Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qBejieYPHiXf3qwcnFRqP1oJWow.roa
File: qBejieYPHiXf3qwcnFRqP1oJWow.roa (raw, json)
Hash identifier: BS8LSEZMHgFYhUk+EPbw5h9cw1iidedC/da9stciOYs=
Subject key identifier: A8:17:A3:89:E6:0F:1E:25:DF:DE:AC:1C:9C:54:6A:3F:5A:09:5A:8C
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0195CDAE580A1790B1E98D79CDF1F6CDFFE3
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qBejieYPHiXf3qwcnFRqP1oJWow.roa
Signing time: Tue 25 Mar 2025 14:21:49 +0000
ROA not before: Tue 25 Mar 2025 14:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16589
IP address blocks: 80.71.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:ae:58:0a:17:90:b1:e9:8d:79:cd:f1:f6:cd:ff:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Mar 25 14:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a817a389e60f1e25dfdeac1c9c546a3f5a095a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:75:1f:74:5f:d1:dd:94:55:2e:33:0e:73:
58:48:80:1d:77:56:77:de:fe:8c:1d:40:6f:3a:76:
bc:6c:a1:72:36:27:50:3d:d5:47:63:1d:0f:d6:78:
e9:8b:a2:71:10:0d:66:8b:03:1c:f2:f0:aa:4d:cc:
fb:67:91:6f:fb:72:fb:9e:f5:c1:4a:d1:41:2e:f4:
fd:ba:d2:9a:c8:c7:62:7a:a0:b8:fc:1d:d8:7e:0b:
6a:83:fa:ef:a4:84:1a:42:8b:fa:13:e5:72:c7:55:
07:a8:cf:b7:87:5f:76:ed:c6:4f:bd:e6:ee:8b:a2:
d5:85:72:20:25:61:43:53:21:93:fb:45:53:e5:79:
93:fe:d7:83:bd:39:b3:23:ce:22:5d:1c:6f:39:34:
4f:14:89:e4:4e:03:a4:ce:54:4a:b0:b0:44:c6:e6:
79:19:d4:8c:6a:d7:6f:ca:ac:02:44:59:da:86:2d:
77:08:83:4d:bf:c3:10:85:42:ad:21:be:bd:ae:fc:
22:77:2f:5c:5f:86:7f:90:3d:44:2b:bb:8e:32:05:
db:57:50:bf:d8:6e:c2:47:75:f3:4a:cd:c1:d0:6b:
be:d3:f8:ef:9b:90:7c:6d:b6:1b:de:20:5e:7b:33:
12:a3:87:6a:bf:1e:f9:8c:26:bb:b4:31:a5:63:39:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:17:A3:89:E6:0F:1E:25:DF:DE:AC:1C:9C:54:6A:3F:5A:09:5A:8C
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qBejieYPHiXf3qwcnFRqP1oJWow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.238.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:fe:45:20:56:32:40:76:60:85:6e:4a:e5:a3:56:a1:93:13:
e7:2e:88:20:42:6b:8b:99:f5:98:94:b8:fe:90:76:6c:07:94:
b3:d5:73:ab:80:99:dd:3c:36:48:f7:94:6c:07:98:3a:2a:c9:
fa:96:c4:5e:fe:98:b9:ad:8c:d6:08:d5:11:5a:07:d4:cf:a4:
10:94:10:9a:f4:00:b9:40:fd:90:ac:3e:51:ee:d0:c1:e1:d8:
ed:38:16:81:04:11:f1:d7:ef:b4:b9:2e:02:6a:46:3b:46:0a:
70:3a:34:ee:78:b9:38:1d:f5:70:67:f7:1c:b0:e6:93:76:fb:
8c:c3:ca:c0:ac:97:03:26:41:33:08:38:19:14:95:2d:af:08:
12:69:b3:1a:2c:f8:53:4a:72:f9:2d:dd:d3:a4:f5:37:37:e3:
1a:3e:b7:c7:b7:04:4c:f2:60:52:27:9d:a2:1a:01:23:d6:ca:
b5:bb:f0:28:8d:70:2a:51:a3:99:ac:61:c0:af:51:93:66:9a:
dd:36:60:81:17:0a:50:2b:02:18:12:06:1c:e7:7e:06:38:ec:
be:35:bc:7c:87:92:40:8b:69:c7:13:ff:b6:0d:a8:b2:ab:0b:
c6:b4:db:98:92:49:e8:26:bf:dc:74:74:83:49:05:d1:9b:cb:
69:fc:04:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:22 2025 by rpki-client