Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QhuMz1SqBUfKHd0O2kIFbt23FnE.roa
File: QhuMz1SqBUfKHd0O2kIFbt23FnE.roa (raw, json)
Hash identifier: D+2WuXiZ+NuZ+gLMoVGGgx1wKDJQzD2pyKMgBEEZeKM=
Subject key identifier: 42:1B:8C:CF:54:AA:05:47:CA:1D:DD:0E:DA:42:05:6E:DD:B7:16:71
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521D789521119C94D2BB006EAA04281
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QhuMz1SqBUfKHd0O2kIFbt23FnE.roa
Signing time: Thu 02 Jan 2025 03:49:22 +0000
ROA not before: Thu 02 Jan 2025 03:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50385
IP address blocks: 2a0e:97c0:8f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d7:89:52:11:19:c9:4d:2b:b0:06:ea:a0:42:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=421b8ccf54aa0547ca1ddd0eda42056eddb71671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:e6:ea:16:d1:e5:3e:28:01:45:13:72:48:
2b:77:67:cf:25:22:64:e9:ef:b2:a9:cf:bd:b9:a9:
98:d7:e3:6e:9f:9e:4a:63:94:3e:c0:d8:0c:0b:40:
e2:8c:28:0c:00:bf:51:1b:48:f6:30:34:15:4f:20:
dd:a6:ac:74:50:6b:95:c7:77:c5:55:05:c4:6b:1e:
cc:7b:7a:fb:16:4a:d7:f9:29:f1:8a:64:e2:d6:76:
75:38:3e:9a:7e:e8:a9:e5:f9:11:0b:e6:5e:4c:ca:
bd:6c:d6:bf:2c:bf:e4:87:97:d1:e5:a4:ef:b5:3a:
ee:24:ec:12:c5:a2:fe:e6:8b:5d:ff:f3:ab:9a:50:
af:fe:31:70:13:f7:94:ad:ee:07:a6:53:45:1c:1e:
4b:1b:46:90:38:c8:f4:88:4a:3a:95:d9:45:65:a2:
d0:f9:33:81:c4:65:a8:be:75:81:86:fb:62:59:39:
5e:51:f3:6f:4d:a1:e2:65:69:df:80:59:d5:63:10:
8d:8f:a3:34:f2:e1:00:27:ba:09:31:d6:4e:ab:90:
e4:3d:a5:27:c0:99:08:3f:6d:c6:3a:33:4b:b3:25:
4f:b8:80:a3:65:81:32:ab:4f:3e:94:5a:9e:50:82:
1f:d4:71:a3:8f:80:c8:b1:70:8b:36:5c:98:08:7d:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1B:8C:CF:54:AA:05:47:CA:1D:DD:0E:DA:42:05:6E:DD:B7:16:71
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QhuMz1SqBUfKHd0O2kIFbt23FnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:8f0::/44
Signature Algorithm: sha256WithRSAEncryption
a0:57:89:d6:b7:16:95:c4:4c:42:14:e0:55:55:77:c6:e2:b3:
c9:50:81:a2:c8:39:c9:ca:8c:2a:09:b3:f9:5d:65:35:ae:e2:
11:76:a0:84:9b:21:f2:50:a7:73:65:a0:d4:1b:9d:03:b5:fc:
fb:0f:2c:16:1a:eb:a4:50:9d:06:5b:7f:04:ac:cf:60:41:43:
2e:e3:ae:5b:e8:2c:e3:87:cb:4a:d7:d4:87:3b:df:56:1f:4a:
59:bb:66:ee:d5:6f:bc:f3:a0:77:bc:5a:2b:b9:e6:8f:1c:e0:
40:3a:22:7f:e3:e0:8e:fa:a0:3d:82:f6:16:ea:c5:ca:91:fb:
f7:d8:80:97:10:42:26:87:b2:9b:4b:c2:50:a2:61:dc:eb:9d:
81:39:a2:60:3a:2e:0d:07:0a:03:7e:7f:33:d1:5c:f7:e8:bc:
82:36:76:52:f7:bf:ea:9f:86:c2:5e:6b:55:a1:c1:25:96:bc:
8a:78:a3:4c:d5:6e:f6:f1:14:61:c0:be:7a:b2:1c:31:3d:d6:
1a:4e:96:b0:3b:11:57:02:75:db:cc:0c:8f:89:43:01:f2:53:
f7:16:a5:3a:36:51:a5:d6:c2:18:0d:a3:2a:5e:38:04:03:cd:
3f:4d:a4:9c:60:b3:73:fd:0f:54:63:e8:c9:46:7b:51:55:70:
14:4c:18:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:49:41 2025 by rpki-client