Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/QnNCDuIZzZJfBF3ECszlCfF7nQw.roa
File: QnNCDuIZzZJfBF3ECszlCfF7nQw.roa (raw, json)
Hash identifier: 7YHX2znxxfS3ObXlB9bs5pQPuS62yS0sohOCK8USfs8=
Subject key identifier: 42:73:42:0E:E2:19:CD:92:5F:04:5D:C4:0A:CC:E5:09:F1:7B:9D:0C
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 019427480FEF89A35DD445A21D81E6D66E8B
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/QnNCDuIZzZJfBF3ECszlCfF7nQw.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135391
IP address blocks: 46.255.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0f:ef:89:a3:5d:d4:45:a2:1d:81:e6:d6:6e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4273420ee219cd925f045dc40acce509f17b9d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:e0:fa:d8:de:b5:f9:a3:25:18:f0:a2:65:
9f:ca:ba:02:20:ac:8d:3b:5c:25:ce:35:f8:aa:22:
d1:c9:aa:ca:24:d8:f3:3f:47:1e:c8:8b:75:88:d6:
d7:7e:af:36:6c:0f:db:55:10:bb:b1:ef:5f:05:e0:
4e:35:83:39:11:75:b8:ae:8c:58:0b:46:3a:06:cb:
5d:fe:d9:2a:7a:43:21:0d:16:7c:79:b1:02:57:ea:
59:8b:50:3b:36:e3:76:a0:28:94:93:fd:b1:55:fe:
4f:cc:75:e6:eb:a8:bf:c5:35:e0:39:35:5b:0e:f9:
51:eb:7a:f0:d9:44:db:eb:a3:0e:04:32:33:db:58:
0b:c5:41:7f:8d:5f:b9:3a:fe:8a:dc:99:0c:3b:22:
8c:71:6d:c8:2d:4d:8e:a1:62:81:15:2e:09:6a:8f:
52:1c:6f:74:6f:eb:40:17:3b:a3:58:40:ab:75:c3:
53:40:0e:62:e5:82:cd:1d:62:60:0b:a8:52:6f:99:
3c:df:ea:e1:65:47:ed:7e:f6:a8:95:d8:cd:78:56:
e9:82:44:2e:a8:58:cc:26:6c:4e:c5:9c:a8:2a:4a:
98:f7:75:60:ae:19:f8:d0:93:af:ff:e1:88:16:68:
48:52:9f:c3:75:9b:db:bc:f8:b3:b6:71:77:67:06:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:73:42:0E:E2:19:CD:92:5F:04:5D:C4:0A:CC:E5:09:F1:7B:9D:0C
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/QnNCDuIZzZJfBF3ECszlCfF7nQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.28.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:9e:9b:27:eb:44:b8:6f:2e:7f:8c:60:57:ec:c0:6d:87:36:
b4:b8:95:73:9b:00:1f:84:a0:38:87:bf:56:75:3a:57:a7:36:
31:09:bd:3f:48:4f:50:46:e9:0f:15:9a:a3:56:32:a6:d7:b4:
be:9f:5d:b6:4d:c3:10:b0:3a:fe:3e:e2:69:bd:d7:ea:bb:de:
ae:83:a3:be:1a:46:3e:ff:7f:c9:48:15:f8:b9:a4:77:ec:22:
b3:aa:8d:30:42:9f:6d:cd:88:39:e3:5b:cd:b1:60:8f:da:8f:
ac:b5:9a:49:23:4e:76:27:02:58:02:e5:11:ce:b3:14:eb:a5:
f3:16:c1:b5:3a:8a:35:4d:27:09:9d:85:ff:95:26:02:b5:bb:
79:66:29:be:e1:75:f1:53:94:a8:25:2a:69:62:b9:24:d0:67:
95:10:d9:b5:25:e7:87:d5:59:25:dd:6f:32:ef:9c:47:a0:02:
30:e3:c2:d4:99:dc:78:a7:bd:27:74:1e:c1:86:db:a0:f5:d7:
cc:19:ea:aa:e0:d4:cb:52:1d:b4:22:0d:18:3e:b7:14:09:1d:
b6:18:f4:2a:45:7e:95:84:f2:55:e0:0c:c9:7c:8c:27:c1:7c:
40:ca:d1:50:ed:22:64:5f:74:69:2a:67:96:45:95:0e:18:5f:
79:64:88:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:59:22 2025 by rpki-client