Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/qmxsyUbW81VdsinEooDwPTqDgYg.roa
File: qmxsyUbW81VdsinEooDwPTqDgYg.roa (raw, json)
Hash identifier: 5mMYBqM+9mhhKL1z8ft7+FIG5whvIdm78M3vwoV475A=
Subject key identifier: AA:6C:6C:C9:46:D6:F3:55:5D:B2:29:C4:A2:80:F0:3D:3A:83:81:88
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 019423D6D64C8771822C724A80DAD1F29CF3
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/qmxsyUbW81VdsinEooDwPTqDgYg.roa
Signing time: Wed 01 Jan 2025 21:47:49 +0000
ROA not before: Wed 01 Jan 2025 21:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212745
IP address blocks: 45.81.228.0/22 maxlen: 22
2a0e:6080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d6:4c:87:71:82:2c:72:4a:80:da:d1:f2:9c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Jan 1 21:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa6c6cc946d6f3555db229c4a280f03d3a838188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:ad:2d:f1:ad:6b:00:74:81:ca:ae:2f:ce:
35:e0:ce:1f:07:56:3e:86:69:e9:36:3b:39:62:f3:
de:ec:77:80:10:31:fd:23:80:41:ae:1e:8f:6d:b0:
32:20:f9:fd:47:2f:06:46:5e:f9:ad:fc:d8:72:99:
04:d6:99:52:78:18:71:72:d6:98:1c:1f:a5:f3:28:
01:47:df:57:20:7d:00:5e:63:2c:95:a3:1f:e3:2f:
9a:75:92:77:e3:9a:e8:11:13:84:34:3f:60:13:7e:
d9:09:d4:da:95:fe:65:56:24:6c:03:ac:a4:1f:44:
e3:71:11:4e:b0:d2:dc:91:4c:ee:cd:09:e8:0f:8e:
04:4c:6f:8e:22:c6:8b:19:64:c4:b8:6b:76:59:db:
2f:fa:1a:97:da:60:a5:59:70:0e:c4:88:40:46:14:
dd:f5:aa:37:ff:04:a6:4e:b6:e4:95:53:d0:be:c1:
0f:6d:29:5f:6b:b8:8d:1b:f6:3f:20:73:03:f0:86:
78:b8:e8:a9:e5:d5:13:1a:6a:79:7e:20:5c:69:9b:
2e:96:30:d7:50:b4:3a:c5:fe:af:06:a0:21:a5:8a:
b3:1e:e6:cd:9a:30:2b:63:5f:65:a6:89:c7:8a:cb:
7c:07:91:52:6e:e2:14:a9:8e:ee:d8:65:ab:52:2f:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6C:6C:C9:46:D6:F3:55:5D:B2:29:C4:A2:80:F0:3D:3A:83:81:88
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/qmxsyUbW81VdsinEooDwPTqDgYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.228.0/22
IPv6:
2a0e:6080::/48
Signature Algorithm: sha256WithRSAEncryption
70:87:64:88:c6:ac:6e:94:d8:f2:27:2c:fc:a4:8a:62:ee:42:
af:17:4e:1e:50:47:1d:6d:49:d2:38:c4:8a:29:7b:eb:fb:ae:
fc:e2:82:61:30:96:66:1d:c8:e2:34:2a:b6:ec:05:d6:56:40:
4f:e5:ce:41:d3:94:78:db:b7:ba:fc:04:82:e9:f5:df:01:85:
29:5d:00:1b:b8:00:cd:b6:4c:39:d1:fb:13:e4:a6:18:4e:b0:
d9:c5:4e:d9:17:af:cb:8a:29:85:14:4e:50:be:34:f5:01:4d:
ee:7d:b5:66:24:83:c5:85:02:93:d1:63:8a:d8:46:8e:3c:f2:
fe:75:2c:fd:bc:e4:8e:71:4c:42:ab:79:c7:4b:05:95:08:63:
69:cc:80:c9:ad:09:b3:f5:d0:01:ee:c8:f3:54:1e:e6:7e:9e:
ae:1e:bc:21:5e:58:52:cb:2a:40:75:44:d6:a7:1c:1a:24:05:
3d:84:89:0c:2e:b6:ac:70:f8:94:ef:41:7c:e7:c9:cf:fc:77:
26:02:97:8b:41:f6:0b:32:a6:eb:c2:c8:47:af:4d:83:78:6c:
41:00:09:76:7e:c7:db:df:70:57:f7:9a:74:5d:10:42:57:7c:
d0:40:70:fd:c2:b3:58:cc:96:75:4d:ef:17:8e:6c:0a:62:b9:
f8:06:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:20 2025 by rpki-client