Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/qqV2GYRrmbyUVqWNJgyRU1ckeZ4.roa
File: qqV2GYRrmbyUVqWNJgyRU1ckeZ4.roa (raw, json)
Hash identifier: c1XQtreZPdPfIPdsWXkoKiXRjwhEMOyVYtqVV4vEo5E=
Subject key identifier: AA:A5:76:19:84:6B:99:BC:94:56:A5:8D:26:0C:91:53:57:24:79:9E
Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial: 019425FDD00AB33D72C288D1FE1D45D70763
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/qqV2GYRrmbyUVqWNJgyRU1ckeZ4.roa
Signing time: Thu 02 Jan 2025 07:49:38 +0000
ROA not before: Thu 02 Jan 2025 07:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15510
IP address blocks: 45.158.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d0:0a:b3:3d:72:c2:88:d1:fe:1d:45:d7:07:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaa57619846b99bc9456a58d260c91535724799e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:55:a4:36:8d:3f:14:01:2d:ba:d5:3b:49:
bf:c3:22:ea:1c:0c:90:7f:e8:44:aa:03:47:e5:f1:
bb:ed:f5:09:ab:e7:27:a3:00:7e:ce:ea:f3:8f:ff:
cc:9d:b9:c9:d2:b2:77:81:c8:75:e2:cd:44:64:6e:
23:13:6b:9e:7e:d0:3e:ae:05:cf:ca:46:79:7d:07:
73:98:8a:55:32:ea:45:23:c2:28:f7:d4:67:28:ad:
68:fa:53:59:7f:20:d0:4c:57:47:af:e9:ca:ac:31:
e9:b3:5e:e4:f1:be:c0:ba:5f:21:2f:79:a6:8d:79:
5a:f2:93:c6:e0:63:17:54:58:c5:dd:1e:7f:e8:03:
9e:46:66:3b:8a:ec:87:b5:0f:32:0c:d6:e9:b7:dd:
56:d7:74:70:83:0b:19:62:57:73:c7:51:4e:5e:b4:
cf:9e:62:00:87:5d:ec:d4:22:f4:35:8a:e4:6e:97:
62:93:ac:00:43:ca:57:e5:88:c2:1a:e3:84:3b:28:
fc:cf:b8:e2:62:ec:07:10:0e:42:32:d1:41:41:9b:
fd:9c:da:a7:34:49:f3:a4:14:40:13:74:0d:9d:21:
f3:13:f7:72:88:00:58:d4:70:4b:e6:c2:49:b9:32:
84:68:c9:72:1b:a5:bf:7a:03:6e:10:01:9e:81:f5:
74:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A5:76:19:84:6B:99:BC:94:56:A5:8D:26:0C:91:53:57:24:79:9E
X509v3 Authority Key Identifier:
keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/qqV2GYRrmbyUVqWNJgyRU1ckeZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.164.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:e3:93:ed:c6:ae:f4:f7:a8:e9:39:67:d2:db:f3:f1:3d:a6:
92:ec:e6:90:9a:b3:a7:f2:b3:b7:4f:49:23:7c:ce:b5:a3:20:
5a:1a:da:ad:21:d7:0d:5c:a9:dc:fb:25:46:eb:59:c7:2c:42:
6a:35:df:de:87:3d:9f:f5:72:63:c7:0a:35:cf:27:d2:56:9b:
8b:0b:6f:ff:dd:72:ec:9e:10:f3:48:b1:b1:7a:9b:df:c6:7e:
56:5b:1a:7b:64:7f:6a:87:d8:fb:6e:7c:85:2e:2d:6d:1f:c1:
f4:d3:32:41:d5:e8:a4:c3:f1:fd:b3:c3:2c:cd:25:9f:bb:5d:
f0:75:53:04:a6:86:7d:12:f6:b8:1f:cf:d2:23:04:4a:8c:82:
4d:cc:61:44:c2:43:0e:92:76:42:c3:f9:dc:b1:87:77:60:69:
8f:b8:e3:d9:84:ef:62:1f:22:2e:d0:b1:2f:4c:18:53:6c:42:
1d:dc:b5:8b:f0:5e:ee:f7:38:2f:dd:be:c6:84:45:c0:4b:d0:
57:ef:23:63:65:16:60:09:fc:1c:b0:78:06:17:ec:1c:46:9c:
c0:28:54:7e:c7:6a:38:86:a0:fe:d3:e8:d1:00:e2:19:1c:62:
6d:78:1d:ae:ee:70:b8:a3:2e:9f:23:8e:39:df:61:04:6a:6b:
0f:9c:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:56:49 2025 by rpki-client