Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/QPlqMiWOSf78xj2rqyZ0eOqZBss.roa
File: QPlqMiWOSf78xj2rqyZ0eOqZBss.roa (raw, json)
Hash identifier: MCmgXObXIkG1ZJluYAKWR91hwdQnUbKcsINqcTuBS6o=
Subject key identifier: 40:F9:6A:32:25:8E:49:FE:FC:C6:3D:AB:AB:26:74:78:EA:99:06:CB
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0194266BC3BC0E5B4C0D776DC31B293F730C
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/QPlqMiWOSf78xj2rqyZ0eOqZBss.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.146.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 12:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c3:bc:0e:5b:4c:0d:77:6d:c3:1b:29:3f:73:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40f96a32258e49fefcc63dabab267478ea9906cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6d:6d:8d:e8:4c:47:fa:cf:f7:d1:19:c1:0e:
b4:6c:56:f1:a4:7a:15:93:89:ca:68:fb:8c:ab:82:
bb:35:37:0c:9e:bc:9d:d8:df:3a:df:cc:85:6a:45:
bc:5d:57:13:02:ed:4e:d3:c5:c0:a2:5d:63:e1:97:
7e:f9:77:2f:a4:2f:f0:06:f2:ad:aa:57:61:63:42:
9b:e4:3c:43:02:59:49:6e:54:66:b2:a5:42:07:60:
35:ee:6a:c9:13:a5:28:b4:34:07:ac:6c:3e:11:54:
6e:d1:64:8c:f8:0d:e7:96:10:e5:fa:23:79:ee:43:
3b:dc:1b:18:99:be:d2:a4:cc:3c:31:8c:37:cf:dd:
2e:0b:99:82:6b:f3:8b:e1:b6:bf:fe:c6:c5:39:d2:
95:c9:23:1d:4d:e8:4e:25:e7:bb:f1:bc:28:05:28:
ee:4c:4a:36:29:ab:66:bb:09:55:47:d1:5e:91:87:
9d:5c:a0:fd:7a:92:9a:9e:ca:dc:43:c7:f8:21:dd:
94:27:18:8e:fa:bb:db:30:28:a4:ba:9d:25:af:12:
88:90:77:9e:c9:7b:94:f1:f4:d5:6d:06:59:0b:a1:
69:2b:1a:8f:f3:29:e0:46:12:57:9c:da:5d:ca:b6:
98:d5:20:a2:50:6e:4e:37:68:0b:fa:06:8c:0a:c2:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F9:6A:32:25:8E:49:FE:FC:C6:3D:AB:AB:26:74:78:EA:99:06:CB
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/QPlqMiWOSf78xj2rqyZ0eOqZBss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:06:55:6a:d7:c4:69:86:55:fa:8d:f3:88:42:9d:76:38:49:
a5:d6:55:26:e7:09:03:ae:04:4b:b6:07:6e:1c:5b:7f:4b:60:
64:59:9d:87:29:a0:f6:45:81:4e:c6:ad:81:39:ce:ac:62:31:
ff:ba:55:c8:a9:27:5e:fe:97:2a:78:a8:65:73:e0:53:52:01:
76:43:50:57:4c:77:4b:f6:51:75:9a:c7:bf:6a:38:da:fe:09:
51:a4:d1:c2:97:e8:6f:d1:c9:f0:1a:3a:4c:6e:34:6c:02:df:
dc:1b:8b:41:e7:78:e1:72:92:cd:c1:ff:f6:25:7a:d1:2a:21:
ae:d7:a6:9e:ec:c5:83:dd:a0:5e:d4:ac:69:d2:ac:37:b8:8d:
08:1e:24:cc:65:ab:eb:18:ee:f9:1f:0e:63:80:55:5a:26:93:
bf:de:96:8d:0a:49:9e:5a:c9:c9:8f:fa:95:19:5f:07:3b:93:
23:0e:f9:ed:73:7c:e7:63:f7:0c:3c:6c:38:f8:87:04:4c:13:
11:bc:11:db:8c:3c:52:ec:d9:6d:37:e1:96:ac:82:4f:72:4e:
21:5c:c1:2a:30:38:ab:ce:53:4e:80:a1:ba:68:5a:b7:4e:50:
9d:19:b9:44:37:9f:6f:50:87:26:25:91:62:11:b8:64:6d:6f:
fd:3e:c4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:01:29 2025 by rpki-client