Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/QczbEnEasBPtVeB0j7ed4Z5MN4U.roa
File: QczbEnEasBPtVeB0j7ed4Z5MN4U.roa (raw, json)
Hash identifier: sUqwVjOZmcM++cyXTD0/dLISqQO4KRPxQz8w/SRG0nM=
Subject key identifier: 41:CC:DB:12:71:1A:B0:13:ED:55:E0:74:8F:B7:9D:E1:9E:4C:37:85
Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial: 0194258E575C282E2935A6B51C0E0CF938A4
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/QczbEnEasBPtVeB0j7ed4Z5MN4U.roa
Signing time: Thu 02 Jan 2025 05:47:52 +0000
ROA not before: Thu 02 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6735
IP address blocks: 194.88.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:57:5c:28:2e:29:35:a6:b5:1c:0e:0c:f9:38:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Validity
Not Before: Jan 2 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41ccdb12711ab013ed55e0748fb79de19e4c3785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:a9:02:15:90:f5:88:3c:4e:af:2a:d0:ec:
5c:41:da:d9:fc:74:cf:36:48:f9:ab:25:fc:11:af:
65:e3:12:f0:8e:c2:d8:9a:33:47:a5:01:80:c1:02:
29:9b:c6:e0:c7:bc:af:36:1a:31:e3:f4:43:00:a7:
e7:3d:83:91:b0:e1:b1:f9:ed:9f:cd:d5:c7:37:ec:
9f:4d:10:52:68:28:34:c6:5b:7b:3d:a0:54:31:34:
c3:f0:90:f6:26:ef:de:55:d3:55:f7:1f:2d:b4:62:
79:f9:52:07:34:d0:57:21:aa:dc:05:55:a5:f3:bc:
1f:9d:c6:c9:d4:39:1a:23:c7:91:10:5c:63:a2:cb:
3d:81:37:61:59:66:27:22:8b:88:4f:42:3f:ba:16:
eb:c5:40:c6:f0:73:06:b8:23:5f:0f:81:05:73:06:
64:09:a7:59:6c:1f:f3:79:64:1f:16:21:2a:12:f3:
54:97:a7:f1:73:78:70:0a:43:4a:79:37:f7:9c:82:
cb:fa:f1:a1:cc:83:06:91:83:eb:b2:61:68:0e:52:
34:6e:91:4d:51:6b:fe:e0:76:5e:1a:07:2a:a6:87:
d9:8c:42:93:e1:fb:bd:75:c2:95:41:c0:1f:73:ef:
41:d0:e0:16:11:e8:96:2d:50:29:3c:88:c6:8a:b6:
da:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CC:DB:12:71:1A:B0:13:ED:55:E0:74:8F:B7:9D:E1:9E:4C:37:85
X509v3 Authority Key Identifier:
keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/QczbEnEasBPtVeB0j7ed4Z5MN4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.160.0/19
Signature Algorithm: sha256WithRSAEncryption
33:41:db:36:ce:18:e0:d2:db:7e:70:50:86:00:c1:4e:5d:d3:
59:c0:a4:a9:3f:c6:47:39:17:d2:a7:9f:5b:e4:87:b8:e2:7f:
d4:9f:d1:ba:bb:1d:c0:19:36:d2:c5:c1:32:8e:e2:0c:1d:6a:
6a:16:80:85:37:a7:22:7f:fb:0c:37:3b:cc:f0:c6:8f:d6:d5:
d7:0d:3c:db:fa:ff:76:e4:d2:a8:da:28:98:ac:69:59:f0:dc:
a2:30:6b:b5:7b:0d:db:48:03:4b:e5:8d:2d:eb:92:9f:10:10:
2f:f7:83:de:c2:05:46:90:75:aa:64:d2:6b:7c:da:33:f5:ca:
1a:26:4b:74:93:09:6d:8d:06:c7:a4:b1:fc:b2:d5:3b:b9:81:
f6:17:a4:2e:bd:9b:34:85:ec:3d:7d:bf:23:f6:89:b4:98:c6:
5e:9e:4c:c4:13:cc:21:e2:6c:4f:16:b0:53:35:63:46:19:e1:
d2:ff:ab:05:39:7f:fd:cc:f8:1e:bb:f8:8e:b7:d0:69:9b:86:
82:3c:23:be:42:fb:10:f1:8c:97:39:41:de:aa:a0:a5:0e:14:
07:2a:c2:60:70:f0:2c:44:43:48:ca:43:b1:b2:de:2c:60:38:
0d:80:42:c5:f9:da:4b:99:8d:7e:5d:54:a6:fc:13:3e:9b:e4:
42:e0:66:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:43:50 2025 by rpki-client