Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/qvcbhcNrSY2D5QcMTWEEMMvXd6k.roa
File: qvcbhcNrSY2D5QcMTWEEMMvXd6k.roa (raw, json)
Hash identifier: 30+xAfYPYLBKDi6zHBJeTU0jNWzGOLqKZMXQhS8Jqzo=
Subject key identifier: AA:F7:1B:85:C3:6B:49:8D:83:E5:07:0C:4D:61:04:30:CB:D7:77:A9
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422203C774B62351AD8EEC92679D845AF
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/qvcbhcNrSY2D5QcMTWEEMMvXd6k.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211635
IP address blocks: 2a0e:8f02:2120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3c:77:4b:62:35:1a:d8:ee:c9:26:79:d8:45:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaf71b85c36b498d83e5070c4d610430cbd777a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:02:71:b5:84:25:44:0b:a2:69:bb:4f:e2:
2e:e0:69:c7:db:aa:8e:74:73:50:39:60:4a:18:41:
40:8c:a7:80:29:f1:96:87:fa:a3:8b:41:bd:be:a1:
68:48:c9:bb:ab:4c:ba:97:60:91:c2:0d:85:53:91:
55:ed:a5:06:32:a6:6d:51:d1:5c:da:c0:91:d9:98:
25:46:bf:b2:9b:90:b8:9b:76:3e:2f:86:aa:56:9d:
a7:9a:47:20:8b:14:6b:e4:79:5a:85:d0:a6:ee:27:
24:62:e5:d0:e6:b5:72:6f:00:b1:2a:36:21:fd:ad:
04:86:6c:c9:94:b4:8e:53:29:2d:b6:eb:c3:fd:8f:
59:f8:81:35:1e:89:05:01:01:c4:bd:04:b3:75:ff:
a1:43:76:66:41:ae:1f:98:2f:0d:8f:8d:77:83:17:
40:1c:c8:1f:2e:b4:fa:84:94:58:f4:0e:39:14:05:
dc:44:91:14:39:bc:4e:1c:cd:cb:44:2e:3e:87:4f:
bf:c8:e3:9c:45:bf:29:5a:a3:7e:30:a3:f5:cd:ca:
56:07:8a:45:11:34:9f:0a:34:66:71:8c:aa:43:22:
eb:9e:66:2f:25:09:8a:a1:01:dd:c7:ff:32:f2:07:
7b:2e:7a:43:05:dd:3c:cb:d1:8f:46:d7:c0:37:9a:
38:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F7:1B:85:C3:6B:49:8D:83:E5:07:0C:4D:61:04:30:CB:D7:77:A9
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/qvcbhcNrSY2D5QcMTWEEMMvXd6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2120::/44
Signature Algorithm: sha256WithRSAEncryption
27:b8:e8:66:53:9d:65:f0:58:bd:c8:6a:63:61:65:88:7f:c5:
36:e1:76:16:12:5d:ee:54:d1:7b:08:c3:99:3b:c1:2b:b0:ff:
4a:d7:cb:6c:c5:29:59:f4:9b:6d:73:38:e6:7f:30:2c:6e:f9:
ef:9c:8b:54:f6:2a:41:b6:58:bf:28:93:62:20:a9:32:89:c7:
7f:ba:9b:1f:ca:83:fe:0b:c1:e6:01:b5:80:9d:b3:8e:52:57:
64:67:95:00:76:fb:a7:b0:bb:8b:49:fc:58:c3:50:56:99:46:
3c:82:1a:a0:8a:b4:c1:95:5e:6e:a0:47:6d:21:c4:34:34:46:
38:f6:03:51:47:bb:cc:ee:59:7f:af:6c:c6:d6:a4:31:89:0a:
b2:90:35:59:f9:57:17:21:61:a6:05:9a:a7:cb:ec:79:eb:17:
10:23:1f:b6:a2:63:d2:72:ae:d8:5a:96:13:79:15:5a:a7:98:
6e:06:1d:9a:ed:62:ea:58:e8:b1:82:fe:6f:38:22:08:7c:f0:
07:55:b0:40:55:1e:fe:79:fd:9f:a4:e6:8e:5c:8f:3a:cc:9a:
61:a9:02:13:cb:14:5e:85:87:b5:75:d6:19:55:03:1a:e1:37:
c4:b1:41:c3:87:80:91:94:f3:d8:90:3a:13:ae:14:ff:c1:49:
e0:d0:ca:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:33 2025 by rpki-client