Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa
File: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (raw, json)
Hash identifier: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=
Subject key identifier: 43:07:E6:EE:2C:93:15:C5:05:03:87:0F:F8:11:89:52:BE:A7:54:6A
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 01942143C930859FFABD77D9CF1D458F3D2B
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa
Signing time: Wed 01 Jan 2025 09:47:58 +0000
ROA not before: Wed 01 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21221
IP address blocks: 2001:67c:7f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c9:30:85:9f:fa:bd:77:d9:cf:1d:45:8f:3d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4307e6ee2c9315c50503870ff8118952bea7546a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:9c:35:18:e9:db:83:79:5d:25:81:28:28:
01:0c:ae:df:23:41:fa:ec:56:e9:13:07:87:a7:81:
00:78:e5:5e:3f:bb:b2:09:35:78:66:f0:34:25:4b:
a1:fb:07:c7:d9:60:fa:ce:7e:a8:ad:13:05:68:2d:
26:91:f8:72:a7:43:14:4c:cc:b7:93:ab:a9:92:e5:
79:4e:fe:c6:a1:8d:9f:d9:06:76:6a:8d:67:f6:1b:
81:97:db:5c:03:b5:2a:06:31:70:7f:34:e5:4d:ac:
1d:2c:2d:f9:f0:4d:a9:95:26:84:23:dc:f2:6e:b7:
fb:59:0c:09:ca:b8:df:92:60:9d:a7:e7:8a:8d:66:
8e:98:2e:d2:ac:99:cc:16:5d:2f:1e:6d:b0:18:2d:
88:0f:48:49:61:32:1e:a9:90:d2:c7:7f:aa:39:61:
cd:39:f8:e4:dd:4f:30:c6:b5:26:f9:f3:aa:d0:34:
01:ad:ba:53:1c:0b:e4:67:88:23:c0:1c:fc:de:c5:
8c:8f:cd:b4:66:53:55:11:15:e5:92:db:1b:59:9b:
cf:eb:36:75:59:ca:6d:24:7d:09:5e:27:92:8d:1b:
dc:83:37:a7:76:4d:dd:86:f6:52:1b:83:27:fe:13:
d8:fd:50:74:17:6d:0c:97:78:c1:c2:e4:a8:67:13:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:07:E6:EE:2C:93:15:C5:05:03:87:0F:F8:11:89:52:BE:A7:54:6A
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:7f8::/48
Signature Algorithm: sha256WithRSAEncryption
2c:04:8f:c8:1c:d5:0f:da:9a:38:e2:0a:86:06:b4:8d:3f:21:
6a:ad:46:d8:2e:31:21:5d:8f:13:bc:8d:9b:ff:3f:54:d7:16:
43:4d:fa:e4:8e:ae:2d:d3:a4:f1:0d:5f:ca:c1:3b:c6:2c:27:
69:00:0c:ee:f4:b6:39:cf:57:d2:3e:e3:a8:2b:9c:ec:c0:e4:
03:ca:de:f1:27:ee:bd:e1:64:9c:5c:06:f6:de:5d:9b:5b:04:
ad:19:c4:8d:ba:93:d8:bb:a0:fd:f0:a6:2a:e3:05:50:cf:d4:
b9:89:7d:66:ce:20:ba:81:9c:95:9e:24:75:08:02:3e:58:f2:
92:e8:dc:83:e6:f5:af:0a:98:5a:64:22:ed:8c:be:fc:26:a7:
d3:6d:4b:74:5e:53:7e:62:ee:b6:0d:07:52:b1:b0:ec:e7:4b:
d5:7d:43:6c:2d:e3:50:7d:2d:47:6f:5e:69:20:ee:ea:c3:5d:
21:7b:14:f6:50:51:58:3e:ba:ef:80:b5:4f:2c:b3:36:38:21:
b5:a5:75:47:5e:ac:b2:b2:3d:d6:90:e8:74:34:91:4e:a1:1d:
b6:8c:36:66:3c:75:0f:e3:fd:31:cb:bb:92:2e:09:a6:61:91:
3c:72:a2:d0:7f:c6:67:4a:25:0a:10:a3:90:51:7d:ac:dd:29:
51:af:ec:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:20 2025 by rpki-client