Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/qiz-f9e8_qagVo454Qf-usEmhyI.roa
File: qiz-f9e8_qagVo454Qf-usEmhyI.roa (raw, json)
Hash identifier: 0k1gLPvcIoWvEOFBnscDSuywq30yMwZrPLJ7ynVOwEs=
Subject key identifier: AA:2C:FE:7F:D7:BC:FE:A6:A0:56:8E:39:E1:07:FE:BA:C1:26:87:22
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 01942825AD2189A3D6B45B4BC399BA3E4C57
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/qiz-f9e8_qagVo454Qf-usEmhyI.roa
Signing time: Thu 02 Jan 2025 17:52:25 +0000
ROA not before: Thu 02 Jan 2025 17:52:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211826
IP address blocks: 80.83.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:ad:21:89:a3:d6:b4:5b:4b:c3:99:ba:3e:4c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 2 17:52:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa2cfe7fd7bcfea6a0568e39e107febac1268722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:e7:f1:a9:3a:20:f2:24:17:62:be:3c:c6:
5a:57:d2:0b:06:11:02:fe:f5:7d:2c:3f:8f:37:1f:
9e:41:ca:3b:cf:09:88:e4:b2:d3:d6:a7:06:dc:42:
cf:04:83:09:c7:28:90:62:17:b3:04:f1:3a:b3:5e:
93:f9:b0:c6:7a:93:ac:f0:1a:dd:13:e1:a6:3a:8f:
ac:81:e8:7a:87:ab:24:c7:42:7c:49:4a:4a:56:c3:
d4:73:b1:c4:dc:59:d3:4c:f1:ed:e7:d6:20:15:fb:
45:7b:d8:3d:ae:41:df:c6:7a:ab:ad:20:e6:1f:05:
cf:28:7f:0c:b8:f0:0c:3b:0d:ca:46:90:f6:a9:42:
2a:dd:2f:ad:28:6e:8d:af:3e:a6:a7:58:28:a0:e5:
53:b8:a8:81:53:ff:0d:f4:b2:6d:1e:b6:0f:73:39:
d3:c0:bd:f3:42:69:64:53:c7:78:d3:df:8a:14:e7:
07:bf:dc:7e:5b:fa:62:c3:b0:67:60:29:21:07:9f:
d9:4c:ee:96:23:79:4c:46:d5:9e:a6:23:14:a2:fd:
26:76:58:00:9f:fe:eb:7d:3d:50:25:80:c3:d8:0a:
32:3e:05:00:8f:8e:f7:88:80:d2:cb:97:1c:84:af:
be:2f:95:bd:37:5f:c9:bb:ca:c7:14:32:41:78:9d:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2C:FE:7F:D7:BC:FE:A6:A0:56:8E:39:E1:07:FE:BA:C1:26:87:22
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/qiz-f9e8_qagVo454Qf-usEmhyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.91.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:23:a1:e6:b0:67:fa:47:37:db:58:99:d4:02:45:88:f1:49:
d0:f5:ec:e0:18:61:8b:a0:64:e7:ab:14:2b:a1:5f:65:b4:4e:
0b:ac:d3:89:73:72:8a:5a:ae:15:84:d1:f3:70:c0:f8:53:4a:
69:12:60:36:38:0e:af:15:ee:25:6a:a4:82:02:95:51:52:2b:
d2:77:a1:3a:23:a6:82:21:af:cd:23:f9:ee:d0:e8:a6:bb:71:
16:f9:83:29:7c:43:b1:15:a0:81:de:cc:85:18:f2:b2:8b:cc:
99:9d:36:53:cc:80:db:05:4e:7d:ca:7a:a2:8e:e1:7f:a4:e7:
9d:64:52:8e:62:f1:82:54:e7:85:d9:8f:3b:8a:48:1e:d6:6e:
f3:cc:80:39:b5:e8:a5:59:bd:35:39:25:a6:f3:6b:db:a9:86:
6b:f3:3e:34:6a:ad:6a:ca:ad:fd:49:32:bd:84:ef:b5:fd:23:
8d:49:3d:76:be:08:43:3b:ed:a1:bb:9c:97:26:90:3a:b5:04:
23:30:b5:dd:75:c5:ad:26:a1:ae:83:6f:63:c7:39:77:8d:9f:
47:bc:ad:df:00:64:72:b2:9a:f8:43:2f:0d:1c:df:1c:bb:00:
00:79:ab:29:cd:5e:6d:48:d2:28:83:94:38:1e:d4:04:22:6e:
10:9d:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:34:06 2025 by rpki-client