Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/QmonITNns_8Q9qn9QpgL_m0jbZY.roa
File: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (raw, json)
Hash identifier: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=
Subject key identifier: 42:6A:27:21:33:67:B3:FF:10:F6:A9:FD:42:98:0B:FE:6D:23:6D:96
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 0194258E1762416A1689F74F372FF22EB5AD
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/QmonITNns_8Q9qn9QpgL_m0jbZY.roa
Signing time: Thu 02 Jan 2025 05:47:36 +0000
ROA not before: Thu 02 Jan 2025 05:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12735
IP address blocks: 212.102.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:17:62:41:6a:16:89:f7:4f:37:2f:f2:2e:b5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Jan 2 05:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=426a27213367b3ff10f6a9fd42980bfe6d236d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:9c:3e:9e:a8:61:cc:b1:5f:40:2d:93:85:
4c:aa:08:07:85:b8:28:c1:43:cd:09:3e:0d:26:18:
d3:e2:36:ee:3b:13:7b:d6:61:54:b7:91:ca:0a:ce:
c6:bb:2d:38:f5:c1:ee:49:3e:b4:14:aa:4f:61:8b:
d3:0d:fe:2e:bf:c2:03:04:ad:61:b5:2e:47:4a:ca:
81:59:3d:99:eb:87:50:2d:78:16:c7:94:09:18:69:
21:66:0d:a1:ac:7d:b2:2d:e5:6f:9e:d2:f8:57:a4:
e8:d4:4c:7c:40:b6:51:41:47:91:f6:52:d8:fe:05:
41:5c:7b:f6:7f:1b:ee:b4:f7:2c:37:50:15:23:49:
64:ff:52:ee:fd:94:78:0d:82:ca:78:31:59:5e:56:
91:1a:3d:54:cc:de:9f:4a:86:32:a6:d9:4b:5a:13:
6a:31:3a:28:77:f5:20:d1:3d:82:f7:ec:99:41:83:
cb:3b:73:91:26:85:7c:6e:21:5a:c3:d5:e2:f3:b3:
24:b9:fe:49:26:a6:5d:0d:34:59:96:d2:d0:27:67:
1b:6b:cb:93:c1:bf:07:9a:40:ae:38:aa:97:36:7c:
4c:a7:b9:33:f6:08:cd:38:48:f1:02:3a:84:31:24:
ae:b7:f4:37:69:30:50:9a:fa:f5:7b:fe:06:cb:77:
f0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6A:27:21:33:67:B3:FF:10:F6:A9:FD:42:98:0B:FE:6D:23:6D:96
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/QmonITNns_8Q9qn9QpgL_m0jbZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:89:de:76:25:20:f6:28:08:19:ec:3b:6e:aa:00:16:be:5e:
7c:b3:85:a8:c0:02:c6:c0:26:18:51:24:66:1c:83:e9:f8:e3:
34:f5:18:ac:af:e4:e3:49:5c:45:2e:8a:26:9c:b4:65:9c:7e:
1c:36:a8:ad:f6:1f:80:08:fa:32:35:b8:ef:52:00:06:b3:84:
6e:5c:c0:99:20:9b:42:86:df:72:b3:5c:d9:ff:97:dd:f3:6d:
a4:6b:6c:dd:ce:9d:5b:71:9a:dc:31:6c:aa:96:d5:df:da:18:
b8:b1:9c:ca:c3:33:e5:87:89:ee:9f:d2:aa:9f:8d:71:fb:99:
c0:16:6d:ff:dc:24:0f:96:df:1f:da:1f:b7:53:2d:82:c2:25:
2f:4c:0b:92:de:71:2c:76:65:b4:b3:c9:95:2a:70:da:1f:e3:
5f:de:fa:01:54:55:de:c2:a2:1f:1b:eb:f1:67:65:b3:14:1e:
3e:d3:20:50:f9:27:a3:4e:d5:3c:4d:d8:93:05:da:d5:8f:86:
5b:4c:e3:f8:dd:0e:c4:8e:19:d8:29:ab:84:cc:e9:3f:19:81:
4c:d8:04:3b:a7:e1:d9:24:80:ba:e4:a1:46:75:a9:4f:09:23:
7f:08:d6:33:69:1b:66:89:df:fb:3a:14:75:f4:82:73:b4:66:
07:d5:cd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:06:29 2025 by rpki-client