Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/QNAvqEtOtUfMbDmfsPFEe603WNU.roa
File: QNAvqEtOtUfMbDmfsPFEe603WNU.roa (raw, json)
Hash identifier: 1LcNY8ab58yNfN182kfxAkp7IB4n+zASQa1ST2WM24w=
Subject key identifier: 40:D0:2F:A8:4B:4E:B5:47:CC:6C:39:9F:B0:F1:44:7B:AD:37:58:D5
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B55A2A39F9ACB9E5937138991E9350
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/QNAvqEtOtUfMbDmfsPFEe603WNU.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198474
IP address blocks: 2a10:4646:340::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5a:2a:39:f9:ac:b9:e5:93:71:38:99:1e:93:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40d02fa84b4eb547cc6c399fb0f1447bad3758d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:40:b8:17:e4:90:0e:b6:b5:36:77:a7:90:
95:f4:d5:28:c9:05:39:7a:83:5d:5c:39:f4:71:3d:
c3:b7:b2:12:f9:28:f3:a7:76:eb:20:d6:ca:d1:9e:
c2:81:a1:1d:4b:f8:09:9e:50:68:64:df:aa:1c:68:
42:59:5c:77:4d:71:b1:18:81:2c:32:15:37:49:db:
ef:ff:d2:30:76:dc:54:20:fd:ee:39:2a:88:ec:cc:
0a:db:eb:f5:18:96:7c:7a:24:9e:85:bf:41:8f:da:
69:3a:57:1a:bd:37:ee:91:b8:f5:60:fc:6c:e0:72:
44:b4:16:b3:ba:a5:25:ca:b3:ab:1d:5a:d5:9b:e4:
30:22:68:18:ae:dd:d1:e4:8d:85:04:a7:51:26:9a:
0b:13:a0:cf:d5:54:5b:3d:56:1b:7e:a3:5c:85:17:
fc:2f:f3:da:14:a1:69:95:c6:08:96:a8:c5:39:24:
53:22:28:8f:eb:0a:9a:57:16:19:91:34:f5:fb:a5:
46:42:83:9b:5a:f6:19:1b:1a:20:c1:f1:3a:88:84:
78:af:ea:cd:e6:04:ba:06:b8:e1:e0:ae:1f:27:e8:
9a:f2:fc:27:9c:78:ea:b4:ea:99:8a:6c:ec:43:e5:
54:1f:3d:03:b5:2a:84:ae:ee:de:83:f1:e3:77:79:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D0:2F:A8:4B:4E:B5:47:CC:6C:39:9F:B0:F1:44:7B:AD:37:58:D5
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/QNAvqEtOtUfMbDmfsPFEe603WNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:340::/44
Signature Algorithm: sha256WithRSAEncryption
11:33:56:3c:39:29:34:8c:36:31:be:0e:9e:65:0c:52:0a:4e:
ff:9c:61:d1:57:5f:d0:8e:18:83:07:b6:34:31:a4:44:bd:42:
58:79:61:77:c3:5c:08:67:c7:e6:e7:4c:1c:5f:6f:dd:aa:4e:
2a:4b:3a:22:42:d2:0d:7f:71:9c:8f:7c:d4:c3:3d:e7:17:56:
eb:65:89:db:db:6f:85:52:a5:05:82:ac:36:15:92:1b:08:42:
c7:b4:e4:90:b6:4f:d8:b1:c8:04:82:c5:6b:c6:4a:d6:82:5d:
8c:c2:67:3c:36:14:69:f2:64:f7:a8:7b:9e:97:35:f5:76:a3:
16:d9:be:a5:40:56:89:95:72:cf:b4:4d:f3:e4:b2:0a:8d:b0:
57:46:e2:51:7d:26:6e:35:9e:79:14:7f:48:d5:59:00:c7:87:
34:d7:c9:d4:fe:29:57:b3:d9:73:ca:bd:c3:60:ab:97:38:dd:
5b:26:17:bb:95:5c:cb:cc:37:5a:f5:7e:65:d7:3a:26:99:0b:
89:84:26:16:0d:fb:23:68:30:11:74:33:1e:43:17:47:db:28:
e4:a6:24:e6:3d:8a:79:32:9b:01:c5:c6:a3:95:79:7c:49:b0:
63:ab:e6:f2:97:da:33:29:36:5b:40:7b:31:34:1a:94:d7:61:
3f:f2:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:36:42 2025 by rpki-client