Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/QCPaGZ8bi2Da50RQ4k8ya1w0dq4.roa
File: QCPaGZ8bi2Da50RQ4k8ya1w0dq4.roa (raw, json)
Hash identifier: UeTuehE3XWxqnHJAwNv7xL7hPz4xW2vyEJKj+BsbTow=
Subject key identifier: 40:23:DA:19:9F:1B:8B:60:DA:E7:44:50:E2:4F:32:6B:5C:34:76:AE
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 01941FFA9B2C110B9F9870003FB327E441D5
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/QCPaGZ8bi2Da50RQ4k8ya1w0dq4.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.135.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9b:2c:11:0b:9f:98:70:00:3f:b3:27:e4:41:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4023da199f1b8b60dae74450e24f326b5c3476ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:52:a7:96:95:3d:56:23:42:39:7d:d3:71:
51:46:ae:02:81:bc:5b:57:e5:6c:07:92:0a:00:de:
e2:4e:af:a7:dc:3c:22:35:84:79:d1:1e:80:b2:1a:
28:b7:c3:bf:8d:51:31:a1:20:97:1f:81:d2:46:78:
63:71:8a:9f:a8:30:a4:c1:42:3f:b1:b3:b1:8b:af:
b8:c7:ac:55:81:db:8d:70:13:b6:e9:e7:00:a5:e4:
79:48:a5:f1:a4:e2:74:23:3c:77:cd:32:f7:27:71:
98:61:de:f0:d7:27:09:b9:f4:35:b2:42:17:88:b0:
ec:8c:55:0f:8b:a0:11:dd:51:fe:fc:5f:92:b8:4c:
ff:56:e5:23:79:d3:23:27:dc:a2:e6:f4:46:51:d9:
a8:89:72:f9:bb:a7:b7:a5:46:d8:96:f4:19:73:f8:
c9:c1:1d:a3:eb:0d:ac:69:ad:3f:e8:9b:b3:6e:04:
e9:d0:9c:70:a5:87:4d:70:15:7d:02:49:80:2d:b3:
3f:02:00:32:1d:8e:0f:c3:f5:87:98:7e:2d:b7:e9:
c1:2d:20:23:42:56:4f:cd:8f:a2:91:15:67:3a:85:
3c:d4:2e:0b:dc:50:0b:38:01:44:be:8b:97:19:03:
d3:de:29:47:8c:d7:c9:df:09:49:21:de:fb:f5:bb:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:23:DA:19:9F:1B:8B:60:DA:E7:44:50:E2:4F:32:6B:5C:34:76:AE
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/QCPaGZ8bi2Da50RQ4k8ya1w0dq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.136.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:8b:89:75:97:2d:6a:63:56:3a:b5:7a:87:7d:76:20:0f:d2:
dd:ca:85:9a:8e:be:4e:ac:38:77:fe:48:63:c1:00:6d:bb:c9:
b2:a5:12:46:10:34:8b:c4:41:ed:a2:a7:1a:1b:25:fb:37:5c:
22:3d:98:c0:ec:55:40:a3:d4:13:d4:51:85:c7:1c:3a:80:a2:
c2:1b:06:a7:a7:1c:b7:62:82:96:22:cc:e3:62:58:2f:28:30:
f6:c5:a8:87:30:8d:be:e3:b4:cf:b7:97:78:7c:37:b2:05:91:
6c:e4:0f:52:c1:73:2d:c4:89:f2:54:af:be:b9:cf:c7:9a:84:
0f:c9:b4:bd:79:f6:32:70:b8:31:13:12:2b:8b:eb:b9:70:2e:
20:51:c9:ca:fc:46:1b:c7:37:9d:e2:2e:67:93:42:f0:20:03:
c9:08:76:5e:e4:dd:a8:d2:a1:cd:8c:79:6f:f6:7f:70:41:13:
2d:53:12:7e:3c:f1:5a:e1:a7:c5:22:92:82:e5:57:2e:01:fe:
c6:09:29:12:ce:06:41:99:69:90:b3:ab:1f:84:11:2c:9b:4c:
00:0d:5b:b3:4e:12:07:d8:83:2b:8b:24:2b:ba:a6:6a:90:96:
02:31:1a:db:c0:a5:89:af:47:87:63:62:52:21:79:e1:6f:14:
c4:40:14:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+pssEQufmHAAP7Mn5EHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx
OGM5YmMwHhcNMjUwMTAxMDM0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDIzZGExOTlmMWI4YjYwZGFlNzQ0NTBlMjRmMzI2YjVjMzQ3NmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKZSp5aVPVYjQjl903FRRq4Cgbxb
V+VsB5IKAN7iTq+n3DwiNYR50R6Ashoot8O/jVExoSCXH4HSRnhjcYqfqDCkwUI/
sbOxi6+4x6xVgduNcBO26ecApeR5SKXxpOJ0Izx3zTL3J3GYYd7w1ycJufQ1skIX
iLDsjFUPi6AR3VH+/F+SuEz/VuUjedMjJ9yi5vRGUdmoiXL5u6e3pUbYlvQZc/jJ
wR2j6w2saa0/6JuzbgTp0JxwpYdNcBV9AkmALbM/AgAyHY4Pw/WHmH4tt+nBLSAj
QlZPzY+ikRVnOoU81C4L3FALOAFEvouXGQPT3ilHjNfJ3wlJId779bvtewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEAj2hmfG4tg2udEUOJPMmtcNHauMB8GA1UdIwQY
MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt
YmQzYmZjOTliZGE5LzEvUUNQYUdaOGJpMkRhNTBSUTRrOHlhMXcwZHE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5
LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYeIMA0G
CSqGSIb3DQEBCwUAA4IBAQA/i4l1ly1qY1Y6tXqHfXYgD9LdyoWajr5OrDh3/khj
wQBtu8mypRJGEDSLxEHtoqcaGyX7N1wiPZjA7FVAo9QT1FGFxxw6gKLCGwanpxy3
YoKWIszjYlgvKDD2xaiHMI2+47TPt5d4fDeyBZFs5A9SwXMtxInyVK++uc/HmoQP
ybS9efYycLgxExIri+u5cC4gUcnK/EYbxzed4i5nk0LwIAPJCHZe5N2o0qHNjHlv
9n9wQRMtUxJ+PPFa4afFIpKC5VcuAf7GCSkSzgZBmWmQs6sfhBEsm0wADVuzThIH
2IMriyQruqZqkJYCMRrbwKWJr0eHY2JSIXnhbxTEQBTE
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:45:59 2025 by rpki-client