC:98:A0:D4:05:A9:B1:98:D7:33:7A:33:91:C7:24:FE:B9
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3E5172233EE1A6C41347C3B1B7778
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/QqVG_Jig1AWpsZjXM3ozkcck_rk.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51500
IP address blocks: 45.89.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e5:17:22:33:ee:1a:6c:41:34:7c:3b:1b:77:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42a546fc98a0d405a9b198d7337a3391c724feb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:e9:d8:c3:2d:50:02:da:81:c4:ba:f2:99:
6a:51:45:bf:22:55:1d:9e:f3:81:06:71:03:16:df:
e5:00:1e:6c:1d:d5:48:ab:fa:34:dc:d7:4a:09:7d:
a7:0c:d7:69:45:33:e7:62:78:63:f5:f9:8c:0c:8e:
46:65:25:56:7f:4f:73:01:23:fb:7c:c1:34:50:2d:
21:a7:74:60:7c:85:5a:19:7d:82:78:4f:51:75:49:
73:42:b0:15:5c:1d:11:6b:69:a4:a5:15:14:20:aa:
14:43:d9:08:28:6d:f1:54:be:0f:60:b8:bc:70:a3:
55:36:78:35:eb:c3:5b:47:bf:e3:b1:86:a6:19:ee:
1c:c0:05:9c:4e:f4:09:3f:92:f3:e1:af:c3:f0:17:
4e:6a:3c:6c:b7:ae:67:56:28:f2:70:bc:04:1c:69:
38:b0:4b:a4:6d:12:b2:91:82:04:92:87:c7:60:ef:
14:a5:7e:7a:f9:ca:4f:30:ee:76:39:e2:40:d3:e2:
18:6d:2b:d2:e7:b1:be:ef:a0:62:69:36:b1:a5:f8:
31:bd:22:15:22:23:e8:f4:98:76:5d:34:6c:57:c9:
0d:31:1d:85:62:f7:56:53:47:8c:2a:32:56:3f:e8:
d7:f3:ca:52:31:21:11:aa:72:95:97:12:12:d0:ba:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A5:46:FC:98:A0:D4:05:A9:B1:98:D7:33:7A:33:91:C7:24:FE:B9
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/QqVG_Jig1AWpsZjXM3ozkcck_rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.88.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:1a:4a:4d:9e:fb:1f:c4:00:54:35:17:be:38:7a:33:32:61:
7a:98:c2:6e:f8:de:96:07:9e:e0:c1:62:ca:81:c5:2d:e2:17:
2a:d7:b9:6e:39:35:ca:db:0e:8b:d6:cd:21:82:3d:8d:71:ee:
78:1c:0c:9f:c3:3b:eb:e3:b0:23:b3:dd:5d:08:bd:6f:d6:09:
72:e6:8e:2b:2d:0c:6f:0a:06:a2:92:10:fe:93:27:42:29:85:
c5:41:8d:01:58:7f:6c:d9:36:98:44:59:a7:0d:74:48:7d:3e:
2d:3e:1f:ea:ba:30:ba:af:1a:3b:46:7f:f3:84:4f:67:b2:13:
e2:e3:4c:61:43:c4:2b:e8:fc:4f:30:10:66:9f:a7:26:80:46:
75:f9:93:11:26:d6:16:21:ef:3b:18:d8:39:33:e1:ae:52:66:
b0:64:a6:f6:9a:ad:36:aa:a8:fc:dc:dc:5e:ba:8b:d8:1e:90:
60:c6:67:dd:99:d7:b7:10:62:70:15:57:a4:63:e4:64:4e:68:
5c:bd:c5:b3:a7:35:a2:d7:0d:f4:b2:61:0d:bb:be:3f:3f:a1:
3a:33:49:7e:2d:33:7d:45:64:19:1b:42:c3:00:4b:80:99:08:
ed:b1:85:4a:65:23:ac:3b:99:a0:7e:8f:1d:e2:86:70:f5:d5:
37:30:49:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:55:37 2025 by rpki-client