Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Qd-7MuUT4GYh0J-MfEHgFFh8b4Q.roa
File: Qd-7MuUT4GYh0J-MfEHgFFh8b4Q.roa (raw, json)
Hash identifier: c/5l1GiDiCB7mLH+5TWxHZaDa+CFb25O/VddyUT+Q4A=
Subject key identifier: 41:DF:BB:32:E5:13:E0:66:21:D0:9F:8C:7C:41:E0:14:58:7C:6F:84
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01942823990AB1CBCAB384D6AAE521E31BC6
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Qd-7MuUT4GYh0J-MfEHgFFh8b4Q.roa
Signing time: Thu 02 Jan 2025 17:50:09 +0000
ROA not before: Thu 02 Jan 2025 17:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 87.248.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:99:0a:b1:cb:ca:b3:84:d6:aa:e5:21:e3:1b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 2 17:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41dfbb32e513e06621d09f8c7c41e014587c6f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:c0:a5:bf:3b:d7:13:5c:e8:c6:f9:c6:63:
de:5b:bc:0c:07:81:53:42:c4:39:5e:f3:60:e5:7a:
c7:3a:88:93:f6:a7:71:19:a6:c4:c3:d9:fa:76:dd:
4c:0e:e6:30:53:31:a8:16:c1:ef:1e:4f:6f:11:d9:
00:d7:3d:fb:23:ac:8e:44:f3:0f:16:1a:91:fe:88:
26:27:cb:29:3d:c4:55:9f:3f:c2:7c:b2:03:33:33:
5b:7e:5b:7e:2a:ac:25:a3:f5:24:c0:40:6b:e3:a8:
24:f4:d2:83:57:8a:ab:a2:78:12:30:a6:ac:e7:04:
87:ca:d3:79:c5:85:b3:a1:6a:f6:71:d8:91:cf:5f:
6e:62:34:dc:f2:78:64:b0:74:8c:0b:38:5d:81:cc:
46:67:01:6a:0d:1d:a7:ff:0d:9f:2b:75:ba:96:0e:
d8:c1:47:5a:ee:e1:7e:e6:a1:b0:ab:a3:c5:36:2c:
dc:50:a4:b9:11:85:4a:c9:34:6e:49:43:b4:85:72:
63:b0:18:15:e3:cb:d0:0d:e1:a3:90:1d:6c:1c:84:
92:a9:31:cc:42:07:e1:27:dd:73:b1:03:69:12:4e:
a2:21:8f:0c:36:26:86:70:e2:3e:bb:4b:75:95:f2:
31:d9:bc:d7:c1:bb:8d:53:54:3f:d0:90:13:60:9a:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DF:BB:32:E5:13:E0:66:21:D0:9F:8C:7C:41:E0:14:58:7C:6F:84
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Qd-7MuUT4GYh0J-MfEHgFFh8b4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:6a:45:d7:59:a9:3e:9f:fc:3b:6e:18:8a:14:4b:08:1b:c1:
d2:70:66:0b:41:4a:b4:1a:88:92:e1:d5:da:db:b1:e9:07:b1:
31:21:0b:2b:f1:55:1f:65:4f:08:b3:d6:76:41:ca:5a:b6:3c:
8d:d7:9c:e2:76:7d:96:97:de:70:e5:98:2d:ed:d5:de:d3:de:
94:bb:ed:e6:85:44:70:43:f3:86:94:f5:bf:b9:38:cb:c0:3e:
20:a3:19:93:9a:88:d5:b8:62:b9:61:3b:df:cf:86:bc:13:69:
d8:b4:b6:0d:6b:26:24:8d:b5:fa:7a:71:b4:a8:e2:90:ab:aa:
5b:4e:20:d4:f2:f6:b0:04:b5:9e:ff:89:9b:b1:3a:60:3f:93:
66:e2:37:7f:e7:4f:01:7c:13:92:41:1c:04:26:88:50:70:56:
8f:51:4c:ff:db:61:82:98:73:cd:02:99:00:56:07:68:4f:64:
10:a0:c1:6b:af:60:2f:08:1a:83:43:d0:81:fc:9c:95:e3:73:
ec:b6:5e:6a:33:c4:72:cf:4b:4c:2d:92:4d:73:8b:ea:d3:c8:
1c:a2:b1:a3:ff:68:6e:e8:04:6e:a0:01:b2:af:38:52:48:6a:
c1:94:7c:5c:4a:b5:66:84:c8:fa:aa:03:1c:fc:59:0c:22:8d:
ea:26:bd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:41:41 2025 by rpki-client