Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QIluDm7oKaw1ilXOzA5lPJpIWic.roa
File: QIluDm7oKaw1ilXOzA5lPJpIWic.roa (raw, json)
Hash identifier: eam1h2CwKVtkNawmgPxByEndwmIuq4QxIB7EL7rERIM=
Subject key identifier: 40:89:6E:0E:6E:E8:29:AC:35:8A:55:CE:CC:0E:65:3C:9A:48:5A:27
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421442C262669E316559B55E99EBEFA25
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QIluDm7oKaw1ilXOzA5lPJpIWic.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215186
IP address blocks: 212.38.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2c:26:26:69:e3:16:55:9b:55:e9:9e:be:fa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40896e0e6ee829ac358a55cecc0e653c9a485a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:d9:ff:c2:21:44:c5:c7:e5:a9:05:34:3d:
f4:48:72:28:6f:60:96:0c:b3:24:49:a1:ab:b6:61:
a1:dc:3c:90:4e:8f:4a:1d:4d:f3:1d:a8:7a:73:c7:
d8:6a:31:34:ac:00:60:0b:55:e2:90:aa:e5:bf:97:
ce:92:08:08:ac:dd:a0:2b:14:ff:8b:9d:de:02:12:
13:63:19:84:f9:11:9d:cc:3d:2c:ec:73:24:31:48:
e8:0d:3b:fb:4b:95:49:83:db:de:c7:1d:91:9d:e7:
a2:ea:13:04:60:1b:28:f4:ac:1a:5c:81:31:79:98:
2b:aa:a6:e0:d2:81:5c:c5:42:8c:d9:fd:a9:c2:18:
1b:bf:92:c2:70:59:f5:53:18:09:55:a1:0d:77:75:
ec:f5:de:c7:6b:96:b9:82:8e:49:3a:9f:8e:96:b9:
e7:13:4b:08:0c:42:44:63:2b:b3:08:fb:a7:61:fc:
ab:b1:69:be:a2:83:24:3d:7f:8b:8c:86:8f:41:99:
d2:70:f5:ba:ca:73:cd:f2:f2:7f:74:86:87:78:9b:
48:4b:97:50:39:6c:79:92:1e:8e:e0:d5:2a:20:51:
6d:81:6a:91:59:66:f8:13:f1:07:33:b5:11:4e:c1:
a8:ef:eb:c5:62:f0:73:f8:28:d3:7c:c9:a5:7b:ad:
09:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:89:6E:0E:6E:E8:29:AC:35:8A:55:CE:CC:0E:65:3C:9A:48:5A:27
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QIluDm7oKaw1ilXOzA5lPJpIWic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.38.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:dd:f0:4b:91:df:1c:25:67:b2:8c:c4:54:74:e9:38:32:3c:
d3:f8:ba:db:84:92:c7:81:ba:14:26:e6:63:d2:a1:5d:03:3f:
8a:c1:51:8a:7b:e2:ad:8f:af:70:26:1a:f3:33:92:98:db:f0:
85:e5:4c:a3:43:de:fa:f4:89:7f:a6:64:b5:6b:79:c1:20:4f:
9b:56:ce:d7:a0:89:20:a0:f1:0b:e2:a2:5c:13:19:7b:52:a2:
36:0f:90:e8:47:2a:cb:72:4f:f2:7d:10:9b:5e:e4:c0:9e:b6:
1d:d0:5a:df:95:e5:08:a8:66:b4:ec:b9:a7:e0:60:d3:ae:10:
e6:bc:8d:98:91:f6:5b:5e:b9:a6:b3:5a:f9:f1:8e:73:b9:62:
61:4b:a8:83:89:e9:ab:d9:15:36:38:ee:89:7a:7a:f8:4e:e3:
a6:6f:2a:08:47:c0:74:56:da:e4:ec:56:1b:68:18:a4:f0:a8:
63:f5:ad:92:2b:09:73:0c:fe:c5:0c:5d:95:58:59:b9:83:27:
1e:60:d9:c5:64:6d:f9:0a:2d:3a:25:05:f2:e1:a0:90:47:9d:
4a:de:49:46:1b:a2:5f:77:ab:47:52:92:98:b5:6b:ca:d6:7c:
f8:18:64:ee:f3:11:f7:91:51:9b:fc:31:14:52:33:d7:32:b2:
9c:7f:4b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:48:12 2025 by rpki-client