Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa
File: QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa (raw, json)
Hash identifier: bRcFRsu1/yeWRw6CVou2c0H6TdcYO6U68qWIBkemHjQ=
Subject key identifier: 40:28:5E:83:14:4B:34:FB:20:33:86:99:DD:7A:FA:56:17:4B:21:67
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0195DDBFD061984727D79319A19C21FA53D6
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa
Signing time: Fri 28 Mar 2025 17:14:50 +0000
ROA not before: Fri 28 Mar 2025 17:14:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 5.10.214.0/24 maxlen: 24
5.10.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:bf:d0:61:98:47:27:d7:93:19:a1:9c:21:fa:53:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Mar 28 17:14:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40285e83144b34fb20338699dd7afa56174b2167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:61:df:6f:c8:23:32:2d:84:6d:35:2d:85:
4e:89:39:93:a1:af:4e:c5:31:f0:1b:51:77:7d:7f:
0e:51:4f:e2:69:43:df:4f:90:a0:89:30:a6:ea:63:
96:0f:55:68:7c:30:a2:81:47:63:e1:c5:51:46:9c:
98:7e:3d:1f:be:fb:41:f1:60:54:42:04:61:82:25:
d3:37:ea:a9:90:af:f7:9c:bb:11:a5:17:61:1f:6e:
27:14:df:52:66:6a:ec:0e:4e:54:d6:2a:85:c2:0b:
37:f5:23:14:f2:12:28:c5:d0:27:b1:cf:b9:47:70:
25:0e:26:49:bc:95:36:d6:ab:ac:20:6e:e3:08:b4:
52:a9:73:c6:de:d4:99:ff:0e:0c:e6:b3:ed:2d:6b:
61:d8:d6:14:cb:01:4c:f6:50:fb:97:29:4a:61:06:
af:04:5b:8d:49:74:e6:b1:89:6c:2a:db:63:6f:9f:
b5:17:bf:84:7b:ec:2a:99:9a:f5:2f:37:38:63:60:
91:9a:24:2c:81:70:14:84:b9:d6:50:b9:a5:bb:8d:
6e:16:41:87:8e:35:4d:35:21:3e:95:aa:0a:08:e5:
a4:52:16:89:b9:4a:0d:e0:45:de:e0:5c:48:fc:bc:
d5:9c:40:9b:b9:83:21:b6:06:58:7c:af:07:46:af:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:5E:83:14:4B:34:FB:20:33:86:99:DD:7A:FA:56:17:4B:21:67
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.214.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:93:95:c9:17:df:f8:65:03:72:71:ad:8a:8e:83:f9:87:b9:
34:d9:e6:d7:61:89:0b:a8:0f:9b:9e:79:f8:38:50:b3:3f:d4:
0b:63:8a:35:3d:a8:91:44:3f:61:55:1b:34:1c:3e:67:a1:84:
24:81:23:c6:ff:53:ba:c5:18:ce:25:05:79:aa:e6:c6:61:b7:
f6:b6:a4:78:40:81:3f:b0:eb:af:ba:8e:31:a1:6d:8c:62:14:
e9:9b:5e:ef:e4:0b:b0:79:54:54:a2:bd:25:d0:2a:6d:be:86:
e7:9b:83:57:ef:32:24:44:b4:3b:0e:87:3a:35:72:99:29:8c:
73:25:1e:44:b0:15:01:6d:78:44:e3:dc:ab:00:95:06:d0:6f:
4b:87:9c:ae:03:c9:91:62:83:05:be:b2:b5:7d:94:86:25:63:
79:fa:78:bf:1d:5e:47:a9:51:74:5d:5d:2b:ac:6b:71:10:8f:
fd:f1:e7:1d:03:87:32:a9:7d:d1:9a:de:cc:f3:78:eb:4a:b5:
73:78:16:c7:71:06:5f:7b:52:e1:05:3a:88:c3:ca:94:98:fd:
5b:4d:43:55:69:f8:21:56:d1:df:17:b6:94:60:ed:58:75:b7:
21:e3:e8:c3:6b:16:d0:fd:1c:65:b7:54:b6:cb:10:e3:5e:39:
1c:e6:0d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:14 2025 by rpki-client