Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/QeO41CAcoeY5Jb6ckPmPdMtCGJ8.roa
File: QeO41CAcoeY5Jb6ckPmPdMtCGJ8.roa (raw, json)
Hash identifier: Nr1rB/vJsu0ebZqnfkywnf9dXpXohyswafUIZqT1VeU=
Subject key identifier: 41:E3:B8:D4:20:1C:A1:E6:39:25:BE:9C:90:F9:8F:74:CB:42:18:9F
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA2F91093300215CCDDA7731559433
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/QeO41CAcoeY5Jb6ckPmPdMtCGJ8.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 37.114.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2f:91:09:33:00:21:5c:cd:da:77:31:55:94:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41e3b8d4201ca1e63925be9c90f98f74cb42189f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:04:8f:ac:48:8c:f8:2f:7d:2e:4d:d2:07:
78:0c:4c:ef:65:66:72:6b:bd:29:6f:07:8f:56:81:
2c:fe:74:bc:a1:36:c2:5e:27:39:1e:fb:a8:d7:47:
43:55:03:f0:87:c2:3a:21:35:26:a8:9c:ff:6f:d6:
f5:50:07:3b:1b:10:7c:9b:5b:d1:cd:15:13:55:ef:
f0:d4:75:66:18:c9:7e:cb:53:cd:da:6f:ba:61:43:
27:50:26:e9:73:60:e2:2b:ce:6a:e5:e8:92:5e:8e:
55:96:15:bb:ba:18:12:68:9a:55:9e:58:c9:40:6d:
a3:9b:70:86:4f:30:35:fa:cb:da:a5:20:2b:21:99:
01:0c:f6:81:6c:0e:d2:29:1f:46:8d:cd:04:d6:7d:
9e:48:dd:32:7d:ef:6b:3a:e7:0a:24:31:5b:88:16:
6e:81:e9:2a:6c:82:50:69:59:df:76:e6:f3:bf:4a:
77:9f:42:90:eb:55:89:13:95:9e:69:4e:ad:15:12:
1b:0c:67:a8:6c:7f:a9:09:a5:98:1f:f3:0f:f8:ab:
ea:e6:43:30:f2:6b:62:04:5b:0a:87:8c:96:70:28:
13:87:92:02:33:54:87:a1:7b:6a:61:cb:d8:8a:2c:
d0:89:35:28:78:a8:28:cd:2f:1e:41:07:28:8c:33:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E3:B8:D4:20:1C:A1:E6:39:25:BE:9C:90:F9:8F:74:CB:42:18:9F
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/QeO41CAcoeY5Jb6ckPmPdMtCGJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.57.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f2:7c:76:bb:e7:37:1d:47:d1:0c:81:79:61:56:cf:6e:d5:
9e:05:57:3a:c7:e9:51:e2:64:05:df:cf:e5:10:9b:cd:b2:02:
5a:a7:ff:10:4b:51:4a:2b:9c:2b:17:bc:21:f8:7e:d7:cb:da:
e9:9d:a0:e9:4d:0c:fb:76:86:4b:1e:9b:64:cf:64:ea:0b:5a:
f5:ff:9c:38:1a:04:1c:8e:1d:32:0e:75:4a:01:d9:e0:85:73:
d6:55:45:a6:25:bc:fc:7a:b9:bc:85:76:b8:e2:99:8c:52:4d:
23:19:16:de:ba:51:bb:da:58:1f:d3:b5:32:62:13:45:c9:a1:
80:83:c7:d0:65:8e:1c:22:0d:76:5e:a1:e5:61:b3:58:3e:3e:
4f:12:5a:db:e1:14:4a:b4:38:5b:e7:b5:b9:83:51:03:6c:0a:
f8:cd:1a:2f:ae:bb:5a:73:2a:63:4b:ec:13:47:0b:7e:2e:c4:
30:12:21:54:ae:99:79:ba:97:b3:35:e2:87:d7:34:ce:4e:bf:
1e:29:47:87:bc:cb:03:a6:70:fc:e5:d3:08:89:87:34:9a:f0:
c7:61:4e:3b:78:c3:67:8e:2f:2e:72:c4:bb:c0:e8:79:80:20:
c3:c7:22:c7:c4:9b:06:62:ef:04:fb:96:90:95:a7:5a:56:d1:
c4:7a:12:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:36:55 2025 by rpki-client