Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Qy-saNY8_sMM2Rt7ltQaOCM03mI.roa
File: Qy-saNY8_sMM2Rt7ltQaOCM03mI.roa (raw, json)
Hash identifier: DmhtR0W/L8xjpyQ+jiNUqtRwA+94a2kvp+LpXXuTce4=
Subject key identifier: 43:2F:AC:68:D6:3C:FE:C3:0C:D9:1B:7B:96:D4:1A:38:23:34:DE:62
Certificate issuer: /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial: 019423D7C49A698D63E3F7CE10EED592BF32
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Qy-saNY8_sMM2Rt7ltQaOCM03mI.roa
Signing time: Wed 01 Jan 2025 21:48:50 +0000
ROA not before: Wed 01 Jan 2025 21:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398642
IP address blocks: 144.57.48.0/21 maxlen: 21
144.57.48.0/24 maxlen: 24
144.57.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c4:9a:69:8d:63:e3:f7:ce:10:ee:d5:92:bf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Validity
Not Before: Jan 1 21:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=432fac68d63cfec30cd91b7b96d41a382334de62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:bc:72:32:12:fd:b4:29:92:58:68:1b:a1:
c8:9d:59:e0:0d:de:ba:d3:4b:2e:6c:72:70:3c:3b:
88:bc:cf:4e:6d:10:cf:f0:ed:41:9c:ef:86:2e:33:
82:5b:a7:b5:b7:36:4b:6f:18:73:19:3c:5a:5b:7d:
ec:36:bd:58:40:20:35:f6:8b:ff:19:3d:ea:f7:91:
e4:2f:12:35:9d:fa:41:f2:f2:a4:a5:74:53:9a:90:
15:f4:f4:05:fc:17:68:fb:ed:dc:c2:15:06:90:18:
ef:f2:c6:ee:51:cb:b4:6a:2e:e3:0f:ce:c2:03:9d:
20:64:25:b2:59:b0:1f:2b:77:c3:70:82:79:38:98:
b5:af:03:0e:98:b7:d2:da:5c:0e:dc:a1:80:98:71:
e6:21:0a:80:86:8d:ce:f6:44:0f:57:aa:1f:43:7d:
a6:69:8b:84:f5:9a:79:85:fa:e2:fc:80:3e:96:20:
38:a2:a8:cc:96:19:4e:d4:ae:d7:fb:5a:e1:a6:27:
f6:7b:b3:f1:9e:04:27:96:3b:33:d8:0a:40:6f:39:
3d:ec:13:9b:9e:e4:82:1c:fc:fe:d3:64:47:e0:59:
69:28:f4:19:0b:2b:00:f7:8d:a7:e8:d4:28:84:09:
71:12:34:5e:55:66:68:9e:14:6c:55:6a:f8:1c:55:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2F:AC:68:D6:3C:FE:C3:0C:D9:1B:7B:96:D4:1A:38:23:34:DE:62
X509v3 Authority Key Identifier:
keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Qy-saNY8_sMM2Rt7ltQaOCM03mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.57.48.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:eb:ce:6b:e2:1b:06:0d:f8:f8:b9:c5:ea:0c:6a:ac:c1:3a:
5d:83:70:27:d7:48:b7:de:e9:88:6a:20:fa:9d:7b:c2:0d:6b:
b9:0f:fa:00:20:8f:89:7c:95:13:55:ec:6d:08:f5:49:c2:f8:
2a:fe:75:99:df:b9:d4:a5:a2:89:c8:05:88:ca:48:15:b1:99:
4c:06:5f:b2:c4:4a:a6:4d:f0:55:9b:4e:ed:6d:4d:b6:64:9b:
35:90:c3:4a:75:f3:c8:1f:60:36:0b:89:dd:77:b9:a9:b6:f2:
f0:d2:4c:35:4e:38:6d:5c:1d:6c:16:d2:90:76:e6:73:a8:fe:
a4:92:8b:07:e6:e9:bf:65:d6:5b:0a:da:51:92:06:54:07:ea:
c2:12:b2:35:48:70:5c:44:78:2b:d6:c4:1e:bb:1d:f2:82:a4:
5d:1d:c8:28:fe:a5:25:20:b4:d5:2e:ba:ed:23:52:fc:63:80:
f7:60:0d:3f:76:2e:89:15:fe:8d:6b:4f:58:d7:f0:cc:ee:83:
bb:a7:50:80:42:93:49:11:8c:ef:3f:bf:5f:42:9e:d2:8c:70:
e8:70:9b:3b:f6:52:c2:b4:1b:74:5d:5f:a0:e8:45:f0:c6:b5:
c6:31:d2:91:ac:79:e0:9d:94:33:f2:90:74:35:c9:69:e8:ae:
94:f4:e3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:39:40 2025 by rpki-client