Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Q94BH5e_evr7HQ4su2ifXoZ4hFA.roa
File: Q94BH5e_evr7HQ4su2ifXoZ4hFA.roa (raw, json)
Hash identifier: TEYSE9hxZYHX6ImJdndMipc/uJgWVRLCccwmpbk4E3M=
Subject key identifier: 43:DE:01:1F:97:BF:7A:FA:FB:1D:0E:2C:BB:68:9F:5E:86:78:84:50
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C58108BF7F123B0B0E76FD9F78F60
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Q94BH5e_evr7HQ4su2ifXoZ4hFA.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199705
IP address blocks: 2a12:bec0:450::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:58:10:8b:f7:f1:23:b0:b0:e7:6f:d9:f7:8f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43de011f97bf7afafb1d0e2cbb689f5e86788450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:95:d5:64:2b:33:d9:ff:16:42:e9:f7:8e:
e7:7d:d1:1e:97:4e:76:f7:9f:6b:8d:37:f6:6a:41:
71:ab:e6:8c:41:4d:90:74:d5:61:75:b0:70:87:28:
6e:9f:a8:cb:21:ca:82:5c:6d:08:c1:e8:5d:3b:c7:
77:e8:72:5e:88:0b:38:ac:98:ae:85:4b:60:05:2e:
1d:ed:d5:95:da:e5:83:13:36:93:17:77:ca:e3:b0:
d4:19:01:8e:14:b0:c2:26:14:0a:2b:5b:99:34:cc:
b0:88:6e:9b:49:2c:85:b3:a2:4d:cf:94:cc:18:48:
f9:ad:59:c0:d5:a3:1c:0c:d7:2c:60:b1:da:51:ee:
92:dc:95:3f:e9:6c:9f:73:40:c6:be:88:07:04:ad:
d0:40:59:c2:c9:76:f5:19:29:d0:3b:cc:b6:ef:fb:
a1:6e:8a:84:34:da:a9:0f:6e:59:33:ce:d1:9f:14:
4e:ca:6e:8e:8e:3d:05:8d:a8:47:3b:63:df:b6:f8:
de:61:d9:96:cf:09:a6:cd:93:2e:c0:2a:d6:dd:c4:
33:49:52:d7:4e:69:51:4e:95:52:d9:38:14:c2:81:
50:00:8c:4c:96:d4:cf:af:45:ed:75:47:bc:c6:dd:
3c:82:3f:2d:81:11:21:5d:49:f5:cb:c5:ea:6e:4f:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DE:01:1F:97:BF:7A:FA:FB:1D:0E:2C:BB:68:9F:5E:86:78:84:50
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Q94BH5e_evr7HQ4su2ifXoZ4hFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:450::/44
Signature Algorithm: sha256WithRSAEncryption
5a:89:a1:ee:a1:85:54:c4:e7:97:02:9f:50:15:ae:c7:eb:99:
68:88:76:9c:06:a8:95:70:d6:e6:a5:44:31:c3:e0:5e:71:51:
f9:3b:ce:0b:13:24:95:81:2f:87:59:b2:8c:4a:7d:b4:08:4a:
8b:5e:4d:cb:10:31:be:6a:87:2b:24:d6:62:26:41:bb:ad:6e:
e4:fa:8c:a4:54:c6:cf:e3:e8:2b:6c:ed:91:aa:71:9a:57:e3:
f6:18:f5:22:b1:f6:28:96:6f:1e:9a:8d:4e:ae:1d:0e:ce:5d:
ec:9f:10:62:ad:6f:92:9e:dc:a3:49:6a:1a:70:cb:fc:c5:5c:
88:14:3b:2b:11:3c:0e:a7:9b:93:3b:d2:de:fe:63:ed:10:b4:
97:96:84:db:4a:5b:61:26:6f:9c:25:ad:b3:71:29:a1:30:ff:
15:53:38:c1:95:56:44:87:5e:36:ef:92:63:da:23:98:44:3d:
ad:96:90:78:c9:ce:ac:d0:d0:07:f5:2b:3f:7f:a2:76:a1:b6:
fd:b4:d5:1f:ca:69:45:b1:c0:93:cc:0c:4e:af:06:f9:17:a0:
a3:52:fc:90:be:64:a1:58:39:e1:14:6e:bd:70:4b:ed:e2:2a:
0d:b2:3c:3d:9f:82:2a:59:34:2d:d3:63:34:65:b3:1a:c8:60:
c4:4b:39:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:11:41 2025 by rpki-client