Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/QlJocn28wvFEXminw23W_RvYg-Q.roa
File: QlJocn28wvFEXminw23W_RvYg-Q.roa (raw, json)
Hash identifier: TuI6P0C1sWDSjYEm5lKEkV0hVZxnOrv4ZLbM/9hY/g0=
Subject key identifier: 42:52:68:72:7D:BC:C2:F1:44:5E:68:A7:C3:6D:D6:FD:1B:D8:83:E4
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01942825C36146477AF9E10190FD05C6EE26
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/QlJocn28wvFEXminw23W_RvYg-Q.roa
Signing time: Thu 02 Jan 2025 17:52:30 +0000
ROA not before: Thu 02 Jan 2025 17:52:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30952
IP address blocks: 80.79.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:c3:61:46:47:7a:f9:e1:01:90:fd:05:c6:ee:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 17:52:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=425268727dbcc2f1445e68a7c36dd6fd1bd883e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:ff:3f:0c:23:bc:5c:4a:b4:30:e1:a0:95:
36:3e:26:bd:b0:b1:69:45:cb:c7:df:e4:87:a0:d2:
86:99:04:4d:65:94:b6:8e:0c:cd:4f:f8:ab:12:b6:
8a:48:b1:1e:be:99:c8:36:11:d0:67:8f:1a:d0:72:
df:03:b7:0d:d7:ee:9b:ab:43:12:b0:ab:6a:82:15:
34:cd:e0:b3:9c:a5:df:a9:69:0b:8a:96:eb:76:24:
0a:d4:c9:4b:c2:79:46:28:ee:57:77:4f:0f:0d:d1:
1e:63:6f:db:47:a9:b9:a2:93:4f:41:7b:24:5b:dc:
06:26:eb:d5:95:1e:57:39:1c:a6:ae:2b:ca:fd:1d:
14:76:1f:59:4d:08:f3:81:88:1f:4f:54:fd:10:4a:
d4:51:ed:b9:65:bb:31:04:42:87:4f:09:56:c1:9b:
41:8d:ae:8b:05:75:f8:bc:71:84:e3:99:56:ce:21:
65:17:f4:3b:25:be:6c:42:e1:54:51:03:3c:2f:63:
32:c9:94:96:92:e2:cf:81:1e:7f:18:a9:b4:90:1a:
85:3c:41:06:8e:5e:43:f4:a8:1b:53:3a:83:14:d9:
df:4f:de:28:98:f9:f8:19:c6:b5:70:01:d7:62:cc:
60:9f:f2:20:90:62:9f:99:45:59:f4:85:b1:fd:f1:
c6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:52:68:72:7D:BC:C2:F1:44:5E:68:A7:C3:6D:D6:FD:1B:D8:83:E4
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/QlJocn28wvFEXminw23W_RvYg-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.250.0/24
Signature Algorithm: sha256WithRSAEncryption
01:14:24:ec:a7:05:23:09:ee:24:48:b6:ce:9c:1a:a5:ac:71:
6b:b2:90:d0:31:98:49:57:15:7e:7e:f6:34:71:b8:bd:01:c1:
5b:62:33:92:b2:87:9d:6b:77:62:e9:98:7c:16:de:fc:30:7e:
20:cc:b2:55:05:01:ac:e7:f5:56:5e:a5:9d:38:dd:5b:11:b5:
1f:a0:b3:59:2d:84:d2:55:1f:4a:58:af:37:3b:6d:74:28:2b:
13:7e:00:00:ac:bb:46:9c:72:69:6e:3b:cd:48:ba:33:db:0f:
ab:8d:64:ca:9b:54:b7:9a:f1:5f:c1:bd:eb:a5:c0:47:3e:b4:
91:39:03:03:52:9a:0c:f7:ac:ef:17:fe:00:4f:87:b2:93:e4:
15:f5:44:d3:62:44:e9:43:2b:aa:46:6e:85:59:f7:83:b0:36:
a0:d0:62:46:15:8b:7b:82:d4:cd:93:75:13:9d:54:1d:cc:c8:
d1:5d:82:77:be:48:1f:2f:a3:e3:34:10:82:59:8b:ed:96:83:
5e:bf:ce:da:42:a3:1f:b4:3a:9a:2e:22:7e:61:72:b4:91:45:
ea:9c:d0:48:ad:66:ea:e3:89:e6:c4:22:c4:ce:b0:df:88:b5:
6e:72:f2:75:9f:86:1f:d8:35:3b:10:43:d6:90:f6:8b:62:3a:
ff:c0:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:10:48 2025 by rpki-client