Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qBVT8mnR-1ssUNSAADP5EDcEECM.roa
File: qBVT8mnR-1ssUNSAADP5EDcEECM.roa (raw, json)
Hash identifier: PopFY0R1/mudqqlufktoUxW9EP8ulWmMksciuPwpWH4=
Subject key identifier: A8:15:53:F2:69:D1:FB:5B:2C:50:D4:80:00:33:F9:10:37:04:10:23
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746B0A2F7B9519C43D770990243FCCD
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qBVT8mnR-1ssUNSAADP5EDcEECM.roa
Signing time: Thu 02 Jan 2025 13:48:51 +0000
ROA not before: Thu 02 Jan 2025 13:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207617
IP address blocks: 78.135.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:b0:a2:f7:b9:51:9c:43:d7:70:99:02:43:fc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a81553f269d1fb5b2c50d4800033f91037041023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:73:91:f2:d1:0b:53:0a:60:25:ee:96:88:
db:51:c0:db:bd:4a:e0:a2:9e:8c:b0:aa:43:36:b3:
1a:6f:84:ad:9a:9c:af:e7:41:a2:1d:c5:8b:ce:32:
8a:2d:51:1f:cf:b7:48:22:47:aa:e8:25:3f:e5:65:
e4:1e:dd:26:cf:0a:4c:cc:e6:2e:a9:9d:9a:ef:51:
a9:54:37:8e:bf:a1:f9:2a:66:bc:e5:e2:70:2e:6c:
1b:5e:5e:a7:9c:9c:42:56:65:a1:ed:05:6e:39:ff:
38:63:10:30:e0:40:36:76:cd:e1:57:24:c7:36:92:
b6:30:e2:d5:b1:5e:70:3f:98:81:b9:b9:23:d4:71:
28:58:5c:ba:22:76:8c:ed:ed:0c:60:d9:71:db:3f:
6d:d0:a6:50:6f:4f:05:2b:1c:31:69:68:b6:b1:6b:
35:0b:7f:72:b6:15:94:dc:15:56:06:91:fe:e0:d8:
e3:4e:a2:75:b2:27:77:1c:e7:1b:73:5f:31:ac:b6:
d5:fd:1a:ad:6f:9a:13:ea:3e:23:bc:08:5d:2c:ea:
14:35:6d:2e:e0:04:2d:e3:e6:fb:b6:c2:3a:4f:92:
fb:37:91:64:6b:d9:34:12:7d:56:3c:7d:65:1c:62:
10:64:33:2d:31:c2:f3:0f:6b:95:ef:9c:8f:0a:dc:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:15:53:F2:69:D1:FB:5B:2C:50:D4:80:00:33:F9:10:37:04:10:23
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qBVT8mnR-1ssUNSAADP5EDcEECM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.71.0/24
Signature Algorithm: sha256WithRSAEncryption
65:7a:ba:5f:a7:2e:0e:51:3c:3e:7e:f2:e1:3f:7a:93:be:7e:
9b:d5:70:fa:4b:a0:b1:64:01:f9:48:5e:cb:97:de:1a:54:4c:
c1:01:65:9b:1e:b3:44:7a:db:00:45:ed:9d:ab:92:09:4e:c7:
8b:11:29:74:86:f7:1a:5d:bd:02:ea:8c:9c:e0:1a:e6:37:d7:
b7:7f:e5:d4:70:bb:94:a7:d2:2f:46:48:36:52:42:7a:1d:43:
84:b5:0c:96:30:fa:89:0b:d8:db:b6:62:d8:94:cb:2a:f4:66:
5b:a8:79:f7:6e:d9:74:0c:ad:0a:b3:41:38:39:fd:fa:02:08:
d2:81:a6:75:c2:e0:5f:70:84:89:ea:1d:25:a0:8d:6b:85:cb:
59:a7:3f:30:57:3d:45:4f:bd:52:37:45:8b:c2:44:a9:09:8f:
e5:86:8b:cb:0b:27:29:27:48:4f:c5:40:70:80:8a:38:1e:c6:
77:80:2a:b5:74:13:97:1c:10:57:93:c0:09:13:ff:13:9a:2e:
5e:29:ae:ee:5d:68:da:ef:13:9f:2b:fc:bd:1f:de:ae:53:2e:
e2:f2:b0:05:0c:d6:2e:e9:17:05:66:7d:de:0b:89:be:10:f6:
04:d0:93:05:bb:08:a5:27:f6:b5:da:6a:b9:2f:ca:94:55:53:
89:dd:ec:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:28:26 2025 by rpki-client