Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/qMWIoqBoGukevIZKfzq1COUCvhk.roa
File: qMWIoqBoGukevIZKfzq1COUCvhk.roa (raw, json)
Hash identifier: faCXpAAkNijo3TzuPmHzUxfuDa86siu6iKWGEKjLJFM=
Subject key identifier: A8:C5:88:A2:A0:68:1A:E9:1E:BC:86:4A:7F:3A:B5:08:E5:02:BE:19
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0194274883ABF3A2A5AA9ECF249704AD7E22
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/qMWIoqBoGukevIZKfzq1COUCvhk.roa
Signing time: Thu 02 Jan 2025 13:50:51 +0000
ROA not before: Thu 02 Jan 2025 13:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36268
IP address blocks: 45.86.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:83:ab:f3:a2:a5:aa:9e:cf:24:97:04:ad:7e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8c588a2a0681ae91ebc864a7f3ab508e502be19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:a3:27:79:c1:cc:ef:d0:0a:4e:d2:d5:f0:
10:0d:52:bb:6a:06:d8:b0:24:3f:1e:a6:f4:00:e9:
dc:a4:e5:48:9a:0d:79:61:be:c9:c4:51:49:f2:58:
27:b0:18:82:66:94:c1:7c:71:fd:fb:5a:35:ea:7d:
eb:e8:ad:a7:98:cf:95:a1:d8:78:db:58:72:7c:a6:
1c:da:15:2d:7a:e5:5a:d6:17:5d:b0:91:b2:7e:19:
27:bf:3b:c2:e6:89:fd:b3:a5:5e:6b:f6:40:fa:9f:
e2:0a:06:4c:dd:4f:33:ab:79:dd:32:1d:f3:38:cb:
2f:be:03:f5:0b:ab:0e:53:90:a2:9e:97:69:1d:a2:
b5:43:05:28:cf:53:ab:f7:13:b2:5d:51:11:4e:1f:
f4:57:37:e6:23:0d:0d:01:78:e9:27:9b:08:3e:22:
c6:2d:e8:05:fc:de:1d:6c:9f:6e:3c:af:4a:dc:e8:
1c:d3:5b:55:22:3d:27:1f:2e:7f:cc:15:68:5b:0e:
b0:e7:71:03:6f:3c:11:ac:b5:32:15:3c:7a:c0:f1:
9e:54:7d:25:97:30:9f:aa:a8:9c:ae:ce:a7:4b:42:
7e:31:2b:4c:ee:06:f8:31:f8:a9:17:68:2e:94:fa:
71:03:f8:62:88:63:07:ba:d5:04:cb:46:e7:89:06:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C5:88:A2:A0:68:1A:E9:1E:BC:86:4A:7F:3A:B5:08:E5:02:BE:19
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/qMWIoqBoGukevIZKfzq1COUCvhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:7e:9c:86:ef:c5:13:de:d3:d4:e6:d3:31:6c:73:56:81:ea:
62:d9:ec:e0:62:a5:29:3a:2d:da:8c:ba:8a:3a:ed:dd:85:f6:
b1:b6:cb:dc:56:85:8a:49:91:ff:6c:12:14:30:00:68:8c:b4:
be:8f:60:03:07:96:2e:85:bb:f0:f6:91:bd:e3:04:b9:a9:be:
bf:02:d6:04:7e:f6:96:ca:d5:45:29:76:34:e6:87:18:21:e5:
9e:99:22:9d:4b:c6:f9:0e:cd:69:d2:c1:b0:4f:40:aa:0e:1e:
1c:e2:c7:9e:53:70:d8:5b:3f:e8:67:a9:9d:f7:7b:90:a1:7a:
3c:78:bb:12:59:46:ff:91:0d:21:8e:5a:11:b6:58:4e:5a:db:
4f:6e:ea:e7:ba:66:46:73:88:75:39:2e:6d:6c:63:97:19:3e:
51:d0:f3:3f:06:d5:35:0e:07:f1:8a:85:f9:3b:a8:7e:de:9b:
8c:52:0a:03:58:12:61:b7:49:a5:3a:1d:ca:dc:f7:49:fb:73:
7c:ff:51:74:b8:0d:61:91:dd:ac:41:d1:cf:82:39:78:21:61:
a3:2c:83:fa:a7:6c:40:14:6d:47:be:bb:a7:a1:83:e8:55:61:
9d:4c:11:57:68:43:49:97:ce:d1:a7:aa:83:d0:ce:8a:2b:20:
21:6c:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:00:17 2025 by rpki-client