Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/QSFoTY-rZFAhWSMN9-_p_o-BDiU.roa
File: QSFoTY-rZFAhWSMN9-_p_o-BDiU.roa (raw, json)
Hash identifier: 3LADFmQvbHE7KoUBEivUP2jD8vxc2/ZNRnufgFEmEsE=
Subject key identifier: 41:21:68:4D:8F:AB:64:50:21:59:23:0D:F7:EF:E9:FE:8F:81:0E:25
Certificate issuer: /CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Certificate serial: 019423D751C6E27262AE5C6531A326C9746C
Authority key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/QSFoTY-rZFAhWSMN9-_p_o-BDiU.roa
Signing time: Wed 01 Jan 2025 21:48:21 +0000
ROA not before: Wed 01 Jan 2025 21:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43007
IP address blocks: 91.194.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:51:c6:e2:72:62:ae:5c:65:31:a3:26:c9:74:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Validity
Not Before: Jan 1 21:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4121684d8fab64502159230df7efe9fe8f810e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:f5:ad:8a:48:69:9f:08:7f:ce:d9:72:73:
9e:ba:e8:4d:3c:18:05:94:8a:4e:2f:17:a4:1c:29:
be:db:4e:c4:9e:a1:91:d3:5b:69:03:24:3b:e7:c1:
09:67:94:c3:3f:8f:2f:41:39:aa:99:68:d0:b7:b3:
2b:54:7b:b1:49:68:81:1f:92:54:e8:fa:8c:75:14:
28:cc:e4:b0:42:86:d2:ef:f9:13:84:af:f3:00:59:
89:fb:03:df:4e:29:29:9c:e5:1d:dc:3f:0b:5e:39:
a7:50:5a:f7:61:b6:c8:f0:97:d8:a1:9f:cc:13:77:
75:75:00:a0:e7:4e:1c:28:44:09:60:4f:88:3f:1c:
ab:4e:d2:70:7a:dc:ce:1e:1b:ac:7f:83:83:ea:97:
1b:bf:10:65:97:b3:dd:9f:9c:62:ba:d7:3c:37:94:
08:2c:18:5c:ff:a8:24:dd:49:db:e3:9b:c5:bf:91:
e9:3a:b4:be:08:59:f0:64:e5:a2:3e:ce:17:94:da:
93:20:4d:6e:08:7c:80:2f:de:be:da:45:4d:95:9c:
71:33:96:15:bf:d9:d6:e3:c8:eb:a4:ed:52:85:9b:
c6:22:51:c2:e7:1b:ea:a0:d5:11:39:4c:1e:bf:a9:
cc:1f:9a:c7:46:dd:bd:4f:99:92:49:51:0a:b1:76:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:68:4D:8F:AB:64:50:21:59:23:0D:F7:EF:E9:FE:8F:81:0E:25
X509v3 Authority Key Identifier:
keyid:67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/QSFoTY-rZFAhWSMN9-_p_o-BDiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.28.0/23
Signature Algorithm: sha256WithRSAEncryption
02:75:93:43:f9:bd:22:36:e7:fd:5d:36:ba:48:39:b4:d3:25:
92:3e:08:84:eb:f6:26:12:a5:ba:8d:60:32:b2:be:44:4e:31:
0f:ab:78:6f:45:77:36:78:28:5d:62:68:d0:a0:3e:66:34:3b:
a4:2a:b6:cd:c9:39:f3:7c:97:e5:22:8f:c2:c5:41:c9:5d:ed:
24:c9:5e:39:e1:7c:cc:c1:fe:39:d4:c8:6a:82:44:13:6a:37:
c8:73:4b:05:9e:ae:33:52:0c:8a:1b:e4:0d:64:9d:b9:31:b2:
d3:bf:fc:aa:3c:f2:53:a3:78:90:ca:21:70:0f:f5:9c:12:0f:
71:f4:ed:7e:9f:c3:2e:ef:0a:c7:d0:94:14:fc:66:80:52:5f:
1c:e6:4f:10:2f:96:8c:8e:e6:62:9e:79:de:84:af:3e:ad:6a:
f9:63:ac:f8:bb:f2:c4:87:f6:5a:4d:73:34:07:f6:91:60:6e:
ec:bf:be:2d:6c:be:94:ef:6f:0f:34:f4:06:84:f4:ef:6e:d8:
41:58:71:b5:9f:12:f8:d5:56:1b:8c:1e:67:a4:64:c8:c8:7c:
74:43:4e:21:47:9c:4b:9c:4e:dd:42:4f:63:57:62:7c:43:a8:
59:7e:0e:d7:b0:10:02:2f:b5:af:79:22:42:c3:ad:2b:f6:4c:
37:b3:a0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:13 2025 by rpki-client