Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/Q8iIFORrHQ7CVyF0u573RC5AZpM.roa
File: Q8iIFORrHQ7CVyF0u573RC5AZpM.roa (raw, json)
Hash identifier: Ui1Waa5hGdzZs2TY0/Jb8NUdFKitTzOn1OfpI/V2JIY=
Subject key identifier: 43:C8:88:14:E4:6B:1D:0E:C2:57:21:74:BB:9E:F7:44:2E:40:66:93
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 0194258F4D5D5B2EBD6D10E61F8A333FB12E
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/Q8iIFORrHQ7CVyF0u573RC5AZpM.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56582
IP address blocks: 46.235.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4d:5d:5b:2e:bd:6d:10:e6:1f:8a:33:3f:b1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43c88814e46b1d0ec2572174bb9ef7442e406693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:dd:53:f0:a9:08:f3:3f:5d:61:46:0d:9d:
ee:a3:54:ba:e3:37:7b:9d:e2:2a:01:b3:99:ca:ec:
65:28:70:33:45:f0:94:52:fe:22:dc:6b:c3:7c:ba:
df:8c:65:f1:b9:e9:19:7a:40:bc:aa:96:55:eb:b0:
cc:e9:19:65:9c:98:52:64:5d:f2:b4:3d:06:3e:cd:
b2:52:2e:97:6f:8a:76:47:af:3a:f7:4a:42:76:2c:
cf:c5:cd:e9:a3:9b:d6:9c:be:8d:4f:59:d7:8d:82:
4e:ec:d8:83:fb:c8:4c:f0:ea:6b:ef:63:4a:f4:72:
a8:5a:62:65:16:97:5c:e1:31:e2:db:62:4a:e2:76:
c2:4a:be:3b:87:4d:28:eb:08:1b:82:bb:a8:2d:87:
e7:34:de:88:30:e5:44:06:4a:65:2c:5b:2e:84:7e:
b5:af:91:14:b9:a4:b0:c8:2c:be:c3:b6:90:a6:dc:
ba:99:5c:35:ae:b8:a4:e6:8f:8e:2f:c7:67:23:be:
ce:8f:2e:48:66:a4:67:72:90:f1:31:49:d0:4d:70:
4f:8f:7d:f0:f5:83:d0:e0:24:a3:59:44:da:d3:ce:
f5:f7:05:04:5c:7d:ae:ca:9f:3e:7e:59:12:99:a1:
76:35:d5:70:16:97:c4:89:00:99:f3:a5:d5:3c:7e:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C8:88:14:E4:6B:1D:0E:C2:57:21:74:BB:9E:F7:44:2E:40:66:93
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/Q8iIFORrHQ7CVyF0u573RC5AZpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.14.0/24
Signature Algorithm: sha256WithRSAEncryption
62:28:80:ac:86:8a:ca:23:30:fb:75:de:fd:00:f4:e7:57:a0:
6d:85:f4:ce:1e:b9:89:5a:62:33:19:31:64:b3:2b:c9:c9:7c:
43:fc:0a:a6:e5:de:f6:5e:53:77:fa:94:69:78:48:58:56:f5:
85:2d:50:9e:f5:28:83:27:35:83:46:0b:74:a2:3b:00:e2:61:
f0:1c:69:5f:10:5f:ea:3b:c7:d5:e0:92:1e:23:60:d7:b4:a8:
8f:03:2a:0e:88:00:fa:a9:d2:dd:a6:07:c9:e8:5f:e2:a0:6d:
d7:32:ff:bb:8c:ef:41:8f:d4:ea:26:1c:55:36:41:3b:97:84:
fe:ef:2c:52:0d:bc:c5:4b:7a:ea:58:61:d1:6e:5e:e9:22:09:
7a:d3:ca:b3:76:d7:51:82:e8:6b:52:df:c9:b0:84:e0:03:af:
9d:a6:07:f2:28:7d:a1:63:8e:d6:39:fe:14:3e:9e:d5:d4:45:
2d:c4:76:3b:db:cc:68:c7:68:f3:79:4e:38:14:16:27:90:17:
b5:5d:93:b5:4c:5c:74:9d:5b:f0:da:39:95:0e:4c:63:f0:da:
01:1c:fb:ea:bb:59:d0:a4:b9:3e:4b:33:4c:50:df:a1:69:d6:
d5:04:b9:61:69:aa:d6:f9:62:23:2a:33:a1:6f:81:5a:8c:6f:
a9:6d:91:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:27:08 2025 by rpki-client