Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/qj6JzLV6yUCof1sB2xKr6dnriHk.roa
File: qj6JzLV6yUCof1sB2xKr6dnriHk.roa (raw, json)
Hash identifier: OwtdnJIJzWn+DFiZhfavSFxynDXz7xR6fT1mm0Xe21w=
Subject key identifier: AA:3E:89:CC:B5:7A:C9:40:A8:7F:5B:01:DB:12:AB:E9:D9:EB:88:79
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019427B57CC67A5FAD6B9153CC67BAF13B8A
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/qj6JzLV6yUCof1sB2xKr6dnriHk.roa
Signing time: Thu 02 Jan 2025 15:49:52 +0000
ROA not before: Thu 02 Jan 2025 15:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35758
IP address blocks: 45.14.73.0/24 maxlen: 24
45.84.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:7c:c6:7a:5f:ad:6b:91:53:cc:67:ba:f1:3b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 2 15:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa3e89ccb57ac940a87f5b01db12abe9d9eb8879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:aa:91:d0:c5:70:52:9e:a3:11:02:a7:37:
f0:df:ea:68:5d:88:65:21:31:7d:5a:76:d5:5a:99:
1f:15:c7:16:69:2d:ce:60:39:0c:2b:50:a7:f4:bd:
61:26:7c:7a:fc:1a:0f:4e:b0:50:24:c6:cb:56:66:
2f:2f:0d:8d:30:73:a3:4f:0e:31:49:83:45:3a:a1:
11:9d:3e:e0:5d:ed:a5:dc:7b:52:b9:c3:b0:88:2a:
0c:08:51:9a:d2:ad:aa:01:58:06:11:6a:c6:65:94:
cf:a4:24:cf:27:cd:d5:97:26:a6:74:b5:e6:f8:34:
21:62:eb:73:5c:47:7e:4d:62:45:f2:3d:b7:1f:f9:
00:f7:c5:13:13:a4:a9:67:5e:2a:4a:a8:58:a2:3e:
b7:7d:51:58:07:5d:66:94:65:36:25:ee:e5:cf:0d:
7c:10:ae:49:b7:1f:93:c3:4e:26:99:37:f5:fe:3d:
d3:7d:f7:20:d4:d8:20:a3:34:4f:10:8d:74:95:b6:
a6:92:78:3d:d2:68:d8:7f:d9:fb:5a:d4:61:bd:7c:
4a:c7:7b:88:fa:08:73:33:0c:6a:8b:38:9d:26:34:
30:e3:e7:3f:61:ae:0e:d4:30:a5:5c:f0:b0:a1:7d:
97:f5:c8:3e:e0:24:82:d5:5b:88:ab:57:0d:df:2a:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3E:89:CC:B5:7A:C9:40:A8:7F:5B:01:DB:12:AB:E9:D9:EB:88:79
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/qj6JzLV6yUCof1sB2xKr6dnriHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.73.0/24
45.84.46.0/24
Signature Algorithm: sha256WithRSAEncryption
19:58:d5:ee:1f:9c:2d:33:b4:46:4a:b8:b2:22:8b:84:d6:e4:
8b:ca:1d:8c:e5:d0:8f:25:22:b8:04:e4:b9:b4:2d:bb:75:0c:
49:df:b4:65:b5:3b:9e:f0:32:39:aa:b6:e3:9d:00:de:cb:88:
e4:aa:62:77:d5:10:ff:c8:de:c5:f9:c0:5a:ed:c0:ea:b6:26:
72:1a:bd:df:82:6e:75:4b:97:0f:7f:4c:7a:6d:c2:9b:a5:b9:
4e:7b:04:b4:2b:f5:b1:38:64:34:e9:ed:a2:ce:fa:68:27:86:
ee:6e:46:04:c3:3c:ff:70:42:17:6a:c4:14:f4:56:6e:6d:a8:
da:30:13:81:40:9f:f8:7d:bf:b1:cc:07:78:54:66:00:9f:74:
f8:30:b3:9c:1b:91:52:d3:fb:e2:4b:66:c3:ce:b8:ad:16:c5:
ca:a0:25:0a:4e:c7:66:5f:d8:02:ea:27:0a:68:5d:b8:22:bc:
84:d2:c6:cd:e7:55:4c:a9:77:40:31:ec:ef:04:d1:19:e1:af:
51:e6:f0:ed:97:05:48:02:da:df:5f:63:11:30:7f:48:64:17:
21:e8:35:19:07:3f:da:19:23:fc:c9:a0:9e:cd:12:93:ad:c3:
1b:53:11:dc:20:95:d1:d3:86:b9:b5:e9:d1:73:93:03:18:b5:
38:4e:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:46 2025 by rpki-client