Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/QImgIZuTwnHz4p6WX58eUANoWgI.roa
File: QImgIZuTwnHz4p6WX58eUANoWgI.roa (raw, json)
Hash identifier: 55/FqeMl8dIDIdqqMZITlgQVVN1ShC0rREfu3bBTeKU=
Subject key identifier: 40:89:A0:21:9B:93:C2:71:F3:E2:9E:96:5F:9F:1E:50:03:68:5A:02
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0195A608CE4AC28DDBE67DED1C58F8405A3D
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/QImgIZuTwnHz4p6WX58eUANoWgI.roa
Signing time: Mon 17 Mar 2025 21:35:49 +0000
ROA not before: Mon 17 Mar 2025 21:35:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.192.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a6:08:ce:4a:c2:8d:db:e6:7d:ed:1c:58:f8:40:5a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Mar 17 21:35:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4089a0219b93c271f3e29e965f9f1e5003685a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:a6:73:22:b6:85:f4:6b:58:42:82:78:74:
19:e4:14:93:f5:1c:fb:04:7a:03:d5:f2:29:40:0a:
47:91:94:46:06:39:50:13:fe:23:35:06:c5:4f:a1:
53:7b:1b:18:73:41:5f:66:81:45:b6:17:c6:2c:a4:
d7:93:e9:74:31:7c:46:2e:91:02:87:55:c4:80:99:
6f:84:46:03:18:30:60:bb:83:95:f9:8f:f7:fb:34:
8f:0c:c4:a3:28:85:64:50:c4:d9:87:05:26:4b:14:
79:09:7c:28:d4:38:10:ab:19:8c:6c:b8:a8:bb:3a:
f8:1f:38:37:23:92:90:47:1f:ed:60:c6:02:86:64:
e2:c8:9d:b4:04:0f:c6:9f:9c:b5:0d:e4:f2:b2:a7:
2d:97:ba:bc:97:50:50:57:85:7a:07:0f:fe:86:d4:
5d:62:54:fe:43:47:df:46:82:d9:f9:38:e6:35:cc:
60:75:71:be:6c:e8:a6:3e:cc:6c:3b:3f:e5:8e:34:
af:b6:b6:07:62:db:18:93:88:54:54:71:cd:ad:25:
04:ec:dc:81:e1:bc:2c:d0:e6:02:3a:94:f0:d0:d8:
53:73:1c:fa:f6:56:e0:bc:82:44:37:3d:81:cf:60:
8d:3b:4c:4e:ed:53:a1:d4:51:fc:f9:3c:22:7e:92:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:89:A0:21:9B:93:C2:71:F3:E2:9E:96:5F:9F:1E:50:03:68:5A:02
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/QImgIZuTwnHz4p6WX58eUANoWgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.246.0/24
Signature Algorithm: sha256WithRSAEncryption
17:5c:2b:8a:23:da:1e:11:1d:b1:e8:7f:d8:eb:17:7c:d6:72:
62:da:4e:51:12:18:2c:d3:39:a0:ae:48:fc:d0:69:7b:3d:4f:
7d:38:f4:60:ea:03:10:53:08:41:6a:1d:f2:ed:49:21:4c:82:
5f:68:4f:36:63:4b:29:68:c9:f4:1c:78:7d:72:1d:a9:8a:6e:
b6:a5:0f:e7:e7:90:a1:11:62:aa:6e:ec:6d:a1:1d:b1:82:ca:
7c:68:6b:f2:d6:3c:a9:c5:a4:3d:92:ba:b0:92:eb:30:3c:0e:
0e:44:98:67:1c:70:f5:b4:57:e4:8b:ad:05:ab:a1:b4:14:74:
be:3b:ae:94:bc:bf:e8:63:8c:71:c1:b9:0e:1d:50:6f:57:6b:
07:93:32:0f:14:93:78:2a:54:64:93:01:79:82:31:49:16:95:
6c:72:94:ea:a6:f1:40:5d:bd:fb:1a:07:4d:74:f8:9b:b8:a4:
ff:31:f8:b5:4d:f7:53:e7:d5:d4:7b:d8:fe:bd:6d:f9:19:3e:
d8:7c:9a:c0:69:51:d6:9d:dd:29:af:70:d2:9f:06:94:77:4f:
64:52:05:32:af:e4:eb:1f:71:3a:70:ef:f7:18:7a:33:f2:e9:
d2:54:93:e7:c7:c4:ec:d6:81:f1:87:d8:9a:71:70:10:0e:89:
9a:f1:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:19 2025 by rpki-client