Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/QBvDv1wXyDlfi_QuEB8c21Ryic8.roa
File: QBvDv1wXyDlfi_QuEB8c21Ryic8.roa (raw, json)
Hash identifier: MxmZ7CsmH/Y07J1f4MVQaD37Q5C8dvAPEP5FSQq8beM=
Subject key identifier: 40:1B:C3:BF:5C:17:C8:39:5F:8B:F4:2E:10:1F:1C:DB:54:72:89:CF
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747C918027DAE9463ECF130E3152E55
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/QBvDv1wXyDlfi_QuEB8c21Ryic8.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7759
IP address blocks: 77.83.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c9:18:02:7d:ae:94:63:ec:f1:30:e3:15:2e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=401bc3bf5c17c8395f8bf42e101f1cdb547289cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:9e:1c:28:06:06:a0:b8:cf:73:63:1d:47:
4b:4f:42:cb:6d:eb:db:d8:a6:a9:61:15:3a:fc:f1:
fd:2f:26:3e:87:23:26:d9:07:60:a4:ca:10:8e:c9:
f3:2d:c5:68:e0:fc:33:22:66:68:d6:87:f7:91:e3:
96:2a:58:8e:24:78:1e:7f:27:68:1c:7e:dc:48:d2:
f2:01:19:0b:bd:9a:3f:ab:3e:dc:81:13:02:6e:b1:
89:0c:97:43:7a:57:1b:19:32:69:33:8b:b9:4d:1e:
63:88:a0:fb:33:47:27:88:73:33:20:fa:bb:c9:ea:
1e:4e:7c:da:2a:dd:8d:ac:a7:f5:5a:59:45:f6:11:
64:ec:34:09:67:b4:29:32:79:7f:64:38:c8:a9:0e:
41:73:e0:03:01:ed:9d:71:6f:da:f9:7c:aa:9a:e6:
2d:57:11:0c:c6:2c:a2:3a:10:7f:aa:bc:93:63:a3:
6f:f7:8d:39:9c:16:12:b8:65:67:02:73:75:9f:ec:
92:04:51:19:ab:e2:fb:8d:9e:3e:56:64:03:d3:ad:
86:6a:38:c7:ce:af:28:96:68:24:0e:89:72:8d:a3:
39:1a:6a:ae:83:f0:75:38:64:fe:c1:94:90:8f:6b:
05:41:77:b7:43:65:62:c4:06:d2:14:2b:10:53:a4:
9b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:C3:BF:5C:17:C8:39:5F:8B:F4:2E:10:1F:1C:DB:54:72:89:CF
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/QBvDv1wXyDlfi_QuEB8c21Ryic8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.240.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b0:54:2e:ff:2f:4d:13:c7:3e:8b:2c:c6:42:49:d4:9c:b8:
9c:f3:f6:27:59:b0:37:1a:f6:d0:79:1c:9b:b5:b1:72:52:92:
3e:23:35:a9:e6:d8:01:18:1b:26:3a:95:51:ec:ff:ed:5a:7f:
2e:16:28:9b:e1:e4:d9:98:d6:69:ff:97:56:8b:98:e1:e6:a8:
88:bb:ba:2f:f9:12:4b:bf:e6:ee:7d:e1:80:17:d9:a8:8c:2a:
61:cd:95:9a:28:38:4d:78:74:9c:ed:3a:28:18:dd:23:52:3f:
dd:0b:89:c3:cb:e6:cc:52:0f:00:d0:45:21:3c:2a:42:22:20:
5f:e5:1b:6a:75:21:d2:ba:de:f2:51:f0:bb:15:fa:df:c8:8d:
19:22:ea:2c:3b:b8:d9:dc:91:a8:c4:03:64:ef:f8:6a:ea:8d:
d6:f1:03:2b:18:81:57:07:90:48:4e:01:40:d5:30:12:16:79:
23:77:5d:ac:35:82:37:19:15:c4:0d:ed:dd:8d:2e:9f:18:4c:
c4:e6:15:84:36:e9:ea:4e:b3:ab:51:82:37:49:aa:91:99:f9:
cb:73:ce:4b:86:8d:07:50:ba:45:80:b7:b3:b0:61:35:a4:71:
bf:7d:89:63:af:df:da:04:e4:ee:25:4a:b1:e5:54:59:69:a0:
d9:f2:01:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:05 2025 by rpki-client