Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/QrIH-uboUgP34zCcCX61lbl0xR8.roa
File: QrIH-uboUgP34zCcCX61lbl0xR8.roa (raw, json)
Hash identifier: LlCoPalMuvQYimfom6tiFUuJD5+eUC0Xjsmw5Mikilc=
Subject key identifier: 42:B2:07:FA:E6:E8:52:03:F7:E3:30:9C:09:7E:B5:95:B9:74:C5:1F
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDDAEFE0D382930D5A1A4408BBB18F
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/QrIH-uboUgP34zCcCX61lbl0xR8.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58057
IP address blocks: 2a06:e881:7700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:da:ef:e0:d3:82:93:0d:5a:1a:44:08:bb:b1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42b207fae6e85203f7e3309c097eb595b974c51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:75:ec:7d:1d:d1:73:80:07:ee:fe:12:a6:
82:6a:81:88:73:5e:9b:33:1d:a7:f2:f9:b7:b2:55:
69:96:94:33:7f:3e:6e:c9:96:d4:17:59:29:02:c2:
6c:70:54:e9:0e:c8:33:68:6b:16:90:7e:90:6d:07:
38:68:cd:27:fb:e2:8c:e0:fb:9c:f1:b9:0b:10:af:
7c:19:4a:cf:3e:9e:ce:2c:94:42:39:3a:e8:91:ec:
3e:ef:a9:60:59:ed:bc:e6:96:5a:97:02:fb:05:1f:
35:d5:04:b6:be:43:33:43:b2:f8:8b:b7:8b:8d:9f:
fc:34:3c:e0:ed:0e:d0:c5:12:b3:56:1a:87:bc:c9:
02:68:e6:5d:54:d3:70:14:d5:8b:06:29:20:d3:da:
ba:2d:c0:f7:a0:13:8b:78:62:47:17:59:2c:a0:94:
8e:60:bb:d1:ee:c5:23:af:90:91:18:bf:4f:6a:09:
3e:57:2c:03:a9:6a:58:d2:61:20:2e:e9:88:75:c5:
5f:2a:ca:a2:ff:5d:5f:10:af:48:e8:20:38:2e:0f:
61:05:c2:b8:33:fe:83:f7:33:27:8f:ac:84:ca:81:
67:21:a3:43:15:eb:7e:55:aa:97:2d:c1:24:4c:92:
bb:07:9f:86:b4:a0:c8:bb:c9:4c:af:9d:36:16:6b:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B2:07:FA:E6:E8:52:03:F7:E3:30:9C:09:7E:B5:95:B9:74:C5:1F
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/QrIH-uboUgP34zCcCX61lbl0xR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:7700::/40
Signature Algorithm: sha256WithRSAEncryption
c0:30:c4:7f:0d:b7:ff:3e:0e:10:e1:34:4d:16:b5:13:43:68:
a6:58:96:66:a1:f2:60:af:e6:2c:63:56:a9:f0:68:2e:fb:3e:
43:d0:0c:3a:3f:2a:a9:0d:d4:fe:79:12:2b:ec:f1:57:63:10:
28:d8:68:16:a0:5e:a1:3d:df:5c:a5:7c:1d:6b:c8:37:62:86:
cd:3a:7a:89:84:f6:1c:3c:f1:e1:55:67:ff:ea:a3:be:1c:80:
3e:9d:f0:6c:aa:c0:7e:27:42:8d:ff:dd:45:5d:eb:7a:ba:e4:
79:98:0e:f0:1b:f1:7c:30:fb:5e:d3:d0:18:9c:38:e3:78:59:
b4:eb:81:46:72:c5:c5:9e:83:0e:e2:a0:df:01:48:b0:90:ea:
2a:91:0b:71:bc:a4:fe:ef:19:2c:05:97:3e:bc:ff:8e:77:ee:
49:69:e8:91:fa:e1:9f:b5:0f:09:a6:ae:6c:5f:e2:5b:42:a7:
01:80:ba:eb:71:ee:82:37:c8:eb:a7:a1:73:ec:b5:a2:93:dd:
ea:b0:7e:e7:d2:5c:a1:a6:99:8c:97:49:8d:e0:3e:f8:a4:d5:
3a:1a:0d:b8:12:57:90:77:db:58:41:be:3d:6a:f1:45:a9:89:
ab:3b:a6:c2:89:5d:01:eb:78:f5:c1:32:c1:34:86:e2:f1:70:
e5:57:fc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:44:02 2025 by rpki-client