Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qqQQvs9nXt1HjpZfeqvOvwFytUQ.roa
File: qqQQvs9nXt1HjpZfeqvOvwFytUQ.roa (raw, json)
Hash identifier: 63Z1XFDv2thWE6305aK6hjX0RMocIGGlkCydM7bw3MY=
Subject key identifier: AA:A4:10:BE:CF:67:5E:DD:47:8E:96:5F:7A:AB:CE:BF:01:72:B5:44
Certificate issuer: /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial: 019422FC0F331B0BD2298D1748C156ED5A13
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qqQQvs9nXt1HjpZfeqvOvwFytUQ.roa
Signing time: Wed 01 Jan 2025 17:48:51 +0000
ROA not before: Wed 01 Jan 2025 17:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48786
IP address blocks: 91.212.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0f:33:1b:0b:d2:29:8d:17:48:c1:56:ed:5a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Validity
Not Before: Jan 1 17:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaa410becf675edd478e965f7aabcebf0172b544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:d6:a1:d8:b9:fb:12:34:d5:55:06:a9:17:
aa:80:9b:c6:58:bc:94:90:27:6b:e2:3f:b1:74:83:
75:ff:f3:7c:4c:55:1c:2a:f8:5e:30:bc:27:8f:62:
58:c2:c9:9b:57:63:3c:a0:e1:9e:3c:3f:4d:30:29:
0b:c1:cf:5b:5b:4a:a5:fd:15:82:43:61:67:18:19:
f1:c0:62:18:93:99:cf:2f:f1:46:eb:08:7f:0b:19:
96:00:de:f2:b4:da:4f:ac:e0:82:d0:7b:ae:b3:35:
95:e7:59:c6:e2:e2:be:37:1e:15:21:a7:f6:79:d7:
b6:52:9b:50:f2:60:ee:6f:e6:ef:54:fd:06:ed:d7:
ec:e6:da:fe:d4:39:2a:99:e8:87:93:73:5f:06:9c:
14:8e:63:8b:16:01:f7:da:ef:0f:d6:7e:e8:50:2e:
c5:92:f4:08:0a:61:eb:9d:b2:09:3a:5d:70:ba:7f:
3a:63:ae:24:ea:5a:cf:e0:77:75:44:7f:b6:9f:33:
26:14:8f:88:d4:e8:8c:8f:38:9b:71:a1:b7:4b:ee:
ad:10:fa:3c:1e:56:23:4b:41:bc:29:bd:32:22:73:
eb:91:c1:29:a7:59:65:e8:d3:f4:6a:b5:4b:ec:eb:
5e:7b:f8:32:11:2c:3d:97:a8:25:7f:5a:5b:fe:75:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A4:10:BE:CF:67:5E:DD:47:8E:96:5F:7A:AB:CE:BF:01:72:B5:44
X509v3 Authority Key Identifier:
keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qqQQvs9nXt1HjpZfeqvOvwFytUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.35.0/24
Signature Algorithm: sha256WithRSAEncryption
56:7a:38:1f:00:44:54:ee:0b:63:ed:c8:92:37:c2:72:99:0a:
ba:09:e7:35:db:78:7e:04:17:15:dc:f7:f7:a3:05:9a:c4:13:
88:0e:67:eb:0b:3f:d0:96:70:6a:96:0d:49:c1:40:0e:79:5a:
a1:eb:f6:f4:d0:aa:83:af:18:d7:b9:09:41:8b:19:e3:71:c7:
f9:e5:10:a9:8a:ab:8a:9b:1c:69:91:24:c9:65:8c:eb:c8:63:
bd:72:0f:58:20:41:6a:45:25:15:76:db:10:e2:f8:8b:35:65:
03:40:28:51:4c:4a:ef:f0:6c:8d:74:77:22:6a:09:1c:90:63:
e5:87:4d:a2:20:16:90:37:70:aa:9a:cc:cc:8b:cb:2b:33:1f:
02:3e:23:cc:d2:bc:d0:e0:19:c7:2b:97:ca:05:b8:1d:b1:08:
71:5c:e7:a6:a2:d1:0f:52:60:d4:42:6b:a0:02:fd:2f:95:d0:
f3:7f:1c:b9:11:b3:d3:5e:bf:1d:bc:e1:d4:7c:01:a1:2a:01:
9f:f9:b1:a0:61:db:03:59:06:61:d8:fc:0a:f5:d0:2a:44:40:
7b:e7:74:2e:ca:9b:30:f0:85:b4:9d:98:24:b9:05:25:8e:b7:
6a:34:5c:96:fd:63:d4:dd:61:4a:25:b0:a7:28:f2:fa:07:9f:
43:4d:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:57 2025 by rpki-client