Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/qWecP1fjBHk_xiZL6w3FMxqmMFs.roa
File: qWecP1fjBHk_xiZL6w3FMxqmMFs.roa (raw, json)
Hash identifier: H6nLoMO+CEX9wLJPNIjsGgGm6hrsOhinY+8mLTIndRM=
Subject key identifier: A9:67:9C:3F:57:E3:04:79:3F:C6:26:4B:EB:0D:C5:33:1A:A6:30:5B
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 019421438BC72A5632B190250D48FBB35713
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/qWecP1fjBHk_xiZL6w3FMxqmMFs.roa
Signing time: Wed 01 Jan 2025 09:47:42 +0000
ROA not before: Wed 01 Jan 2025 09:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399045
IP address blocks: 45.143.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:8b:c7:2a:56:32:b1:90:25:0d:48:fb:b3:57:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jan 1 09:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9679c3f57e304793fc6264beb0dc5331aa6305b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:0b:c6:d1:f9:49:94:49:df:6a:fd:c4:65:
99:25:6a:ed:ab:11:7a:55:02:04:08:30:44:38:74:
7c:3e:dc:22:5d:02:53:3d:81:a1:c6:1a:75:c8:be:
66:a7:44:b5:8d:2c:37:70:5e:0f:c2:5f:bc:10:af:
9f:54:38:c7:6e:ee:2b:e5:66:88:8b:18:a7:13:bc:
68:29:b2:e2:ab:ec:24:51:88:17:85:41:4e:91:58:
b1:2c:a2:c9:4a:d2:60:b0:55:85:b4:c4:2f:4e:9f:
ca:27:95:a7:35:5c:e1:29:e0:bf:07:5e:1d:48:bd:
04:6a:fb:8e:f8:62:48:54:c2:49:0f:80:cc:b6:52:
d4:8f:cf:0e:9e:08:8c:b0:d8:42:2e:8d:c3:2f:0e:
4c:46:3a:98:44:ca:d9:c9:a2:cb:bf:60:6f:5b:5d:
6e:8c:cf:4b:7f:f0:11:20:85:6a:f3:cf:2d:a0:45:
d4:57:a8:44:b6:73:cf:67:98:ff:6c:96:76:67:3c:
db:a4:ff:09:41:87:6a:6d:96:67:81:91:76:ec:8f:
2b:90:27:af:a1:a3:2b:dd:c3:a1:ce:38:8f:0d:cc:
8b:15:0c:fc:f6:71:ab:3a:4f:00:da:b9:14:8f:b5:
f8:1a:26:43:27:42:9a:af:56:47:5d:ed:da:e6:ec:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:67:9C:3F:57:E3:04:79:3F:C6:26:4B:EB:0D:C5:33:1A:A6:30:5B
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/qWecP1fjBHk_xiZL6w3FMxqmMFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.9.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ca:36:74:00:42:4d:c5:69:03:11:6b:c8:01:02:1e:21:0f:
55:fa:e2:8d:b9:9f:f5:48:35:de:fd:8e:38:4d:91:e9:b2:27:
04:51:6f:10:bb:0c:29:ef:e6:a0:75:cb:14:32:f6:73:14:7a:
48:f1:38:bb:96:ec:c1:a3:3c:88:a6:7b:38:8a:88:5b:86:d9:
fe:82:26:b9:60:00:47:42:c5:66:24:1f:11:91:4d:0f:b1:61:
27:8e:3a:34:ba:c3:1e:a7:d1:fd:c4:2a:60:bd:a0:8a:38:7b:
95:f8:a6:f0:47:ec:1d:59:1d:99:18:2c:0e:97:a1:ea:5c:0d:
a6:50:1b:5b:32:d3:6a:e9:43:f4:6a:be:bf:14:f3:e9:23:00:
51:9d:6b:5e:45:79:0f:fc:55:26:8f:7b:b9:db:05:ad:41:f6:
1a:b9:ac:fc:7a:e2:2a:05:18:d3:34:9f:1a:8b:ab:f6:1f:ad:
71:59:cf:b2:b3:0b:ba:51:a6:1b:38:ec:ee:b0:1d:6a:af:85:
39:85:ad:e2:53:ea:2c:cb:08:0b:44:8c:de:1b:f0:3d:72:07:
c1:39:3d:d1:8e:2c:10:ef:ae:31:30:8b:28:0b:2e:c7:8e:64:
26:2e:dd:85:98:48:90:0b:0f:c9:01:93:56:65:70:47:7e:d7:
22:97:71:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:46 2025 by rpki-client