Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa
File: Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa (raw, json)
Hash identifier: OCq3Y6pgPMMrp5TWkQ0F3uKjszaciJXmNLT1MDQryyA=
Subject key identifier: 43:1E:34:F5:09:3A:19:7E:8D:C1:CB:F0:DD:8E:5A:0C:20:07:26:4D
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 0194258F1469291C354CA52774E921147624
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23467
IP address blocks: 212.32.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:14:69:29:1c:35:4c:a5:27:74:e9:21:14:76:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=431e34f5093a197e8dc1cbf0dd8e5a0c2007264d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5d:be:65:7f:ec:00:3f:7a:ea:3d:d6:44:c3:
14:d4:66:1d:07:91:15:95:f5:8d:69:17:fe:30:cb:
77:9f:cb:65:39:fc:61:f5:6f:9b:f3:cd:79:3b:ae:
06:0e:e7:7a:b9:c7:4c:62:71:79:dc:d1:4a:9f:e2:
2f:83:e3:0e:aa:c9:fe:8c:56:7c:a5:e9:53:c6:b9:
09:60:04:28:d1:97:31:55:79:14:f2:be:67:05:53:
9d:d2:08:0f:32:e8:d8:82:c6:d9:e5:b6:b0:68:3f:
07:12:60:63:70:8c:21:77:53:0c:78:cb:3c:9d:ae:
bd:66:4c:7c:fe:70:c1:0e:bd:ee:4c:18:09:5b:83:
a7:71:e4:17:e3:e5:8d:c2:a9:10:ce:37:bd:0e:78:
9c:e2:10:4f:78:23:b2:57:8d:09:0d:b9:df:39:08:
15:89:ab:1d:77:a0:a5:a4:20:0d:54:76:4a:fa:f1:
2d:0b:54:1b:05:69:2a:b2:5a:bf:c8:5e:05:a3:e3:
a2:4a:32:ff:91:b3:72:fd:a3:bd:ed:cc:df:28:af:
0d:9c:8d:4e:3b:da:fd:4c:25:61:a7:c1:36:dc:88:
0e:0c:0b:28:19:7c:6f:ef:49:6b:e3:fc:65:53:79:
25:c2:08:98:bb:37:e1:d4:98:a9:52:c1:e0:af:22:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:34:F5:09:3A:19:7E:8D:C1:CB:F0:DD:8E:5A:0C:20:07:26:4D
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/Qx409Qk6GX6Nwcvw3Y5aDCAHJk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.0.0/20
Signature Algorithm: sha256WithRSAEncryption
63:fb:0a:a4:69:4c:1d:ac:d6:84:5b:83:5f:9e:f9:4b:e8:57:
b0:b7:75:87:a3:ba:14:1a:84:ac:4e:44:97:d2:95:1f:51:55:
a0:d1:9d:1a:d3:1b:77:e2:34:71:29:84:c0:9a:93:9a:ce:e5:
02:31:b0:2d:76:d7:45:b8:7e:b5:ac:34:56:3c:74:9d:92:ec:
14:c1:2c:bb:72:31:cd:06:44:07:e8:af:7c:f0:4f:7d:1c:63:
3d:ad:7a:1c:76:c2:57:ad:ef:21:28:f2:1e:fd:87:79:a8:66:
6e:e0:98:41:36:8b:83:92:57:bb:93:34:78:d3:b5:f5:3c:6e:
ee:e5:0a:0f:e7:f6:1d:a4:a5:c2:8f:e0:7c:54:29:63:1d:e7:
bc:45:32:3f:ed:65:f7:60:09:b6:6d:85:96:a9:81:50:0c:ee:
2a:f2:78:fd:21:b0:dc:b7:b4:ca:a0:6e:78:4f:61:e4:c9:82:
71:1c:76:fc:4e:2e:1d:29:b4:04:31:d6:a1:54:e8:88:0c:88:
b2:76:ad:f9:e0:74:63:b8:51:a6:bf:63:1c:9b:83:75:1f:00:
7a:3b:18:fb:b6:de:90:a7:2d:f4:66:62:1e:f6:7f:d7:50:41:
52:56:67:bc:d2:e8:ba:65:83:37:e6:a4:86:2d:5e:9c:7b:8f:
c7:8f:d8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:41 2025 by rpki-client