Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/QpNcCoA4Z5ottRskUsrVfwUI5R4.roa
File: QpNcCoA4Z5ottRskUsrVfwUI5R4.roa (raw, json)
Hash identifier: 3Ookyfb7wHO7/58EMfYEHBR9Z8xGK4lUfT1UByxh2SI=
Subject key identifier: 42:93:5C:0A:80:38:67:9A:2D:B5:1B:24:52:CA:D5:7F:05:08:E5:1E
Certificate issuer: /CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Certificate serial: 01942143DB85F4A4693A7001A64DE915EE70
Authority key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/QpNcCoA4Z5ottRskUsrVfwUI5R4.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50398
IP address blocks: 91.219.44.0/22 maxlen: 24
91.245.0.0/22 maxlen: 24
91.245.4.0/24 maxlen: 24
91.245.6.0/23 maxlen: 24
91.245.6.0/24 maxlen: 24
91.245.7.0/24 maxlen: 24
2001:67c:1260::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:db:85:f4:a4:69:3a:70:01:a6:4d:e9:15:ee:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42935c0a8038679a2db51b2452cad57f0508e51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:87:8a:e8:db:5a:8c:7d:1e:97:c1:93:99:
0e:1e:ff:96:c4:65:e1:d7:d2:f5:3d:23:7d:b6:7f:
b2:a2:54:7b:77:f4:83:1a:78:e8:3f:96:2b:3a:01:
ce:4e:3f:81:cc:2d:76:bd:e8:97:a5:32:a9:c4:9f:
39:2c:32:16:9b:b4:2c:b9:d3:9d:48:5d:8f:42:87:
a2:6c:7e:e3:67:07:b0:c4:f0:ef:01:43:80:76:fa:
fe:f6:68:92:0f:21:83:62:4b:e1:1e:d3:a7:08:5b:
5f:93:e7:a9:fe:2c:17:60:28:fd:f8:2a:64:c1:0c:
bf:54:f8:9c:e5:ed:c6:c1:09:50:9b:66:2c:eb:96:
4c:29:18:bb:fa:6f:19:89:d8:d4:84:81:c5:37:1d:
8b:a8:0a:61:3c:cb:f0:cf:17:16:0f:e1:75:ec:88:
79:ea:b4:1f:95:4b:c8:f1:a0:f6:90:bc:d5:e9:89:
b6:00:24:50:bd:fc:be:d2:22:8c:c8:7f:4a:96:24:
01:40:b3:4d:8b:d1:aa:0b:37:70:31:95:78:ff:85:
43:07:43:0f:9a:81:da:10:3f:08:5d:50:bf:a1:c2:
ab:00:c4:d4:74:b3:72:6a:49:83:ea:a4:d4:70:7e:
a9:30:97:96:9d:63:bb:d8:8e:34:db:2b:0a:bd:ca:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:93:5C:0A:80:38:67:9A:2D:B5:1B:24:52:CA:D5:7F:05:08:E5:1E
X509v3 Authority Key Identifier:
keyid:20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/QpNcCoA4Z5ottRskUsrVfwUI5R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.44.0/22
91.245.0.0-91.245.4.255
91.245.6.0/23
IPv6:
2001:67c:1260::/48
Signature Algorithm: sha256WithRSAEncryption
ac:f3:74:2f:37:bd:b6:25:b8:c4:c1:91:96:0c:6f:7f:fb:e7:
dd:2b:fd:ee:7d:22:3a:6e:09:27:c8:11:4c:0a:30:03:90:70:
cd:b1:d8:03:72:4c:ca:b2:37:ae:8e:a1:d9:1d:e5:85:1c:59:
93:7b:4d:8a:ba:c0:d6:bf:ba:d7:34:1e:03:c5:81:3d:55:45:
03:36:db:f8:28:ea:9c:31:6f:1d:3a:5c:62:af:e4:88:a7:8f:
e1:e8:31:16:9c:ea:26:ba:23:15:84:e6:2e:f8:3d:69:6f:bd:
34:eb:9d:60:0e:4a:2e:ed:c5:29:02:ce:f6:2a:10:70:49:58:
ae:56:06:a0:ac:89:cf:62:32:12:90:ad:6f:e6:79:09:8f:b9:
af:6d:c5:06:ec:99:94:3d:3e:4c:46:b5:63:bd:06:06:fa:b9:
3d:cb:8e:f9:72:82:50:35:2d:ed:7e:50:f3:ec:98:b4:54:53:
5d:2f:ab:13:c2:7f:a8:aa:f2:87:17:3d:37:71:9c:ef:d4:dc:
17:ae:d6:a8:9e:1c:ad:7a:e0:6d:e1:8a:17:25:d5:56:a3:50:
1f:12:0f:b5:0c:01:b3:47:f6:09:f1:48:a6:42:90:de:6d:51:
16:64:09:ae:95:e0:6e:00:91:03:45:9f:6f:34:90:bd:bf:67:
b9:2f:47:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:45:14 2025 by rpki-client