Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/QrB38IR31JfmSrfp5ttgTReGTWo.roa
File: QrB38IR31JfmSrfp5ttgTReGTWo.roa (raw, json)
Hash identifier: tObzEsfYNmXi9X+/o+rGLlyYSek2LoSQ9N7PVMYEfqA=
Subject key identifier: 42:B0:77:F0:84:77:D4:97:E6:4A:B7:E9:E6:DB:60:4D:17:86:4D:6A
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 019423697BFA9DDF1A1E4F4FB97D14A70571
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/QrB38IR31JfmSrfp5ttgTReGTWo.roa
Signing time: Wed 01 Jan 2025 19:48:23 +0000
ROA not before: Wed 01 Jan 2025 19:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 195.250.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:7b:fa:9d:df:1a:1e:4f:4f:b9:7d:14:a7:05:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Jan 1 19:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42b077f08477d497e64ab7e9e6db604d17864d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:62:a6:96:a9:9d:25:5f:6d:67:16:d6:a6:
65:0f:57:0b:41:3b:dd:4f:d3:34:5b:23:b2:6e:48:
71:c1:d0:b2:f0:d8:b3:3e:7c:f0:ca:bb:e8:8a:c6:
c9:9d:b5:ee:3c:6c:3b:75:97:2d:7f:7d:85:c1:0e:
dd:e8:12:79:8b:1e:5d:e5:4a:04:2f:81:fa:69:3f:
4a:7c:06:1d:5f:55:bd:62:e1:e2:92:76:7f:3b:2b:
67:e1:58:1a:ec:52:4c:c9:7e:9a:18:1b:80:1d:b8:
c2:ed:fe:21:77:de:c7:71:08:3b:d2:9c:28:75:f2:
f6:21:ae:fe:cb:36:f6:44:af:5b:1a:57:13:5e:98:
35:3d:0e:fc:23:65:a1:70:5e:30:20:09:1f:94:cc:
83:82:d0:b2:d9:47:8e:2e:c5:61:dc:21:53:74:d0:
4e:7b:08:2f:73:c7:eb:e4:bd:b4:19:72:5a:d7:0c:
b7:51:24:c7:56:2f:41:28:da:82:97:f5:fa:97:b5:
2c:71:ad:1b:2c:c6:0f:46:6e:8d:82:33:8c:55:bf:
24:bf:80:61:fa:00:a3:70:de:56:fc:80:6e:71:3d:
96:3d:50:6c:2c:64:1e:2a:ce:04:6c:30:ac:71:1e:
e1:6b:d1:57:ad:be:a3:d2:c8:5e:08:c7:94:41:f3:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B0:77:F0:84:77:D4:97:E6:4A:B7:E9:E6:DB:60:4D:17:86:4D:6A
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/QrB38IR31JfmSrfp5ttgTReGTWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.46.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:0c:4b:06:e8:b1:83:ef:09:e7:7a:c4:ba:b3:67:b5:d6:d6:
76:af:e5:bc:cf:bd:99:1a:df:de:99:1e:dc:f1:68:eb:ee:9c:
fa:4c:de:62:e8:ee:ab:33:77:af:51:45:8d:a6:38:2a:53:6d:
09:df:7f:3c:84:f3:00:cb:0a:83:a1:44:41:eb:e5:23:89:4e:
7f:a6:33:91:ae:53:8a:18:1a:06:d1:1b:bc:01:0c:8d:d6:60:
cf:52:0f:44:bc:92:5f:e3:10:1f:a6:42:63:ad:28:f9:b7:6e:
da:d4:09:ee:b4:76:f3:d0:2e:c0:90:9a:7c:a4:73:43:7e:a9:
5f:5d:1f:11:ba:30:08:31:67:f1:34:c4:7b:79:3d:b7:3d:bd:
d3:c6:51:59:62:cf:b2:02:85:23:a9:01:7e:d2:f4:d1:4a:40:
f4:a4:e3:e0:86:dc:b5:73:53:5a:59:f2:02:71:41:0e:13:b4:
07:46:55:26:74:9e:0f:88:de:b9:14:63:60:2b:6d:49:a0:6a:
d8:4d:24:72:61:8b:c8:cb:ff:10:8a:d2:e1:30:4b:05:be:77:
7f:7a:35:ff:f8:d6:1a:78:7f:0e:d0:0a:fa:6a:4f:98:ca:0a:
73:56:59:74:b5:62:65:83:b0:df:dc:3c:2b:6f:a8:3b:79:95:
f9:73:78:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:37 2025 by rpki-client