Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/QHoaGfnUH3FKQk7qJmB7wSMAuIY.roa
File: QHoaGfnUH3FKQk7qJmB7wSMAuIY.roa (raw, json)
Hash identifier: cKHUXjBwPEe/CMOFim7WvGQ+QHsvWhKNdZahFhl9CfM=
Subject key identifier: 40:7A:1A:19:F9:D4:1F:71:4A:42:4E:EA:26:60:7B:C1:23:00:B8:86
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747D11462695749DF94425F746006D7
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/QHoaGfnUH3FKQk7qJmB7wSMAuIY.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205569
IP address blocks: 46.8.50.0/23 maxlen: 23
46.8.50.0/24 maxlen: 24
46.8.51.0/24 maxlen: 24
109.248.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d1:14:62:69:57:49:df:94:42:5f:74:60:06:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=407a1a19f9d41f714a424eea26607bc12300b886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:08:3c:fe:64:77:48:aa:37:99:5b:b8:c9:
01:40:6f:e1:12:96:a9:08:e7:b6:26:21:40:37:42:
f6:d6:e4:df:2c:6d:22:44:54:72:9e:6d:9e:5e:5d:
d9:38:20:d4:13:c7:0b:53:58:36:c1:39:3f:da:93:
fd:ee:78:35:a8:35:71:13:8e:24:6f:9a:3c:37:e5:
6f:ec:22:f6:8a:ad:80:56:73:d4:9b:9f:06:db:10:
6f:72:ca:72:eb:ac:03:d0:cc:76:2a:43:50:5f:7c:
cd:ff:61:6a:cb:d4:5c:9e:1b:24:9f:7f:4b:b0:0c:
10:83:16:12:da:e0:f6:20:ec:9d:fa:42:c9:be:ea:
e9:70:d2:c3:91:f3:74:38:3a:a5:f1:03:d6:3a:16:
04:6e:00:b7:37:b4:22:d8:88:50:b2:1f:ed:cb:b9:
2f:82:7b:17:ee:06:dc:5c:7c:3c:d5:b8:d8:41:8e:
ec:2b:46:0b:ad:ec:a4:5b:76:6a:88:9d:03:d6:8b:
1f:01:c7:42:81:79:d0:7a:7b:46:a7:d9:6c:c6:7b:
24:2d:91:c8:7b:cc:2d:b1:bc:f2:c2:74:42:50:58:
81:f1:00:18:f5:33:9b:f0:51:04:1a:f3:e8:75:d1:
b0:de:ed:be:bb:ee:dc:40:dc:86:fc:e2:cd:7b:5c:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7A:1A:19:F9:D4:1F:71:4A:42:4E:EA:26:60:7B:C1:23:00:B8:86
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/QHoaGfnUH3FKQk7qJmB7wSMAuIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.50.0/23
109.248.60.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8b:86:d4:ac:4b:30:06:90:80:41:11:bb:fc:9a:d2:e4:3c:
ce:54:3f:ef:b5:b7:14:52:c6:37:22:27:8a:b6:9d:d6:63:61:
c3:45:4a:96:8b:38:3f:08:83:d0:c0:83:8c:95:59:c7:a3:ab:
c4:c9:54:f6:38:61:0a:47:85:0d:da:cc:1a:85:b2:7f:2c:7a:
9c:33:8d:d7:da:a4:27:b9:ba:fc:62:d0:3e:b6:43:c1:c2:1b:
0b:fd:2f:b5:8b:fe:ff:69:e6:34:56:13:26:60:4f:b0:0e:e9:
15:f1:31:c1:c5:e4:77:e3:5f:62:ff:a6:a0:3f:03:e8:8f:60:
c8:88:06:e2:4e:4b:a3:01:62:97:b4:10:80:2f:88:24:42:23:
45:ea:e4:a7:aa:22:15:2b:20:b1:bd:dd:65:3d:4d:59:72:0f:
b4:50:dc:82:bc:82:a0:54:54:f5:95:42:c7:f0:57:7e:e2:db:
23:df:ea:d9:52:85:c0:14:b3:41:4d:e1:b7:d6:4d:7b:c2:c8:
c8:49:8e:43:db:7b:e7:b9:b5:45:ba:58:14:b3:53:ce:04:b0:
c6:08:bd:69:50:4d:08:d8:51:3b:2d:09:3f:83:c8:cf:85:9a:
e8:af:0b:e9:f5:60:2a:97:e5:d0:ea:98:71:ed:86:a3:ec:2e:
2d:95:f9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:24:15 2025 by rpki-client