Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/QCfvCEoxrXNbaQlE55CsHK0ASLY.roa
File: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (raw, json)
Hash identifier: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=
Subject key identifier: 40:27:EF:08:4A:31:AD:73:5B:69:09:44:E7:90:AC:1C:AD:00:48:B6
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 019427B611ACEC555B30601C133286D33132
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/QCfvCEoxrXNbaQlE55CsHK0ASLY.roa
Signing time: Thu 02 Jan 2025 15:50:30 +0000
ROA not before: Thu 02 Jan 2025 15:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139833
IP address blocks: 2a0e:800:6666::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:11:ac:ec:55:5b:30:60:1c:13:32:86:d3:31:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 2 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4027ef084a31ad735b690944e790ac1cad0048b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:90:54:5a:76:88:c7:48:9d:01:fe:92:9e:
3e:fb:a2:ab:72:74:e9:91:41:8b:e0:3f:b5:2c:5d:
be:9a:95:8a:54:15:a1:8d:99:7f:a0:52:c6:18:af:
96:7b:56:1e:b1:23:ac:e9:01:91:9c:f8:47:69:17:
d9:9a:d3:be:81:fe:c9:42:66:7d:96:ad:92:19:c3:
56:4f:5b:28:d7:cb:6b:4f:33:01:55:0c:66:3d:d6:
d0:75:13:d8:f1:e4:3c:a8:01:6c:34:63:9d:40:b0:
b0:74:ee:4c:4c:77:c4:c8:dd:d3:b4:3d:9e:e1:3a:
70:37:8d:91:6a:cb:2b:92:ff:af:2d:04:fd:94:b7:
7f:bc:5e:21:a1:26:b6:71:12:d9:be:2b:1e:dd:2e:
59:2e:d7:61:c8:14:3b:76:7b:54:a0:b7:91:ed:15:
f0:79:b5:ab:28:ea:4e:83:62:98:36:74:43:d1:05:
fd:4c:2b:57:af:d6:a0:3b:52:7b:b7:19:00:88:65:
14:20:60:32:94:ab:9a:eb:7f:11:ef:97:f0:33:db:
f1:8b:30:a7:10:7f:21:54:0c:63:08:1e:54:a8:2a:
4e:14:1d:3e:d9:48:2f:8f:e3:26:8a:0d:f0:eb:bd:
ca:51:af:02:2e:5c:77:f4:be:1a:d3:33:c2:b3:d2:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:27:EF:08:4A:31:AD:73:5B:69:09:44:E7:90:AC:1C:AD:00:48:B6
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/QCfvCEoxrXNbaQlE55CsHK0ASLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:800:6666::/48
Signature Algorithm: sha256WithRSAEncryption
61:db:89:b5:df:4b:58:87:40:10:75:06:9f:63:a7:de:87:d3:
56:55:a7:a7:8d:4d:d1:24:44:8c:09:cd:55:4c:7b:0a:bd:76:
8c:c4:4f:04:ca:3d:e6:0e:f4:6e:54:04:04:82:15:00:37:c8:
6a:f2:01:2c:af:09:76:96:6b:38:22:0e:09:34:79:b7:7d:bf:
eb:c9:9e:d3:95:be:d9:04:8d:dc:b3:35:34:c7:00:8e:2c:6b:
be:c5:20:58:a5:76:a4:11:5d:57:39:f3:d9:75:52:c1:b6:90:
eb:0b:da:2e:9d:32:91:ba:82:fb:4c:e1:03:8a:65:5d:99:3c:
b2:f5:5e:1d:8f:30:8d:a0:dd:8c:a1:9d:fc:ac:7d:c9:6e:91:
d4:49:7c:12:6c:04:6a:2c:ff:4c:46:01:13:f4:fc:57:cb:7b:
f9:73:e7:e5:f2:23:3e:ca:8a:d3:a5:92:a0:de:6f:d9:4c:de:
74:65:7c:bd:a8:46:9a:b6:7e:ba:9c:2d:d3:a5:09:aa:b0:b3:
03:a9:ce:23:9e:c7:95:2e:66:d4:70:0c:5d:45:18:78:65:6c:
91:02:cf:ed:4c:2d:9c:2e:fe:1e:53:6b:50:d6:97:fe:37:54:
ad:1b:d3:eb:f3:cc:c0:fe:d2:f9:82:51:ad:c5:fc:0d:9e:c9:
c1:04:60:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:00:17 2025 by rpki-client