Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QHVdnBkfk7QNKaz_PioWqLWgusk.roa
File: QHVdnBkfk7QNKaz_PioWqLWgusk.roa (raw, json)
Hash identifier: YB+UdghPqVVMoU3w2EGP1gFvj1a679xordufbuHRlv0=
Subject key identifier: 40:75:5D:9C:19:1F:93:B4:0D:29:AC:FF:3E:2A:16:A8:B5:A0:BA:C9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521EFBE6BC7BF375300ACC9878DDCCA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QHVdnBkfk7QNKaz_PioWqLWgusk.roa
Signing time: Thu 02 Jan 2025 03:49:28 +0000
ROA not before: Thu 02 Jan 2025 03:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151633
IP address blocks: 2a06:de00:60::/44 maxlen: 48
2a06:de00:60::/48 maxlen: 48
2a06:de00:61::/48 maxlen: 48
2a06:de00:62::/48 maxlen: 48
2a06:de00:63::/48 maxlen: 48
2a06:de00:64::/48 maxlen: 48
2a06:de00:65::/48 maxlen: 48
2a06:de00:66::/48 maxlen: 48
2a06:de00:67::/48 maxlen: 48
2a06:de00:68::/48 maxlen: 48
2a06:de00:69::/48 maxlen: 48
2a06:de00:6a::/48 maxlen: 48
2a06:de00:6b::/48 maxlen: 48
2a06:de00:6c::/48 maxlen: 48
2a06:de00:6d::/48 maxlen: 48
2a06:de00:6e::/48 maxlen: 48
2a06:de00:6f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ef:be:6b:c7:bf:37:53:00:ac:c9:87:8d:dc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40755d9c191f93b40d29acff3e2a16a8b5a0bac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:1e:c5:90:36:eb:56:56:a1:a1:17:77:22:
a0:7f:1c:d1:8c:44:62:60:10:3c:20:11:01:a1:5f:
69:99:f9:26:21:ca:14:36:67:77:16:af:dd:8d:e8:
c3:d8:cc:e3:ea:b6:90:5c:1e:a8:3d:3e:90:92:82:
5d:69:4e:4b:72:57:7b:7a:4c:f8:c3:bd:ca:b6:25:
c4:37:20:19:e2:53:03:83:e0:0a:cc:f7:16:44:43:
8f:80:9e:8d:32:af:2f:09:ff:ba:85:c8:ed:b8:27:
9c:c9:6d:a6:b0:70:30:7d:c8:9a:e3:bc:3c:8d:d0:
8c:48:58:69:fd:19:c9:22:32:0c:cc:1c:ff:88:84:
4b:75:bf:93:f7:64:9a:30:eb:c3:33:08:73:ee:48:
d6:07:e0:b5:ec:e3:74:8d:d1:bb:b4:79:00:90:13:
d8:05:74:ab:79:50:cf:5a:28:c2:6f:6e:a0:87:48:
4a:29:45:54:8d:7a:13:93:17:d3:72:3a:77:a1:d3:
7f:76:af:4a:22:41:d9:26:14:8b:62:17:44:ff:77:
31:19:28:70:b9:62:4b:cc:36:b0:17:bc:79:28:bf:
4d:c0:b9:88:c7:41:16:d6:df:91:bd:79:6e:96:9b:
72:dc:1c:90:d3:51:63:9e:39:9d:f4:5f:4d:cd:10:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:75:5D:9C:19:1F:93:B4:0D:29:AC:FF:3E:2A:16:A8:B5:A0:BA:C9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QHVdnBkfk7QNKaz_PioWqLWgusk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:60::/44
Signature Algorithm: sha256WithRSAEncryption
30:10:68:be:b1:fa:cd:3c:82:cd:06:a0:fd:16:dd:4c:17:55:
cf:61:b4:1a:bb:57:ed:c6:dc:04:cd:38:20:b6:c3:5b:25:5f:
42:c4:5e:98:16:6d:73:23:26:a2:00:eb:89:d9:fc:29:af:61:
fa:97:9a:9f:71:e4:cf:50:65:d3:97:71:76:14:9d:cb:89:24:
56:07:6a:de:37:8d:5d:58:77:93:a3:5f:b9:a4:cb:5e:00:88:
2b:a9:5e:59:c2:1a:d4:51:e8:1e:21:93:11:71:64:04:45:fc:
73:9c:14:41:c4:af:ff:54:5b:77:e4:47:13:fa:a7:b3:dd:73:
47:ea:4b:b1:d7:fe:87:dc:20:38:71:7a:43:aa:35:5a:fd:8e:
35:4d:2e:cc:47:ea:96:df:f6:fc:72:83:66:47:ef:a3:d0:90:
2d:a7:36:81:fe:37:4b:e7:9f:88:60:12:e6:63:47:0a:6f:73:
0d:cd:77:e0:8a:5e:c6:d9:94:7d:fe:84:14:42:7c:af:40:57:
e7:ac:0a:4c:ec:2e:a1:22:6b:93:8e:5b:7b:a3:a2:85:c6:3d:
9c:c1:76:49:76:cf:8f:7f:8c:19:45:c8:74:89:1a:63:d3:7d:
51:13:01:7f:ac:00:27:1f:3f:d2:15:7a:69:39:88:1e:5f:3d:
49:f0:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:38:20 2025 by rpki-client