Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/RQwmb2IUoQ2xFFeMvGM-j4GmFr8.roa
File: RQwmb2IUoQ2xFFeMvGM-j4GmFr8.roa (raw, json)
Hash identifier: GbklX/DslaRHNgj+v88YxTV/QFH2n/vHFOxV9Z6p4Ls=
Subject key identifier: 45:0C:26:6F:62:14:A1:0D:B1:14:57:8C:BC:63:3E:8F:81:A6:16:BF
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B572BC0B22DA512A03FA1BCB38D909
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/RQwmb2IUoQ2xFFeMvGM-j4GmFr8.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17025
IP address blocks: 79.141.45.0/24 maxlen: 24
94.31.10.0/23 maxlen: 24
94.31.12.0/24 maxlen: 24
213.152.239.0/24 maxlen: 24
2a00:16f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:72:bc:0b:22:da:51:2a:03:fa:1b:cb:38:d9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=450c266f6214a10db114578cbc633e8f81a616bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:29:ba:42:84:38:f8:04:59:bd:e9:e8:91:88:
44:66:a3:61:bb:b5:ff:60:06:69:57:7d:48:08:55:
7d:7d:a0:6c:e9:08:4c:3c:35:12:3d:7a:64:65:8d:
77:35:0b:a8:76:e7:e5:24:5f:e1:26:85:c5:17:89:
65:58:8c:94:64:62:f9:bd:f1:aa:e3:43:32:61:fb:
6b:86:8e:00:43:d4:8d:78:cc:8a:55:a1:b6:73:bb:
c1:b6:cf:d2:5d:90:68:35:7d:8b:c8:3f:2c:ca:a0:
5f:f8:f4:75:3f:17:04:6b:ea:dd:b5:c8:3f:b7:ef:
6e:65:f7:20:b8:0a:fe:91:8b:25:a7:e5:87:92:4e:
8e:34:0e:eb:10:95:1e:25:47:75:bc:ca:ef:15:b2:
c9:fa:12:62:4e:f3:3f:38:63:61:95:97:65:5a:ec:
8c:60:2f:39:10:6e:86:f7:5f:96:7d:26:d2:f3:0b:
a6:0b:f4:08:d8:1b:66:01:34:14:87:b8:d3:db:dc:
6c:18:fd:75:82:21:e2:5d:b4:41:12:da:24:b1:5f:
fe:1d:7c:c2:5a:2f:50:1c:3f:16:82:13:74:99:3f:
6e:3c:b1:45:fb:ee:d1:33:91:a6:6a:0e:91:40:d8:
3c:df:d5:a1:c1:df:b4:df:a5:17:25:a5:31:54:4e:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0C:26:6F:62:14:A1:0D:B1:14:57:8C:BC:63:3E:8F:81:A6:16:BF
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/RQwmb2IUoQ2xFFeMvGM-j4GmFr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.45.0/24
94.31.10.0-94.31.12.255
213.152.239.0/24
IPv6:
2a00:16f8::/48
Signature Algorithm: sha256WithRSAEncryption
49:5a:1b:1a:0f:e8:9e:59:c9:57:ed:46:fc:f3:4f:43:9f:9b:
b3:31:bc:f5:6a:b5:ee:04:06:0a:d7:f9:21:2c:43:15:c4:a8:
6d:3e:df:6c:72:10:a8:2b:0b:fd:55:16:bc:85:13:f8:54:6e:
be:9f:dd:6f:dd:5a:3a:78:b9:c5:52:f4:2e:45:63:cf:5e:14:
15:f2:e5:e9:fc:f6:8d:c0:54:86:84:b9:2b:4d:a6:9d:67:25:
6a:ed:30:9c:4a:d4:fb:70:1c:0f:1a:73:e6:3e:cd:f4:12:c2:
b6:92:8a:d7:65:6d:92:e8:c2:9a:7a:d9:3b:c8:31:80:a4:e9:
26:cd:ae:13:a3:d4:ac:90:f4:5c:1c:1d:18:e3:b5:a9:6e:19:
4a:5a:d7:b3:3a:6f:43:62:65:03:44:be:84:6f:71:71:6f:01:
f2:f4:57:23:a8:02:16:46:bd:54:01:c6:1d:04:ae:4e:b4:09:
67:66:43:20:da:67:8b:c7:7d:3d:48:4f:46:0f:cb:fe:16:81:
30:bd:6e:58:d1:60:ab:35:67:63:dd:bc:25:a9:74:17:10:b4:
12:71:4b:63:dc:7e:67:83:19:1c:fa:41:df:b2:4c:a0:83:5e:
d0:da:ad:f6:fd:2d:68:c6:aa:e2:c7:5d:89:14:5d:e4:fc:a8:
e0:60:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:18:23 2025 by rpki-client