Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/QskXpCpWaerncmB5Tx33KABcmDs.roa
File: QskXpCpWaerncmB5Tx33KABcmDs.roa (raw, json)
Hash identifier: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=
Subject key identifier: 42:C9:17:A4:2A:56:69:EA:E7:72:60:79:4F:1D:F7:28:00:5C:98:3B
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 01941FFABA9223351910F57F6721A9678E02
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/QskXpCpWaerncmB5Tx33KABcmDs.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60939
IP address blocks: 2a13:5880::/30 maxlen: 30
2a13:5884::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ba:92:23:35:19:10:f5:7f:67:21:a9:67:8e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42c917a42a5669eae77260794f1df728005c983b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:a3:85:bb:6b:e2:17:fc:9c:e0:70:53:4c:
bd:98:cf:d8:6c:52:33:a8:ef:89:88:f3:71:d6:31:
3d:79:08:a4:a5:b8:de:6e:af:53:04:c5:82:10:c6:
06:0f:6d:77:e9:67:7e:ef:a1:63:51:a1:81:9a:6f:
66:21:e7:61:d2:c0:59:8a:d6:88:70:64:9b:b5:6e:
21:80:fe:35:0d:42:76:8c:10:84:45:72:84:5d:c9:
0a:d7:61:6c:87:bf:d1:49:0c:00:63:33:a0:87:7a:
1b:13:b4:aa:85:9d:de:f3:f8:18:79:8f:69:fc:fc:
38:a5:7f:18:f8:ef:9d:22:19:3e:1a:47:b3:91:d0:
30:ee:d7:2c:02:50:64:ab:4b:1f:64:63:de:73:f2:
be:2e:1a:e5:11:80:67:a3:e4:5b:76:c1:2e:14:f4:
fd:c3:2c:ff:64:d2:62:14:a5:8d:50:2f:2f:12:70:
c1:30:25:ab:b4:9b:25:03:97:e6:fb:a0:cf:a0:5b:
9f:f8:b5:ce:a7:92:0d:14:6c:f3:32:38:45:97:51:
e6:f7:35:b2:ba:02:87:4b:4a:e9:74:cb:c4:7f:7e:
e2:fa:80:b1:76:53:c5:54:95:cb:f3:ef:2f:2a:09:
9b:d2:67:e9:97:f5:02:26:07:b3:39:47:79:6e:d2:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C9:17:A4:2A:56:69:EA:E7:72:60:79:4F:1D:F7:28:00:5C:98:3B
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/QskXpCpWaerncmB5Tx33KABcmDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5880::/29
Signature Algorithm: sha256WithRSAEncryption
1a:91:c4:3e:ea:ae:ec:aa:ee:ca:92:eb:3a:8a:33:50:41:78:
06:f0:f2:04:f7:13:5d:71:6a:fb:cc:f3:b5:97:eb:8e:15:8a:
fe:da:c8:ba:5b:d8:f2:97:8b:d8:0a:7f:07:89:10:92:51:1d:
97:1b:53:a3:33:88:2c:a6:31:33:1f:56:4f:c5:f5:8c:46:18:
bd:fe:7d:fa:e4:ea:93:4e:58:37:ca:c8:cc:45:35:3a:27:34:
b0:7a:d7:9a:ce:05:99:10:b8:74:a5:30:e5:85:5b:60:1d:9a:
4d:82:5e:16:85:8b:d1:56:28:a4:af:1c:b3:d5:95:f7:52:b1:
6b:fc:36:c3:81:e3:d4:69:50:b9:f3:38:ff:ad:59:25:fb:69:
f4:ef:6f:e3:58:bf:73:b3:70:b0:95:f3:04:17:2b:04:c4:d8:
61:27:f4:66:ce:ed:8f:c0:c6:55:16:2f:ee:21:e1:fa:3a:d0:
ef:bd:3f:5f:80:39:91:5e:85:4c:d4:e3:cb:85:52:0a:d7:38:
8d:14:a6:7e:f5:20:d4:1a:8c:7a:d3:b6:82:47:4b:fb:93:67:
54:0e:38:70:ff:ad:7c:3c:fe:bc:c3:57:e3:be:b8:35:6e:ca:
b3:d0:9f:7c:a6:95:94:14:02:94:43:2c:5e:5a:b2:c7:54:8c:
00:72:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:28:17 2025 by rpki-client