Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1-QR5nLT5MvEpOZH5eXyrL36_-_Q.roa
File: 1-QR5nLT5MvEpOZH5eXyrL36_-_Q.roa (raw, json)
Hash identifier: Hznv9ygk8+aN2wSsYnSf0TYgwdxyuvHQ0gviCLT8eQA=
Subject key identifier: F9:04:79:9C:B4:F9:32:F1:29:39:91:F9:79:7C:AB:2F:7E:BF:FB:F4
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F3D5FD163EDD8227584FD0559BF9
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1-QR5nLT5MvEpOZH5eXyrL36_-_Q.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60457
IP address blocks: 46.10.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f3:d5:fd:16:3e:dd:82:27:58:4f:d0:55:9b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f904799cb4f932f1293991f9797cab2f7ebffbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:13:ef:ea:49:1b:b1:c1:1a:23:6b:f5:46:
aa:1b:f5:57:57:33:c5:07:dd:91:f4:44:15:e3:5e:
9a:71:eb:3c:e1:6e:fb:83:0a:f2:7f:00:c6:e4:5a:
26:0d:94:9d:73:42:22:1d:4e:59:3c:7c:69:e6:de:
99:ef:75:89:90:e4:51:ae:3b:e2:29:48:46:33:13:
d1:58:f6:9e:64:ce:e3:2b:74:e4:93:16:91:c5:2a:
c6:39:89:1a:5a:cf:b1:83:de:af:88:c9:e6:36:a0:
ef:49:dc:59:95:05:b0:50:2b:7c:3b:d1:d1:56:2a:
0d:69:f1:24:4e:09:ca:ed:b3:3e:71:66:06:ee:68:
48:7d:63:f1:ef:49:cb:93:d3:c0:c9:c5:57:2a:95:
b2:38:98:99:a4:3e:df:d9:08:79:f8:a7:32:90:fd:
21:84:cf:3d:e5:db:17:95:c0:db:ff:89:65:5b:0e:
64:fe:5c:09:13:fd:cf:ab:5e:5d:11:4f:df:72:f6:
d9:89:b0:92:1d:64:a1:08:84:6b:d6:dc:60:7d:dc:
2b:9b:e5:d7:b2:a7:2b:5a:ad:ad:13:66:5b:f6:ca:
cd:ff:8f:0c:0a:43:55:c1:b6:38:27:63:f5:c2:96:
a4:ec:2e:f4:86:0a:d9:68:57:04:7e:bf:ed:00:27:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:04:79:9C:B4:F9:32:F1:29:39:91:F9:79:7C:AB:2F:7E:BF:FB:F4
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1-QR5nLT5MvEpOZH5eXyrL36_-_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.156.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b8:92:94:1b:bc:8e:bc:ed:b1:34:fc:ea:e3:0d:43:a3:cd:
f5:57:b0:47:9d:54:ae:80:b9:bb:16:c0:7b:4c:02:bb:00:60:
47:3e:ca:1b:6e:5c:d0:ea:69:62:4e:de:9b:d7:d8:6a:01:af:
e1:df:0d:3f:de:55:18:74:df:76:6d:b9:99:a5:99:ef:b9:a4:
f4:52:4e:9a:7f:ba:62:28:fb:fa:8a:b0:0f:e7:62:4c:63:17:
de:3e:b7:15:8a:ac:df:29:18:bc:d3:66:c5:50:27:1b:c2:b5:
01:fc:f1:84:a5:5f:21:5d:fb:17:9f:fd:0b:36:52:c8:37:18:
9a:aa:a6:1d:9a:be:9f:61:6d:d9:3d:68:8c:82:50:6f:88:1d:
c3:42:2a:6e:c9:89:99:ff:3d:9b:64:82:b2:e3:0d:31:59:6a:
9c:8c:e0:aa:43:9c:ef:6b:0e:a9:7a:65:85:be:3d:fc:37:a4:
6c:7e:7a:bd:10:fc:1f:57:58:90:09:3b:c1:79:b9:d1:e4:1f:
b9:b1:7a:72:5c:78:00:84:78:57:de:ce:f9:0c:6a:7c:8b:09:
bb:68:b4:32:f5:13:95:56:cf:63:d2:82:c8:93:28:b4:e1:8e:
e3:85:99:d4:0f:6e:b6:15:5a:4a:fc:58:c0:25:89:62:4d:b8:
69:ea:b0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:16:37 2025 by rpki-client