Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Qad6wIJmZ83SE5oKYn8XahTuMr0.roa
File: Qad6wIJmZ83SE5oKYn8XahTuMr0.roa (raw, json)
Hash identifier: uNVW4IYWebgKkbmSwS8alvx5J1KlQVfuMzp1TT4hHoU=
Subject key identifier: 41:A7:7A:C0:82:66:67:CD:D2:13:9A:0A:62:7F:17:6A:14:EE:32:BD
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0194258F29420AA95190489B786F782797F5
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Qad6wIJmZ83SE5oKYn8XahTuMr0.roa
Signing time: Thu 02 Jan 2025 05:48:46 +0000
ROA not before: Thu 02 Jan 2025 05:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213889
IP address blocks: 5.180.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:29:42:0a:a9:51:90:48:9b:78:6f:78:27:97:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 05:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41a77ac0826667cdd2139a0a627f176a14ee32bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:f9:97:1d:ee:27:da:8c:ce:8f:82:3b:cc:
1e:46:67:33:bb:a4:b3:31:5c:07:6c:88:d7:54:f2:
9b:ec:11:ef:eb:bd:33:b9:12:1f:2e:75:51:5f:50:
c5:cb:40:a4:3f:6b:f1:ba:5f:ea:08:97:21:b8:34:
4d:b2:2a:1a:45:ce:93:80:c3:19:13:a0:24:89:7d:
2b:90:68:d1:4f:5c:2b:5b:87:b3:de:96:e4:ba:41:
4f:45:f9:44:72:fa:91:3c:f0:c6:b7:49:24:1d:29:
7a:19:b4:ae:1d:76:02:9c:eb:78:1d:dc:09:39:a0:
40:e8:8e:a4:9f:25:8e:fb:69:09:1d:fd:d1:15:28:
5c:77:1a:d8:6e:81:99:f4:50:45:5d:90:1d:0b:7c:
c5:ec:df:f7:f5:20:48:4b:24:c2:b9:8d:e0:3b:e8:
96:50:d8:72:d7:d5:d9:81:db:1b:12:a0:72:50:66:
60:ed:98:05:86:2a:d3:98:f8:a4:d4:97:d2:d0:bc:
3a:a4:be:d3:7d:6e:af:eb:e7:67:c2:a3:0f:4f:46:
c5:16:36:df:0e:ac:e1:0b:dc:d8:44:c7:ee:da:3f:
a0:f5:0d:6e:24:e5:49:cc:89:af:00:d2:df:aa:40:
8d:9e:67:79:c1:77:34:f7:8d:17:d1:49:d2:2f:ea:
75:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A7:7A:C0:82:66:67:CD:D2:13:9A:0A:62:7F:17:6A:14:EE:32:BD
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Qad6wIJmZ83SE5oKYn8XahTuMr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0/24
Signature Algorithm: sha256WithRSAEncryption
43:be:74:7c:40:58:40:6a:4c:c3:03:2d:65:e5:e1:6e:4f:34:
c7:fa:d1:b8:21:dc:a6:ce:0c:69:10:a1:f8:cb:45:85:1d:1c:
43:51:a8:04:01:78:19:c8:e2:87:15:47:07:f3:c7:94:b4:f5:
a0:08:fb:ae:97:6d:e8:34:b9:5a:c6:13:1b:81:7d:2a:8d:ce:
83:41:9e:93:0f:a1:82:2b:d1:2e:90:cf:b9:98:06:eb:14:0c:
46:10:1d:6c:ad:de:99:88:5a:c4:fe:c3:b3:a4:54:65:94:5e:
0d:0d:38:38:db:ff:53:4f:7f:68:14:90:75:9f:ba:7e:ce:70:
b4:24:33:ea:8f:0c:6f:31:11:91:b5:39:71:c6:3e:d7:9a:0c:
3b:2d:04:81:e0:d4:81:f8:dd:2f:7f:f0:d8:4b:33:21:74:5b:
10:53:d8:31:17:12:a1:b3:3d:0d:14:01:17:2e:f9:f1:6f:ee:
9d:45:11:28:54:36:88:43:a3:ee:1a:07:b4:fe:72:42:f9:d1:
77:c7:c2:24:4d:f2:f1:7d:30:30:62:89:54:a2:02:a1:ff:2d:
9e:f6:40:62:31:73:b2:5c:e3:0b:d2:f8:5b:fb:d4:ae:e1:42:
00:05:e3:87:03:20:ae:12:11:b4:17:a9:75:70:30:8f:a0:b7:
7e:b8:a0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:42 2025 by rpki-client