Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/QrSOGH_LL13bmxtsbtKw1YQWiPI.roa
File: QrSOGH_LL13bmxtsbtKw1YQWiPI.roa (raw, json)
Hash identifier: BtD6o4b8L0Ir3CPJyunXO5nZp0ZvlZq4rP3EM7bOxXI=
Subject key identifier: 42:B4:8E:18:7F:CB:2F:5D:DB:9B:1B:6C:6E:D2:B0:D5:84:16:88:F2
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 01942143D29883050579BB99B01514963A77
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/QrSOGH_LL13bmxtsbtKw1YQWiPI.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205207
IP address blocks: 77.104.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d2:98:83:05:05:79:bb:99:b0:15:14:96:3a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42b48e187fcb2f5ddb9b1b6c6ed2b0d5841688f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:87:04:d3:40:6b:d0:3b:07:4f:46:e0:19:
70:78:a0:6f:8c:76:64:9c:cb:3f:c6:8d:73:cc:8e:
10:d4:2a:b7:56:cc:c3:2f:ff:e1:9b:cd:10:06:39:
11:92:b6:02:87:e6:64:a4:4a:39:44:87:68:91:aa:
a6:52:13:fc:30:e2:c6:27:4d:b0:e3:d2:40:1b:f6:
71:7c:9e:12:0a:91:59:0e:22:f6:87:4e:a2:88:6a:
1f:d8:d3:14:34:0f:61:af:e0:b0:63:de:7b:eb:f5:
51:0e:f7:47:6b:c1:ce:01:cb:12:12:11:ef:d9:87:
5b:25:85:72:ce:92:b7:00:b1:7b:ac:d7:ca:16:fd:
5e:2a:91:2e:c2:9d:e5:d7:10:a0:f4:9f:24:31:c4:
c6:f3:4c:9f:84:ea:77:45:f5:82:24:58:51:3c:d9:
91:90:1a:6a:8f:16:b5:78:39:d3:be:1b:fd:97:52:
92:37:6f:d9:68:aa:28:7b:4c:6f:88:54:98:93:76:
c6:5c:8c:fb:7b:49:c5:45:1c:57:89:22:d1:81:3d:
d5:63:ed:b3:8d:cc:79:88:a2:e7:c2:8b:f2:e4:ff:
ff:f4:6a:90:e8:fa:48:b5:8a:fa:41:04:41:da:83:
fe:9b:83:98:5f:c0:27:f2:07:91:94:15:ab:8e:1a:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B4:8E:18:7F:CB:2F:5D:DB:9B:1B:6C:6E:D2:B0:D5:84:16:88:F2
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/QrSOGH_LL13bmxtsbtKw1YQWiPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.104.92.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1e:84:72:f8:f4:64:c7:ed:27:01:95:7b:5c:85:36:d7:b2:
c3:44:26:3b:cb:c4:22:cc:77:d8:73:3e:83:c1:45:4c:ce:7b:
3d:e2:2e:1d:ad:a1:8d:b2:ea:4b:ce:64:4c:03:b5:04:8c:ba:
54:15:fc:dc:8a:95:b6:83:a4:5d:cd:b2:64:6b:d9:6e:fa:76:
02:5a:6d:f2:2c:0f:20:e2:73:37:c9:ac:e0:a8:f9:35:ef:ed:
11:06:e8:eb:47:32:79:28:f8:da:51:26:fa:2c:38:88:ee:07:
54:df:fb:f5:cc:91:8f:ee:4b:5c:ee:52:d6:ec:c4:1c:23:3f:
0f:aa:ca:e4:01:06:9c:50:9a:07:33:cf:7a:d1:71:2d:80:76:
aa:b2:f6:15:7b:19:95:cf:c0:0b:ca:e0:86:0c:e6:c9:bb:e8:
5c:4a:1e:08:5d:62:8e:da:4e:a2:1e:73:fd:f4:c6:6c:f6:78:
5f:01:14:e5:5f:51:41:b7:75:ec:e3:94:04:15:e2:fb:0a:a6:
f2:40:21:79:01:bd:01:ab:df:54:e0:97:db:38:56:30:90:ed:
10:01:5b:57:1b:c1:33:b4:4c:cb:5c:c8:9e:20:cf:dc:e4:f9:
45:69:01:1e:71:2e:df:8c:a4:9d:ef:8f:27:82:87:c1:5d:bf:
92:fb:82:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:09:45 2025 by rpki-client