Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa
File: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (raw, json)
Hash identifier: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=
Subject key identifier: 41:1D:0A:83:0B:77:1C:2C:23:73:EC:5C:A8:EE:E2:6E:50:BE:AC:A6
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 019422FB90D9DC709BF85646E1CF1C87602B
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa
Signing time: Wed 01 Jan 2025 17:48:19 +0000
ROA not before: Wed 01 Jan 2025 17:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201086
IP address blocks: 2a0f:641::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:90:d9:dc:70:9b:f8:56:46:e1:cf:1c:87:60:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Jan 1 17:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=411d0a830b771c2c2373ec5ca8eee26e50beaca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:81:d2:31:52:5e:fa:f7:bf:9c:1d:23:a6:
2e:71:e2:9d:c6:fe:cf:cc:ad:13:0a:22:b6:0d:b3:
e1:dc:4e:c8:4c:3f:f0:ac:fd:76:1f:36:f1:86:fe:
9b:66:16:22:72:69:6b:a9:0e:3b:c0:8b:7e:17:47:
6c:c6:a4:10:4b:f7:ba:97:d0:e8:44:4b:b9:6c:31:
dd:32:89:db:9d:56:f9:f5:b2:73:39:b3:83:29:83:
41:9e:67:60:d4:02:22:6e:59:51:9e:ed:1f:35:03:
4c:b8:ea:cd:64:82:7f:ff:12:c4:a5:1b:6c:a3:3e:
0a:03:2b:86:65:2e:40:50:9c:b8:43:f5:57:9b:19:
31:cc:79:e5:e6:e3:99:23:a9:f1:5a:0e:41:52:b5:
7c:bf:4b:03:20:dc:cb:f5:04:e5:7c:35:bd:ab:1d:
e1:bb:80:9e:e8:d1:18:25:1b:5c:94:d8:15:03:3a:
bb:61:bd:e2:a9:11:67:81:cd:7d:44:ee:e8:a0:95:
1e:06:64:f4:d4:8d:85:7e:2c:40:5d:61:b1:d0:2e:
ad:25:95:aa:29:2f:66:ba:3e:79:23:99:2c:f0:dc:
c8:e9:b1:c6:2e:47:44:f3:e8:58:e4:f1:71:cc:fe:
d6:ff:0d:a7:60:46:bf:8a:2e:92:5a:27:4f:6e:36:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1D:0A:83:0B:77:1C:2C:23:73:EC:5C:A8:EE:E2:6E:50:BE:AC:A6
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:641::/32
Signature Algorithm: sha256WithRSAEncryption
97:e0:01:07:06:08:06:9c:d5:10:49:4e:23:77:01:dc:33:73:
e8:93:06:a5:f8:08:86:16:aa:fe:58:1b:02:52:ec:8c:de:1b:
93:9c:0f:73:2c:13:50:96:74:0d:ae:f0:c1:20:f7:bd:3e:d9:
de:b7:4b:ff:1e:2d:36:60:72:31:0b:02:03:61:f3:18:fe:5b:
e9:a3:47:4c:c2:33:9d:9e:d9:59:3e:18:61:82:8e:a2:96:4a:
47:ea:9b:75:39:4b:46:b8:72:7d:34:46:d4:d9:1d:fa:3f:cc:
e1:2c:22:33:4f:4d:83:04:4b:6d:a7:67:89:16:cd:07:94:e3:
b3:96:06:2b:87:18:09:ae:d1:60:8e:e2:ed:83:fb:89:58:82:
22:f9:e0:03:62:f6:2e:6f:54:99:82:8f:16:1e:ba:87:0d:9e:
9d:11:60:c4:56:1d:6b:e3:97:57:31:b0:28:b4:69:19:bd:11:
27:d5:f8:88:69:a9:50:6b:f5:70:00:c5:fa:79:7f:14:3a:b2:
7e:68:eb:b5:c9:0f:f7:aa:cc:4c:eb:f1:0d:8a:e2:c3:22:83:
68:28:cf:f4:52:43:d4:84:0b:0d:bc:a7:0c:d9:c9:de:0e:9e:
16:5b:16:4f:a8:59:a0:6f:ba:93:0d:5d:b9:1c:a3:cd:b8:cc:
f9:56:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:52:48 2025 by rpki-client