Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa
File: Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa (raw, json)
Hash identifier: XlEPB7O64MaJL4hcRAWkANJshOuG+WaN9ZFd6ghdbYU=
Subject key identifier: 42:FE:EB:4E:50:B8:81:13:C7:7D:A2:B1:A5:17:60:68:71:CD:55:30
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01942747080760A8B8246151AB6F1E24B07A
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa
Signing time: Thu 02 Jan 2025 13:49:13 +0000
ROA not before: Thu 02 Jan 2025 13:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207326
IP address blocks: 45.158.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:08:07:60:a8:b8:24:61:51:ab:6f:1e:24:b0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 2 13:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42feeb4e50b88113c77da2b1a517606871cd5530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c9:3f:77:fb:88:8e:5f:66:b1:04:ad:4f:eb:
3b:0b:d7:b6:93:12:2f:db:60:e4:b7:34:4c:67:7b:
1b:4b:c3:f3:08:98:d9:12:2b:39:04:bd:75:6e:6a:
9b:5e:3e:26:64:63:f0:96:9e:01:e1:13:e4:a0:cc:
1b:40:07:b3:a4:b9:a7:ee:78:9a:73:90:ce:ae:cd:
ac:55:e0:fd:7b:5c:42:76:f5:18:52:d9:61:20:b1:
26:78:71:7f:42:d8:68:5d:39:b2:8d:67:e6:05:96:
5c:f0:03:e2:cf:67:1d:9d:81:7f:6b:17:7c:c9:2c:
bd:0a:37:96:1b:ac:20:30:6c:bd:d4:12:32:53:a2:
8f:60:17:46:3f:c5:57:8a:54:b9:dc:6d:5b:ce:b5:
ee:be:6b:24:45:ae:50:0b:19:32:30:b1:fc:7f:2e:
53:cd:1e:ef:28:d7:25:2f:e5:0c:93:1a:d9:b5:68:
d8:e8:8d:61:e1:4a:f3:ff:f3:a3:66:29:db:8a:e9:
d1:bd:4f:58:0d:22:bc:1e:10:05:71:42:b5:11:2c:
e9:72:7d:91:ec:f6:2c:ab:cb:b2:ae:be:d8:b4:1e:
03:c3:50:12:25:29:20:52:31:0b:fa:84:b1:69:99:
6c:57:f2:ca:b8:a5:8d:27:b8:b0:0c:ff:3f:14:cc:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FE:EB:4E:50:B8:81:13:C7:7D:A2:B1:A5:17:60:68:71:CD:55:30
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:0b:6f:51:48:69:80:d0:64:58:2f:b0:d4:54:d0:8a:44:00:
e3:06:e8:e2:08:f3:f0:8f:2d:0a:a4:68:c9:e4:0a:b8:3f:99:
02:9c:2f:3c:ca:de:3f:b4:1e:76:ad:33:e8:53:de:79:32:26:
d9:cc:c4:b3:b6:67:89:87:09:2c:f2:59:c4:b7:78:ec:d5:3f:
84:bf:4c:f8:10:eb:1d:7d:e3:65:29:e1:85:44:96:77:0f:19:
54:a1:3e:03:2a:aa:54:99:a8:d2:eb:b4:54:92:94:1a:31:0c:
b1:a2:c5:79:b2:be:bb:1f:45:21:61:bc:8a:dd:1c:2a:7d:b7:
09:07:e8:83:25:e2:af:2f:74:41:11:7e:4f:89:c8:50:35:43:
f3:ca:bc:b8:25:9b:fe:5b:fb:b4:84:72:85:38:26:71:e4:c4:
f7:db:38:57:d9:84:d9:e6:22:f4:c6:fe:6b:b2:30:c8:67:f4:
f7:8d:df:d7:9a:eb:22:61:56:34:c1:10:96:3f:58:89:1f:b8:
9d:07:28:c7:9e:4f:f9:27:8c:76:db:b3:14:d8:6d:4a:74:a0:
86:03:c3:cc:7b:0c:de:97:a7:e2:ec:ba:a5:ea:38:dd:37:3b:
bf:17:2d:ba:ed:c0:bb:24:c2:1b:2f:43:4e:b9:b8:f8:2d:7c:
37:0e:de:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:45 2025 by rpki-client