Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa
File: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (raw, json)
Hash identifier: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=
Subject key identifier: 40:A7:7D:BF:54:EA:86:23:2C:54:B0:1C:3B:12:76:D9:E6:31:B3:F8
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 0194266BE9DB70861179E1C61FF99A00A69F
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 195.198.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e9:db:70:86:11:79:e1:c6:1f:f9:9a:00:a6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40a77dbf54ea86232c54b01c3b1276d9e631b3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:bc:f3:9f:13:87:5f:0f:43:ff:b4:aa:a1:
1a:0f:af:a3:a1:6a:4a:f3:73:d2:ac:02:6d:f0:a0:
09:a5:30:e1:dd:d1:6e:e1:af:80:00:db:ce:e6:95:
bf:d6:39:d0:40:74:60:d6:c8:d3:10:7c:dc:bd:15:
39:42:8a:36:7c:6b:be:9a:30:8a:7b:b9:a1:c8:86:
35:bc:30:1c:4b:b8:fd:35:de:ff:a4:da:f8:94:5b:
e7:72:e8:56:01:d7:ee:29:0e:5d:e7:b7:07:24:f5:
f1:7d:35:13:b4:d5:89:d7:c9:d8:3d:db:cf:5c:68:
c2:72:da:3a:28:d1:bf:11:2b:da:77:52:22:e2:9e:
c6:49:7d:ba:06:f0:85:05:09:19:79:ae:6f:9a:21:
40:cb:6b:0c:ca:0e:18:07:d7:5d:d8:0c:87:e0:19:
8f:1d:ab:5f:60:1c:63:78:45:af:8b:db:6f:b4:0c:
f6:47:37:6b:08:03:97:d9:98:81:45:f2:c0:50:2c:
69:65:23:a4:bf:8b:cf:26:65:07:43:92:3d:7c:00:
30:10:eb:42:1d:8e:39:cf:0a:79:40:18:38:de:d2:
ef:d7:75:76:6e:2e:41:a4:c4:f4:9e:a6:89:c4:01:
72:7f:75:9c:09:c6:be:fe:4f:7e:3a:8a:f6:05:42:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A7:7D:BF:54:EA:86:23:2C:54:B0:1C:3B:12:76:D9:E6:31:B3:F8
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.198.52.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:a4:9a:77:ce:6f:68:bd:a0:06:fd:92:6f:a1:04:4f:d8:67:
dc:2e:c6:c9:8c:82:e8:3f:59:ce:aa:46:8e:ef:bc:cf:bd:5c:
24:69:74:d6:46:7c:08:d5:d7:92:e7:52:f0:65:39:7d:18:87:
62:34:01:2e:ae:f0:ac:26:02:a4:8c:8e:65:8c:f4:71:b3:fd:
cb:ab:70:54:b2:09:43:a1:3c:a3:24:94:b6:76:60:a9:58:dd:
b5:2d:4b:84:48:bc:c7:bc:ca:f1:ae:36:38:64:55:c0:81:76:
2f:54:34:fa:12:f2:b0:cd:72:f2:eb:02:54:ec:1d:a8:11:74:
1c:cc:7b:f6:2e:24:0f:3e:46:e7:3f:7a:53:99:d3:32:37:22:
06:81:f1:50:16:f3:1d:c0:ad:55:cf:b4:dc:9e:82:f5:66:45:
1b:41:c3:73:23:33:c8:c9:8b:3a:d3:d2:49:5e:f6:05:74:aa:
8f:6d:d5:f0:af:c9:be:d4:fc:80:a5:e9:17:38:80:90:c6:4a:
86:8a:92:48:75:71:e6:f0:d4:76:3b:17:de:f1:bb:32:e7:8c:
52:10:13:1f:49:9b:0a:9b:7b:a8:37:af:11:4c:7b:7c:a1:a5:
89:9f:4e:1c:b4:77:af:9b:83:7c:23:1f:2d:cf:d4:b2:94:cb:
c7:f4:93:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:17 2025 by rpki-client