Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/q1r-kgfbVidNcGbxwm5Lfbx8idQ.roa
File: q1r-kgfbVidNcGbxwm5Lfbx8idQ.roa (raw, json)
Hash identifier: XO5fotFJ+du20eg1ObsZCqOM3JLAQslX928MaBxUf9k=
Subject key identifier: AB:5A:FE:92:07:DB:56:27:4D:70:66:F1:C2:6E:4B:7D:BC:7C:89:D4
Certificate issuer: /CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Certificate serial: 019423D6FEC9C74827F6134C4F485A01C812
Authority key identifier: 12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/q1r-kgfbVidNcGbxwm5Lfbx8idQ.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208086
IP address blocks: 78.41.47.0/24 maxlen: 24
2a06:11c0:3::/48 maxlen: 48
2a06:11c0:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fe:c9:c7:48:27:f6:13:4c:4f:48:5a:01:c8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fadfe291defc56f9479e2e7d21b5397cfa2b64
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab5afe9207db56274d7066f1c26e4b7dbc7c89d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:3e:6a:03:22:cd:65:8c:8c:72:fe:59:54:
38:de:df:2d:47:90:f6:f5:7e:b7:bc:5b:e7:5c:72:
38:f7:3d:9c:66:eb:c1:f7:50:a0:14:a6:1b:97:f5:
c3:b4:d3:b5:25:58:bb:be:e4:1b:96:6c:a1:2d:32:
2e:d6:87:db:50:ad:2d:22:e0:3d:ac:41:e1:1f:31:
f7:1b:e3:b1:56:f7:71:08:7b:11:50:db:83:4e:3d:
5c:a8:d3:48:39:f0:ef:92:ef:99:d1:56:5b:9b:24:
3e:e5:5e:77:d1:aa:06:60:fc:d6:b2:64:59:ed:3a:
8d:8e:74:7f:91:23:23:db:39:f8:95:35:6d:fe:f6:
16:73:bf:0e:da:eb:7f:70:28:1e:ac:4c:fb:ee:1f:
36:0a:0d:bd:05:14:4c:49:96:8d:81:70:d9:39:03:
8b:54:15:ec:00:d8:c9:99:6e:fa:3d:4e:9a:a0:73:
52:8a:0d:ad:42:ae:0d:12:33:cf:63:78:cf:e0:1a:
29:4e:0f:fe:3b:56:14:ee:89:3d:6c:c4:b2:ea:77:
27:a0:c7:97:7a:c4:0e:bb:c7:b7:69:b4:c6:2e:d8:
02:f1:1a:d0:b9:5f:f2:13:8f:b9:80:d4:aa:8a:20:
71:89:02:36:1d:4a:30:64:95:2f:9b:80:56:42:d3:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5A:FE:92:07:DB:56:27:4D:70:66:F1:C2:6E:4B:7D:BC:7C:89:D4
X509v3 Authority Key Identifier:
keyid:12:FA:DF:E2:91:DE:FC:56:F9:47:9E:2E:7D:21:B5:39:7C:FA:2B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/q1r-kgfbVidNcGbxwm5Lfbx8idQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/81de07-8481-4d83-82e9-a3471774157b/1/Evrf4pHe_Fb5R54ufSG1OXz6K2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.47.0/24
IPv6:
2a06:11c0:3::-2a06:11c0:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:13:81:55:f8:2f:e3:46:be:c1:2d:ab:d1:d0:5c:4a:08:37:
73:31:ef:9b:93:68:30:b3:5b:42:4f:12:a7:63:ce:34:38:da:
19:a2:2b:af:a0:51:31:24:57:81:f1:bf:4c:70:13:a2:21:6e:
a7:72:44:07:f8:40:89:1a:b6:ea:f2:a2:dd:7d:f2:d6:47:09:
81:14:22:d7:0d:96:e8:9f:19:96:ef:75:7a:fe:2e:94:e1:b7:
2e:41:54:6e:11:e9:d1:ec:72:ef:95:c1:5f:13:1f:98:dd:34:
18:af:34:26:76:0b:b5:06:3d:83:ad:e1:aa:64:eb:7a:ec:ea:
8e:8e:75:73:c1:ab:bd:32:a3:cf:78:37:fb:81:ac:52:ea:e6:
56:eb:81:de:57:3c:12:88:fb:28:c7:62:25:44:ad:86:a5:62:
9c:56:53:ef:a6:62:28:23:9d:66:84:ec:b8:19:c8:4d:e4:c2:
3e:5c:67:e4:25:88:89:d9:05:27:dc:63:f6:06:9d:26:35:1a:
41:c1:5d:d8:f4:eb:6f:7b:28:e3:b7:62:e9:90:13:36:b4:47:
60:1b:ca:8a:35:ef:a0:e3:31:c8:f1:69:86:05:b5:2f:b0:1b:
06:b2:7f:d3:6f:28:6f:73:45:bf:d5:3d:a6:16:fa:96:a7:24:
67:ff:c9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:27:56 2025 by rpki-client