Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/qa59xb1800lClBGKgPJD3m5Rw8s.roa
File: qa59xb1800lClBGKgPJD3m5Rw8s.roa (raw, json)
Hash identifier: g552CxuAT1A0kuubtT8ih3j4BuCostjRts289tICv1Q=
Subject key identifier: A9:AE:7D:C5:BD:7C:D3:49:42:94:11:8A:80:F2:43:DE:6E:51:C3:CB
Certificate issuer: /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial: 019425FD95E4208F3CCFCBE07F8AE0BAFEDE
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/qa59xb1800lClBGKgPJD3m5Rw8s.roa
Signing time: Thu 02 Jan 2025 07:49:23 +0000
ROA not before: Thu 02 Jan 2025 07:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48737
IP address blocks: 195.49.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:95:e4:20:8f:3c:cf:cb:e0:7f:8a:e0:ba:fe:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Validity
Not Before: Jan 2 07:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9ae7dc5bd7cd3494294118a80f243de6e51c3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:db:5f:c4:87:ff:fb:b4:36:d8:87:57:38:
17:01:2c:a2:3b:6d:9b:80:80:0e:68:06:20:b5:38:
8c:88:db:f7:eb:e9:3f:2c:fa:12:02:55:50:80:17:
a8:3b:f1:13:26:34:9c:56:56:41:a8:78:fa:10:91:
9f:e0:17:44:7f:1c:1c:e0:09:02:bb:25:04:1b:cd:
b6:d5:9e:11:b2:9f:6a:c5:5f:eb:58:86:fa:3a:6e:
e2:e2:e8:02:c4:7b:ce:5b:1e:32:e4:99:77:a3:b5:
d3:73:c6:6e:4d:c1:1e:3e:3f:81:6d:ac:d6:3b:c4:
32:23:8b:2a:36:16:70:5d:2b:d3:9d:c4:37:02:66:
e9:19:3b:e2:fe:4a:76:47:7f:31:67:4f:a4:92:22:
5a:2b:ef:09:79:57:05:08:67:47:c3:c7:27:b5:73:
4a:98:44:8d:2d:f0:82:4a:68:d9:21:da:38:a6:a6:
74:c6:63:90:94:dc:ba:92:ba:0b:96:76:c7:0b:ba:
1c:7b:bb:c6:ee:c5:51:d8:dc:e6:3f:3f:7e:d7:b7:
2a:32:e6:67:f0:9d:cd:98:3c:6e:e6:54:91:c1:c2:
30:c2:fd:d8:33:95:36:df:88:94:cb:7e:55:ad:05:
88:8d:7d:6c:92:f0:fc:39:26:dd:b0:47:26:af:99:
21:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AE:7D:C5:BD:7C:D3:49:42:94:11:8A:80:F2:43:DE:6E:51:C3:CB
X509v3 Authority Key Identifier:
keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/qa59xb1800lClBGKgPJD3m5Rw8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:3f:91:c0:5b:45:e3:05:e5:2b:d9:42:ff:ff:8a:6f:ef:a4:
9d:47:c4:e3:68:1a:dd:90:5b:7f:dc:f6:ba:65:98:f3:85:e4:
b9:b5:a6:72:d8:1a:fb:be:29:56:42:5f:e9:3f:5c:95:28:f3:
a1:11:8f:fa:ea:66:79:19:4b:5f:60:a0:36:44:19:38:37:8e:
92:32:a8:28:0b:a8:f6:96:a6:94:67:7d:02:ef:43:4d:91:48:
e0:96:f9:d4:75:79:b6:88:dc:40:0c:19:37:f7:94:8b:61:1a:
c9:03:04:cd:a6:9e:63:19:55:b0:d1:2b:b3:28:43:d2:3f:20:
a3:99:37:06:d6:ee:b2:4c:65:5a:55:bb:02:6e:74:48:bf:b1:
0b:67:97:43:2b:91:0e:03:57:a7:28:38:63:d5:1f:51:0d:f8:
d6:a8:8d:30:16:b2:fb:5f:d9:1d:9d:23:15:88:6b:82:fa:1e:
db:86:55:01:79:47:38:d4:b8:23:1c:4c:04:4c:42:25:80:1a:
58:55:74:5d:23:dc:da:49:ac:c5:44:4b:81:b8:1e:9c:40:e2:
9d:a9:86:54:5f:b9:74:7b:9e:78:5e:0f:cf:b8:99:02:34:0e:
22:4b:3e:45:67:e9:5c:01:db:3a:5b:89:82:6f:bf:6a:27:3e:
e9:d8:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:30:09 2025 by rpki-client