Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/qU-FNtg0qY4hJwKQMawgQqk-7hk.roa
File: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (raw, json)
Hash identifier: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=
Subject key identifier: A9:4F:85:36:D8:34:A9:8E:21:27:02:90:31:AC:20:42:A9:3E:EE:19
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 019425FD9CFC0FA6F0A94810E2DDF797ED4A
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/qU-FNtg0qY4hJwKQMawgQqk-7hk.roa
Signing time: Thu 02 Jan 2025 07:49:25 +0000
ROA not before: Thu 02 Jan 2025 07:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 45.150.224.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9c:fc:0f:a6:f0:a9:48:10:e2:dd:f7:97:ed:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 2 07:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a94f8536d834a98e2127029031ac2042a93eee19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:ff:b6:c3:09:43:38:86:f1:a4:e7:01:38:
f5:a9:74:6d:47:e2:06:02:3e:18:db:12:1c:05:e3:
bc:be:1e:3c:eb:72:13:45:b7:c7:57:dc:42:83:ef:
22:44:b7:69:1e:30:bb:35:bb:1d:26:35:ff:de:a7:
47:07:2a:fe:44:74:7f:8f:2a:05:25:4a:42:cc:4b:
dd:ff:b2:79:ca:98:c6:05:4b:37:12:e3:cd:7e:82:
dd:9d:69:8f:4f:67:25:23:db:26:d2:1e:e1:9b:71:
b5:b9:48:48:0f:c5:8f:2b:80:97:4e:78:9e:88:52:
c7:43:d8:7f:29:79:52:d6:ac:56:8a:cc:01:5b:7e:
91:78:62:ce:d5:45:25:aa:71:f1:d9:29:1c:72:59:
3a:66:78:c7:17:1e:24:61:02:25:50:da:fb:b9:eb:
b5:1c:8c:89:97:59:c7:8d:b2:9d:58:d1:46:36:70:
c5:cb:88:7d:76:36:93:91:b2:91:b1:eb:32:63:3b:
a7:f1:ed:79:15:a0:9d:dc:1c:c8:62:d9:f7:6f:96:
4f:67:f2:c4:20:7e:c8:19:97:75:bc:4a:26:c3:8a:
6a:da:5a:c2:8c:f0:5c:b1:aa:d3:7d:b6:94:57:20:
07:d5:cf:a1:ac:f0:40:d7:31:15:86:7c:dd:4f:40:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4F:85:36:D8:34:A9:8E:21:27:02:90:31:AC:20:42:A9:3E:EE:19
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/qU-FNtg0qY4hJwKQMawgQqk-7hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.224.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d6:90:be:55:df:ef:c3:d6:2b:3d:9d:2b:f0:06:7a:d7:3b:
8d:1d:36:04:8d:c9:bf:c7:c3:29:fd:6c:5d:d7:02:be:fb:74:
d5:c8:b0:88:10:66:c3:ef:ab:0c:73:db:23:4b:b7:16:15:81:
b9:21:86:e2:72:44:e5:73:1b:6e:5b:28:bf:00:f3:21:57:c5:
d7:e9:cf:90:60:9e:79:93:f1:0a:c5:2b:a7:d4:01:14:4f:04:
bd:7f:f0:de:06:5a:53:06:5f:5c:cc:1d:14:b5:6f:e7:7c:ad:
88:2e:ad:e8:6b:fa:65:54:ff:a7:00:08:0a:72:62:db:7d:96:
bf:f5:b4:84:3f:cf:32:93:f5:8b:4c:2f:9f:81:5a:b7:5f:e6:
d8:d4:15:65:f0:a3:7a:0b:33:15:dc:3a:a6:e6:88:5d:be:d8:
4a:84:57:58:e4:09:4b:2e:bf:b0:5f:25:01:92:f2:12:52:37:
d7:2c:bc:af:2d:da:f7:05:ff:92:c3:0c:19:a9:46:7d:52:44:
df:5d:2b:f5:bf:8b:5f:50:30:39:5a:b8:76:d3:7c:ae:5a:79:
a9:bd:a1:c9:b8:b7:4b:ef:32:91:88:6e:a5:37:a6:ce:f8:89:
2e:8d:a8:d1:9f:c7:48:67:91:e8:1e:f6:06:c1:0d:09:d6:68:
35:87:75:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:51:58 2025 by rpki-client