Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/qg9H3rvWINznh7UPHplQbVY73BM.roa
File: qg9H3rvWINznh7UPHplQbVY73BM.roa (raw, json)
Hash identifier: Nx2IWHCLZcluhgcIHU0CznQVLHn9XdJ3ef9jXTt3p68=
Subject key identifier: AA:0F:47:DE:BB:D6:20:DC:E7:87:B5:0F:1E:99:50:6D:56:3B:DC:13
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D42CED79348FE87BDAAB1ACFDC865
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/qg9H3rvWINznh7UPHplQbVY73BM.roa
Signing time: Wed 01 Jan 2025 15:47:50 +0000
ROA not before: Wed 01 Jan 2025 15:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24961
IP address blocks: 45.133.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:42:ce:d7:93:48:fe:87:bd:aa:b1:ac:fd:c8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa0f47debbd620dce787b50f1e99506d563bdc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:fa:b2:d4:ad:01:7f:6e:2c:ed:79:90:e6:
90:18:15:51:13:75:cc:05:e4:19:60:a2:24:e1:da:
80:e3:2b:19:f9:7b:7d:fa:0b:5d:5a:31:a8:a3:81:
d0:16:5c:69:7f:50:42:c3:c9:8a:38:bf:e7:d9:40:
42:b9:aa:e1:5d:7e:ea:02:01:ff:93:63:22:b3:56:
0c:95:d5:53:a4:3d:43:0b:38:d7:84:85:b8:06:fd:
6e:99:6e:16:a6:08:c6:3c:5d:60:ed:05:18:c0:cc:
1a:06:93:74:47:49:68:45:7d:5e:92:e1:c3:f3:75:
4b:55:fe:32:92:f4:16:cf:24:8e:5f:9d:75:b7:46:
0a:07:6f:76:8e:3c:10:85:e7:b3:69:bd:06:f5:e9:
91:e0:17:5b:73:40:20:75:a5:1f:a9:12:fd:58:0f:
f6:40:0b:3f:01:d8:02:c2:f5:19:6e:a3:7c:f1:62:
3a:2f:f1:10:5d:f7:8b:5f:e0:cf:3c:16:45:e4:15:
51:37:c5:c6:39:a6:29:8c:7a:84:fb:0f:22:fd:59:
0e:13:e2:c7:a3:e4:c7:ec:36:e7:c4:a5:a0:b9:06:
a5:e4:7a:23:07:79:c1:86:fc:a9:86:6b:81:99:12:
fc:25:a3:fb:ca:52:38:b1:38:a0:3d:b9:62:bf:e4:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0F:47:DE:BB:D6:20:DC:E7:87:B5:0F:1E:99:50:6D:56:3B:DC:13
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/qg9H3rvWINznh7UPHplQbVY73BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.156.0/23
Signature Algorithm: sha256WithRSAEncryption
02:4b:50:8f:89:a8:08:97:61:ca:fb:df:31:92:d5:f7:ef:7f:
6e:ab:df:ae:19:32:14:1a:17:2b:8a:73:6e:45:c5:89:f1:42:
e7:b7:04:ad:0a:7a:11:68:b7:bb:ee:8d:37:4c:a2:fd:21:6f:
6c:ec:67:57:90:ed:7a:f5:55:1e:aa:be:31:76:05:19:62:bf:
30:f4:04:19:21:d6:e8:ba:e1:03:67:f9:c8:fb:0f:a5:5f:1f:
9b:5c:32:4b:c9:f7:ed:d2:6e:77:f0:08:18:3d:40:86:f1:6d:
ca:f3:72:31:df:54:fd:3e:33:37:4f:f8:53:a2:56:5d:5e:18:
17:e4:07:85:66:8b:4d:e6:c6:b8:15:74:0f:17:17:99:75:37:
14:39:b1:84:d1:99:d5:13:8b:15:0a:b3:c4:87:6a:6a:2a:9c:
13:b0:4b:ac:15:35:5f:5e:0f:5c:1e:9d:d3:0c:0e:92:dc:80:
fb:4f:cf:0a:4e:5e:a4:58:30:7d:0c:58:f4:39:0d:4c:b9:5d:
bd:89:6f:51:05:ec:90:59:9e:dd:fc:94:ee:a0:b6:d2:08:cc:
41:3f:03:51:9c:44:4d:9a:77:8e:26:9c:eb:cf:53:c8:ba:22:
ab:40:11:30:b9:ab:6b:39:ec:d2:a8:f3:37:e7:f0:9e:1c:de:
e5:54:de:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:55 2025 by rpki-client