Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Qzv-yyZa_t5KSvpd82pXjgzU65k.roa
File: Qzv-yyZa_t5KSvpd82pXjgzU65k.roa (raw, json)
Hash identifier: 2Ux+ZEoS16pvpBElRLWENi+dUAhU2cszLKyDyiW+S9E=
Subject key identifier: 43:3B:FE:CB:26:5A:FE:DE:4A:4A:FA:5D:F3:6A:57:8E:0C:D4:EB:99
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01942827140844A24BD496B8A8615D2A8C58
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Qzv-yyZa_t5KSvpd82pXjgzU65k.roa
Signing time: Thu 02 Jan 2025 17:53:57 +0000
ROA not before: Thu 02 Jan 2025 17:53:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48883
IP address blocks: 2a0e:46c4:1400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:14:08:44:a2:4b:d4:96:b8:a8:61:5d:2a:8c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 2 17:53:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=433bfecb265afede4a4afa5df36a578e0cd4eb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:18:21:89:42:3e:1c:84:55:2b:5a:54:f7:
ca:1e:98:7d:1c:67:55:db:fc:a2:b3:ce:b9:49:ab:
6c:8a:cd:5e:1a:fb:88:9e:8b:be:c9:45:e9:06:da:
29:97:7f:6c:ec:f3:08:1d:93:3b:8d:bb:26:f3:27:
d0:41:b5:08:5e:f2:c4:cc:2d:f6:44:d8:fa:25:a5:
ee:4c:20:da:a7:97:47:f3:de:7c:ff:7a:0d:1f:00:
75:21:2c:be:90:ca:10:da:a1:da:dd:0f:46:ab:94:
a0:7f:f8:11:8b:43:38:13:82:ff:e6:d5:fc:15:af:
f6:32:5f:51:d4:9c:59:85:83:0f:4e:45:49:05:68:
b1:ee:75:a5:ba:44:d4:da:e4:03:75:c2:f6:0e:e3:
93:ee:cb:28:5e:3a:0c:bc:bd:44:37:f7:59:25:e1:
4f:60:66:ed:4b:39:ed:f0:44:9f:f2:fc:e8:26:ed:
be:8b:e2:78:10:51:9e:39:c0:ff:82:1d:28:b2:d2:
3b:e7:b1:6e:0d:96:64:6c:4f:11:2f:e7:26:f9:8e:
73:ae:cd:96:b1:8f:92:42:7b:75:fe:32:db:01:0d:
12:cb:03:dc:e7:fe:70:75:05:12:94:15:75:ac:32:
7a:8e:cf:e4:38:31:d2:9a:d1:71:bd:fe:46:ca:3d:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3B:FE:CB:26:5A:FE:DE:4A:4A:FA:5D:F3:6A:57:8E:0C:D4:EB:99
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Qzv-yyZa_t5KSvpd82pXjgzU65k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:1400::/40
Signature Algorithm: sha256WithRSAEncryption
9c:04:be:f9:6c:e9:05:49:3a:f2:03:8f:6e:60:1f:31:c6:23:
ce:49:95:b2:18:08:62:5c:6d:33:f5:7e:89:55:84:9a:90:e7:
24:88:70:29:53:e9:b9:41:cb:14:bb:75:df:d5:1b:98:24:6f:
e4:de:bd:ba:4e:b7:01:69:37:5f:6e:0c:05:0a:f3:47:44:a9:
0d:b7:3e:c4:aa:67:e7:d6:8c:d4:24:0d:36:84:dd:63:fd:f4:
b9:44:32:a6:43:19:69:4c:7a:03:9c:38:17:00:e3:e8:e8:56:
0e:b2:03:a3:b1:09:08:5d:43:86:e3:27:9b:e6:ed:2c:f9:34:
7b:f0:f0:a5:58:8a:69:3b:d0:4d:8a:8b:8a:2f:63:4e:92:3e:
c1:aa:cd:3f:d0:50:42:af:7b:a1:57:ab:49:23:50:c3:14:3c:
c7:b8:a9:43:34:e9:d0:e5:a8:7a:f4:ff:0c:0b:36:03:de:b4:
da:3c:46:e6:99:a8:b5:2d:9f:88:ed:f6:5b:0a:cb:dd:a0:91:
b9:17:99:91:cc:b3:c1:46:4c:b4:0e:52:f2:1e:06:8e:c0:90:
2d:ab:e2:97:c1:c2:ff:c0:bd:45:85:ae:a3:1d:c1:53:8c:f9:
78:45:85:bd:1d:a9:98:62:5b:c3:b8:0b:bb:0f:10:a4:25:47:
a1:a3:90:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:31 2025 by rpki-client