Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QOyV471MiAdrv1gx1_mQKqZThmQ.roa
File: QOyV471MiAdrv1gx1_mQKqZThmQ.roa (raw, json)
Hash identifier: AoS7cULghj9S2ceuce/DAbxzcNkBLN2/6i/FkUDAidw=
Subject key identifier: 40:EC:95:E3:BD:4C:88:07:6B:BF:58:31:D7:F9:90:2A:A6:53:86:64
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 019427B596F491F9311F351DB2214139E157
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QOyV471MiAdrv1gx1_mQKqZThmQ.roa
Signing time: Thu 02 Jan 2025 15:49:59 +0000
ROA not before: Thu 02 Jan 2025 15:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.129.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:96:f4:91:f9:31:1f:35:1d:b2:21:41:39:e1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Jan 2 15:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40ec95e3bd4c88076bbf5831d7f9902aa6538664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:d0:37:9a:02:3b:27:c8:69:48:eb:da:90:
f5:d7:67:9e:4b:89:34:02:aa:a7:1e:54:b9:b1:e7:
3c:e3:a0:4f:16:7c:d1:d5:80:2d:2c:56:78:cd:80:
d4:18:28:5e:e3:f3:a5:5f:9e:34:48:8b:69:51:99:
82:62:11:34:e3:cb:3c:96:4e:b5:38:4f:88:b1:e8:
f7:c7:9c:29:c5:80:3e:fd:8b:13:48:04:7e:04:7b:
e4:e6:0a:7d:81:15:e2:f2:d7:97:d3:b7:dd:60:39:
b5:ff:34:94:6f:e1:9f:d0:0b:8b:19:c8:58:17:39:
39:16:8b:15:95:fd:49:de:5a:5e:39:92:36:1b:de:
15:2f:e1:b9:e5:90:d2:55:fe:dc:04:1c:83:65:a6:
12:65:49:df:66:14:3a:ce:57:ca:62:4c:7d:25:1c:
15:64:49:f4:44:86:49:41:71:7f:93:e7:fc:10:a6:
e2:50:bf:27:95:3b:2b:c7:fd:a1:84:42:de:87:19:
23:b4:7a:28:b8:37:71:b2:2b:6b:75:62:d2:7a:f4:
a7:03:85:a0:7c:52:4a:a7:4c:a2:0d:0b:be:f0:8e:
3f:00:3c:51:6e:9a:a1:e2:57:10:4e:c2:15:c1:84:
17:c6:80:37:d9:b0:81:5b:6e:e7:b5:2c:f0:03:14:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EC:95:E3:BD:4C:88:07:6B:BF:58:31:D7:F9:90:2A:A6:53:86:64
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QOyV471MiAdrv1gx1_mQKqZThmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.193.0/24
Signature Algorithm: sha256WithRSAEncryption
94:83:55:14:cf:ab:4b:b1:6c:7e:d3:aa:10:58:22:2a:26:ad:
67:18:f3:bc:35:fa:34:43:ad:92:d6:06:88:9f:f7:09:2c:ba:
9c:68:f9:f3:bf:52:4e:69:f7:9f:8c:1b:7d:ea:ac:74:0f:e4:
9f:3b:be:cc:42:0a:60:1a:b9:b3:c6:4f:68:e4:b1:78:9b:3a:
0d:62:bb:a6:36:36:79:5a:ec:72:ad:3a:db:14:a8:b3:86:9e:
dd:79:43:c7:88:9c:e4:c1:17:c6:27:b1:f1:30:e2:af:4a:95:
71:f4:fe:e5:4e:24:d9:d3:3e:21:7b:ac:ec:e9:8b:cd:44:80:
f0:93:7a:a3:6e:5a:ae:ba:b1:c2:27:3e:6e:1e:ef:ea:5d:c2:
7f:30:33:46:16:88:c7:0c:20:bf:40:b0:51:1e:88:39:94:e4:
32:69:cb:14:2b:80:1d:62:f6:37:92:28:74:70:22:f3:48:52:
91:3b:f3:a0:52:84:23:00:8f:5c:05:ec:dd:c1:b0:b6:35:42:
6f:0b:13:c4:fe:84:66:a4:d7:fa:ae:19:16:bc:a8:9c:22:83:
e0:ff:e7:f8:85:d8:aa:8e:0f:0e:2a:b9:6e:a3:2c:6e:ad:c4:
71:e7:1b:68:e2:bf:08:b5:7c:2a:21:6e:ee:2b:34:d8:49:bd:
a8:a2:7b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:10:51 2025 by rpki-client