Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/QnsXwvgDL1vpnE_nHW7cZ8l-yys.roa
File: QnsXwvgDL1vpnE_nHW7cZ8l-yys.roa (raw, json)
Hash identifier: VNqFUdRBsRfrCU4DQ7mXN2LJBOfMOJgZg+HVbNE534A=
Subject key identifier: 42:7B:17:C2:F8:03:2F:5B:E9:9C:4F:E7:1D:6E:DC:67:C9:7E:CB:2B
Certificate issuer: /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial: 019423D70C14A6D4342FE7FDBEDFDA5937FD
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/QnsXwvgDL1vpnE_nHW7cZ8l-yys.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5400
IP address blocks: 192.109.52.0/24 maxlen: 24
2a0c:7c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0c:14:a6:d4:34:2f:e7:fd:be:df:da:59:37:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=427b17c2f8032f5be99c4fe71d6edc67c97ecb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:1c:37:0d:5f:31:0d:b2:e8:a2:c8:ff:f7:
d1:c0:5e:b0:d0:45:30:9d:bd:47:9c:ea:5e:b1:00:
05:7f:16:b8:6a:d4:aa:c3:08:ee:e0:6e:85:53:ed:
90:98:2a:67:db:66:b5:25:c1:91:f3:be:da:6f:24:
cb:57:a2:06:c9:c5:12:c5:6d:d5:a2:6f:7d:78:22:
54:2d:86:16:b7:61:2c:5f:d6:e2:b4:5a:34:e4:a3:
90:f2:84:c9:4c:ac:51:24:d6:73:ca:0d:0b:1a:32:
ef:6d:9c:37:72:6d:ed:2f:d1:f6:69:5b:e5:27:b7:
cf:52:fe:6f:7d:0d:92:4c:5d:f6:55:07:25:43:f9:
d8:bc:f3:9b:a3:d5:fc:cf:b2:5c:7e:66:2f:ce:4b:
24:c9:10:b6:0b:e6:71:3a:72:3e:c1:2f:21:d5:ab:
9c:c2:96:c1:a2:da:34:81:9b:c4:bb:21:b1:00:2b:
c9:3d:62:f5:f0:cc:ff:d8:ab:18:e7:e7:de:da:b9:
0e:9f:0f:1a:85:fe:c8:d7:e8:e8:5c:99:e4:89:32:
7a:de:d1:dc:ce:a9:0f:9f:98:f1:af:85:cf:3b:c7:
1d:9e:47:10:8c:34:dd:ef:7e:ec:bd:86:c8:68:77:
12:38:d2:7c:1b:ea:89:df:1c:b5:16:81:08:e4:f4:
80:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7B:17:C2:F8:03:2F:5B:E9:9C:4F:E7:1D:6E:DC:67:C9:7E:CB:2B
X509v3 Authority Key Identifier:
keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/QnsXwvgDL1vpnE_nHW7cZ8l-yys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.52.0/24
IPv6:
2a0c:7c80::/29
Signature Algorithm: sha256WithRSAEncryption
98:48:de:af:70:6d:2b:c4:df:d3:bc:5e:51:12:1f:25:5a:a5:
23:9f:33:bf:8f:8c:6b:a1:d5:11:93:99:ee:fd:ea:6f:7c:b5:
d8:28:ed:7f:2f:8b:8e:47:9c:bc:b5:75:44:4a:38:41:25:d6:
36:11:99:b8:a2:c2:d8:7c:bb:1c:10:0c:7c:3c:7f:40:79:08:
33:13:50:39:3e:25:6e:ca:3a:fa:1e:20:49:6b:1a:3f:4d:03:
6f:98:0e:cb:01:c3:9b:d4:12:7d:4d:c0:73:fc:eb:b3:5d:f9:
73:4d:8b:57:3b:76:ec:0e:d6:85:2f:20:67:cd:21:7c:85:bb:
9d:c1:3c:24:4b:81:23:66:c5:83:1a:46:d3:ca:84:f2:34:e2:
a4:c6:25:3d:ba:55:73:25:fb:79:21:d3:dd:d1:f9:dd:2f:bb:
e4:49:5b:84:13:39:4e:6d:de:da:e4:c9:10:1c:95:8d:20:04:
da:46:12:6e:dc:78:12:cf:c7:da:11:ba:a8:cb:1e:46:c4:ee:
3e:bf:4f:7c:d7:ed:e8:1f:32:d0:cd:fb:48:29:51:9f:04:88:
ef:f7:ba:1e:75:ea:3f:ca:ac:77:e4:26:48:db:fd:e8:48:7f:
a4:9d:c4:7f:94:eb:5c:dd:9d:86:5d:05:b7:52:f0:6c:de:13:
e7:ca:a3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:59:48 2025 by rpki-client