Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/qhiL7bExacXUsCTM7Vb9ImRHg8c.roa
File: qhiL7bExacXUsCTM7Vb9ImRHg8c.roa (raw, json)
Hash identifier: S3bNWosVJfDx7XwIB4xM9qZIrywdYlw1VXpMCxOUW7Y=
Subject key identifier: AA:18:8B:ED:B1:31:69:C5:D4:B0:24:CC:ED:56:FD:22:64:47:83:C7
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 019428273DBD2F8E3C1803C023DDF07D37DE
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/qhiL7bExacXUsCTM7Vb9ImRHg8c.roa
Signing time: Thu 02 Jan 2025 17:54:07 +0000
ROA not before: Thu 02 Jan 2025 17:54:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15440
IP address blocks: 45.82.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:3d:bd:2f:8e:3c:18:03:c0:23:dd:f0:7d:37:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 2 17:54:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa188bedb13169c5d4b024cced56fd22644783c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:7b:ec:1e:11:37:30:c9:2a:4f:c3:d5:26:
77:3d:1d:d8:28:81:ec:22:35:74:d5:f8:65:52:56:
dd:98:0b:bc:2d:1d:31:c9:8d:9f:9e:8f:88:80:46:
91:0d:16:06:59:d0:0d:c4:cb:69:c6:86:22:31:f1:
42:c8:4d:60:19:80:f9:8a:9a:bd:0e:65:23:73:f4:
5a:84:61:e1:90:79:56:ed:bd:46:57:d6:e1:c4:44:
53:d0:08:fe:52:92:fc:70:10:62:16:db:e2:21:87:
6e:1e:4f:99:f3:30:bd:c1:2f:43:d6:ee:e8:ee:97:
d0:28:fa:1b:d0:f3:dc:b9:5c:4b:dc:32:2c:03:02:
56:60:7e:74:e5:6e:a1:01:e9:f7:72:b8:13:39:cb:
74:fa:6d:17:bd:42:69:37:10:4b:7c:f4:85:88:6e:
09:76:26:6a:7a:48:0b:7a:d3:96:df:a3:a1:00:d9:
4c:08:39:0d:00:6a:a3:bd:14:61:c1:e7:77:66:dc:
7d:4f:85:39:df:e7:1e:4a:50:b0:18:b8:1a:c5:bb:
61:2c:1e:ba:6b:8a:8a:80:fc:45:74:5b:40:57:69:
44:25:cd:bb:27:7a:6f:88:83:48:8e:b8:8d:84:e4:
43:6b:94:d7:63:45:03:18:0a:47:f4:91:1e:5e:34:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:18:8B:ED:B1:31:69:C5:D4:B0:24:CC:ED:56:FD:22:64:47:83:C7
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/qhiL7bExacXUsCTM7Vb9ImRHg8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:df:ec:00:16:39:73:48:b2:1c:68:1e:9d:b4:7b:15:06:48:
16:0e:f0:22:90:54:db:3b:17:d2:a9:f0:1c:cd:d3:61:da:bc:
7d:8c:c9:61:5f:14:10:61:92:42:4b:f3:08:cc:54:bf:18:ce:
b8:27:bb:92:84:c7:13:74:36:0d:d4:90:30:8b:e6:53:23:91:
b0:92:18:df:0a:39:9f:2c:81:fa:f8:8d:c9:cc:39:68:b3:b2:
50:e3:79:29:d4:2f:53:06:68:ef:c2:15:99:57:30:24:7f:d9:
8b:f9:f3:79:56:d7:16:c4:09:d7:b8:13:d7:3c:be:bb:ca:2d:
2e:36:e2:31:e6:d2:d9:2b:0e:e1:19:2a:f9:06:bc:20:64:26:
cf:9a:cd:01:ec:13:45:d0:5d:5b:8f:8b:d6:12:87:db:53:4c:
79:fc:5d:aa:a7:47:fa:39:29:c5:78:de:d2:91:a6:4d:f9:db:
fc:7f:f6:f1:9f:c4:bc:a4:43:e1:b9:86:c2:ab:3b:78:67:42:
26:45:0a:05:45:d0:c4:fc:78:4a:4e:14:97:c4:a2:29:90:2f:
e9:88:6c:f7:c6:97:a6:4a:e0:e3:1c:f0:8e:ab:0c:e5:09:92:
7d:e7:d0:56:50:e6:b6:68:d8:50:0d:0a:bb:90:3b:db:ce:c0:
a8:46:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:21:35 2025 by rpki-client