Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/QsCDFSI-l5JC6to_qrNHYHmqg7g.roa
File: QsCDFSI-l5JC6to_qrNHYHmqg7g.roa (raw, json)
Hash identifier: BEriwV3dh0T3KvwWaeXKWclUm0zROlAOzgw+CVY7q0Q=
Subject key identifier: 42:C0:83:15:22:3E:97:92:42:EA:DA:3F:AA:B3:47:60:79:AA:83:B8
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 0194221F7E4A939579AE9C15E14D2BA86F44
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/QsCDFSI-l5JC6to_qrNHYHmqg7g.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209389
IP address blocks: 2a01:e901:101::/48 maxlen: 48
2a01:e901:111::/48 maxlen: 48
2a01:e901:121::/48 maxlen: 48
2a01:e901:131::/48 maxlen: 48
2a01:e901:141::/48 maxlen: 48
2a01:e901:151::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7e:4a:93:95:79:ae:9c:15:e1:4d:2b:a8:6f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42c08315223e979242eada3faab3476079aa83b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:9d:e9:b8:3e:ec:56:e6:4f:e3:81:80:69:
2d:05:08:e5:61:68:60:6c:e7:c3:8a:d5:fe:33:bd:
12:b0:10:7f:a9:47:06:f9:ac:b6:28:66:13:07:c0:
17:36:a3:53:20:1d:dd:29:ec:cb:37:a9:df:34:bc:
16:58:ca:be:6c:ba:ca:87:73:06:39:82:ba:f8:c0:
c3:fa:3a:b1:6c:88:7c:2f:96:e3:f8:ea:92:45:3d:
3a:e7:db:5c:f1:3f:5f:93:24:be:d9:29:a2:eb:12:
ad:89:e5:71:ab:61:0b:fb:9d:41:26:95:ad:81:51:
ee:bc:98:72:92:19:f3:ca:7f:03:22:fb:22:b5:62:
b2:42:8f:5f:e4:22:38:f7:e8:39:19:96:ae:4c:d1:
ae:44:54:bb:b3:ab:1c:eb:42:49:79:88:9e:1f:a6:
d6:5a:ed:0f:f1:8d:19:ef:56:bd:44:3c:e2:33:3e:
16:94:5d:5e:73:6e:7e:c0:00:5a:1c:65:80:a8:75:
f2:47:ab:d9:79:54:ae:07:1b:00:a0:68:fa:70:41:
5d:e5:17:04:f6:20:f7:64:43:e0:c5:ea:c9:44:f1:
85:ad:c7:c2:9f:3f:e8:e2:61:4f:7a:7c:7d:6c:63:
1f:40:80:47:8c:40:14:35:c4:69:0c:d4:ad:4e:c9:
32:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C0:83:15:22:3E:97:92:42:EA:DA:3F:AA:B3:47:60:79:AA:83:B8
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/QsCDFSI-l5JC6to_qrNHYHmqg7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:101::/48
2a01:e901:111::/48
2a01:e901:121::/48
2a01:e901:131::/48
2a01:e901:141::/48
2a01:e901:151::/48
Signature Algorithm: sha256WithRSAEncryption
a8:20:39:ce:d3:9c:fd:5a:d0:d1:69:f7:18:b9:88:18:af:bb:
26:83:08:3e:7b:b7:3a:04:f3:33:9b:21:66:a0:66:99:85:8e:
0b:40:1e:ee:6d:db:d2:f8:fc:57:ba:02:39:d0:8e:40:4a:93:
8b:a3:df:eb:05:00:61:86:51:0e:88:1d:0a:cf:e8:95:02:56:
3c:64:f2:0c:18:2e:ef:88:f9:d8:7d:d4:43:16:04:8c:a8:f7:
4a:b7:7d:21:cd:62:e3:63:cc:c8:2a:e3:63:05:5e:c3:98:30:
b2:93:9d:45:c2:0b:9f:5b:6b:bc:9b:71:87:22:c3:55:1b:a7:
e8:7a:20:b5:7a:5f:24:ff:96:03:cc:5a:03:34:b0:c8:7d:d2:
6e:21:55:50:80:93:40:7d:aa:ce:c0:1a:fa:f5:98:de:e2:fd:
b4:3a:69:26:8b:f4:86:c4:fa:dc:fa:73:a6:09:11:9e:e3:05:
f6:89:f2:85:d0:1b:f3:f3:1c:f5:99:97:0e:b1:b9:74:8c:7e:
cc:a9:e8:c9:da:81:13:73:a9:e9:46:7e:eb:a1:6a:cb:0e:2d:
13:34:5c:c4:74:0c:59:38:e6:37:4d:ab:84:46:24:63:bb:a1:
17:30:9c:51:9e:4d:c8:14:01:5d:f7:66:3f:fb:d4:b8:74:e0:
24:53:28:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:05:03 2025 by rpki-client