Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/qSnacK2T8IuqCW3tI5c1Sj5K99M.roa
File: qSnacK2T8IuqCW3tI5c1Sj5K99M.roa (raw, json)
Hash identifier: WK1c1s6zKzUYTVUxjbT3jBDMbmv6j/g+GMi3AvdtgQY=
Subject key identifier: A9:29:DA:70:AD:93:F0:8B:AA:09:6D:ED:23:97:35:4A:3E:4A:F7:D3
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019421B22FFF0ECB2C0BB0B3482BD375AE3D
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/qSnacK2T8IuqCW3tI5c1Sj5K99M.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198228
IP address blocks: 46.253.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2f:ff:0e:cb:2c:0b:b0:b3:48:2b:d3:75:ae:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a929da70ad93f08baa096ded2397354a3e4af7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:0f:da:03:7a:34:85:3a:4b:cc:ab:b7:2c:
d1:86:81:96:b7:38:a2:18:47:30:ec:5b:b0:77:48:
aa:b4:8a:85:62:d5:a1:92:f8:dd:30:12:07:4a:af:
46:17:35:94:04:f1:ff:fb:f8:13:af:35:97:f5:23:
12:54:bc:90:e4:c8:a3:53:a7:5e:91:65:3c:e6:4b:
49:f4:f7:32:f4:6d:94:95:37:6f:c9:d6:24:3f:76:
82:53:21:aa:7f:b6:f6:36:05:60:b4:86:61:25:23:
f2:4a:8e:08:90:be:4d:6f:c6:69:2a:d2:15:e7:00:
ec:dd:29:3d:0a:2e:b3:71:08:74:89:f8:ce:1d:2d:
3e:1f:4e:12:ac:ba:db:f5:f0:4d:fd:99:b2:e2:01:
99:b3:43:23:d1:c2:a4:3c:ca:85:3e:39:59:af:e5:
9c:e5:33:2a:af:f9:55:c6:3f:ce:ce:af:b9:1f:4a:
f5:d4:63:1a:77:1b:5e:36:29:e9:10:fd:ce:e0:6b:
cf:e2:a5:d6:b4:67:44:fa:c0:85:b4:b8:1a:e0:ed:
16:9e:3f:0c:ab:ff:e3:34:b6:50:d2:6f:2c:41:8f:
79:ae:ec:a3:1a:f9:0b:29:08:78:82:a2:0c:9a:76:
78:ea:a0:48:f2:cb:e0:a7:1a:be:7c:9e:90:bb:7f:
5d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:DA:70:AD:93:F0:8B:AA:09:6D:ED:23:97:35:4A:3E:4A:F7:D3
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/qSnacK2T8IuqCW3tI5c1Sj5K99M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:38:d1:2e:06:30:17:3b:99:2c:b7:7e:43:ce:07:d8:17:3e:
b0:10:7e:4f:1d:5d:77:6d:67:85:48:89:51:fb:85:67:26:35:
e2:52:fb:4b:50:a5:67:23:29:0b:6d:dd:cf:fd:1e:13:0d:d1:
a9:f0:bd:94:9c:9b:ed:4b:91:fa:e0:a4:2c:98:22:7e:59:9e:
17:b7:06:d4:bb:a3:2b:07:1f:8a:be:ea:ef:4f:a6:6d:9c:2d:
c7:04:2c:e2:6b:bc:82:ed:38:26:b0:a9:cc:26:8d:3e:62:6b:
24:92:11:8e:59:ab:0f:95:0c:4f:ac:12:e6:34:10:fd:32:e9:
6a:36:71:14:54:8e:dc:28:c7:47:1f:2a:cf:67:b1:a3:e3:e3:
fe:90:48:3a:60:29:cf:14:c1:37:c3:f3:33:04:ed:31:6b:fd:
ff:71:f9:3e:b6:1f:bf:94:db:9c:a1:8a:be:c2:b8:40:4b:01:
10:6b:af:63:cd:cc:20:67:7b:2a:a3:02:e4:7d:0b:ab:ef:be:
9b:8b:64:d0:24:bb:68:a4:00:ad:e3:9b:dd:ac:a7:64:79:c1:
44:7c:1b:e1:66:f9:d6:c8:38:ac:ee:92:57:2b:ce:5e:20:56:
52:ec:92:43:e8:64:05:6a:81:d5:d7:5b:fb:e4:b4:37:d8:01:
51:2b:d3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:28 2025 by rpki-client