Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/QNuVtxOCkP6ptShJW_LgEtc8U3E.roa
File: QNuVtxOCkP6ptShJW_LgEtc8U3E.roa (raw, json)
Hash identifier: GoYMpx4N811JgABiJRx4dBpjrV8ndOKUg755IZS7nEA=
Subject key identifier: 40:DB:95:B7:13:82:90:FE:A9:B5:28:49:5B:F2:E0:12:D7:3C:53:71
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 0194BB4D82DEA63761BBE29968FC9A5A1173
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/QNuVtxOCkP6ptShJW_LgEtc8U3E.roa
Signing time: Fri 31 Jan 2025 07:40:06 +0000
ROA not before: Fri 31 Jan 2025 07:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213685
IP address blocks: 194.62.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:4d:82:de:a6:37:61:bb:e2:99:68:fc:9a:5a:11:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Jan 31 07:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40db95b7138290fea9b528495bf2e012d73c5371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:0d:f4:3d:a0:bb:da:ce:b7:e0:db:64:0a:60:
26:c5:45:cd:d8:06:6f:e9:06:40:56:02:8d:b5:82:
31:bb:ed:e7:9c:0e:cd:07:c0:8c:10:54:47:6d:ee:
82:88:de:a1:bf:40:ce:e6:86:6a:73:82:2c:3a:9a:
5e:e4:ae:78:b9:12:22:65:7f:34:6f:ab:da:81:fd:
1f:bb:9a:04:c3:96:b0:f4:f0:ee:18:b7:ac:29:77:
9d:20:f2:8e:26:b0:bf:cd:44:63:25:11:37:ad:bb:
b1:d2:12:4b:d5:e5:2e:a6:33:89:a2:b6:66:a7:17:
52:e6:61:3d:d5:e1:b7:1f:e8:d2:79:4e:6c:c1:31:
6d:f2:07:40:1e:f5:a9:26:34:39:81:c0:99:3a:27:
89:9e:0d:81:83:2c:81:20:98:81:43:e9:46:e1:a3:
c8:58:e0:4b:e4:7f:c1:eb:d3:3e:07:ce:36:65:ab:
bf:c6:43:12:21:00:2d:e0:b2:7d:83:4f:23:2d:54:
a3:00:12:eb:22:c1:0c:93:f3:5a:84:d1:26:24:3b:
1e:f9:b2:fb:21:61:25:02:ca:cb:c3:ca:6d:e1:42:
68:38:e3:d2:cd:db:52:cc:9b:f1:2d:92:f8:29:97:
4a:b3:75:b3:84:9e:da:fa:45:75:1b:e4:93:5b:16:
9e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DB:95:B7:13:82:90:FE:A9:B5:28:49:5B:F2:E0:12:D7:3C:53:71
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/QNuVtxOCkP6ptShJW_LgEtc8U3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d6:ea:03:58:81:6a:8d:a9:6f:d7:e5:a8:29:af:6b:a8:98:
b5:b3:1e:51:e3:a8:eb:e1:45:7d:51:e1:33:1d:b4:c8:34:7c:
04:75:a6:5e:f1:a6:91:b3:7c:c2:63:62:20:ab:7d:b9:67:0d:
81:b5:60:33:35:2c:61:10:84:07:c4:ef:90:1d:8a:e5:39:6c:
09:de:1e:b2:ff:5b:fc:5c:02:51:28:ab:4b:f5:ed:8d:25:e2:
62:2a:eb:13:5f:d6:f5:32:8a:06:30:f2:95:54:0f:7b:12:a1:
f9:24:fc:d1:6b:58:6f:ed:8e:bd:4a:74:65:b6:b5:d5:cd:c6:
36:94:a0:f9:ca:71:31:85:c6:3e:35:4e:47:64:ef:1e:02:a5:
38:1f:c8:6e:bf:93:7e:ef:69:92:45:21:54:4a:58:2e:09:16:
c4:cb:a0:93:51:ea:18:70:6e:6b:5f:24:14:00:32:8e:35:e3:
91:5f:1e:2e:72:90:4a:3e:9b:d8:24:6d:a0:d2:58:56:2c:5b:
ca:ca:38:a5:e9:4c:d6:89:88:75:09:88:38:50:95:9d:e7:b8:
00:30:fc:05:71:22:88:d6:d6:ca:ed:8f:9b:aa:40:fa:74:11:
f8:0e:9b:ba:95:8c:65:e8:fa:54:f5:4d:3b:a9:2a:d2:e5:1d:
ca:4d:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 16:08:55 2025 by rpki-client