Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/Q0hrJvd7i8cfM3L6pUxrhnE1ZtE.roa
File: Q0hrJvd7i8cfM3L6pUxrhnE1ZtE.roa (raw, json)
Hash identifier: hvO0OTnIGIVunaf7/zvrYJ2CBHE0j5nUl5E6OrK/DUM=
Subject key identifier: 43:48:6B:26:F7:7B:8B:C7:1F:33:72:FA:A5:4C:6B:86:71:35:66:D1
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 019423D6EA21D3BA2F41E414870949FF46BC
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/Q0hrJvd7i8cfM3L6pUxrhnE1ZtE.roa
Signing time: Wed 01 Jan 2025 21:47:54 +0000
ROA not before: Wed 01 Jan 2025 21:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50607
IP address blocks: 91.198.97.0/24 maxlen: 24
109.207.105.0/24 maxlen: 24
176.126.56.0/22 maxlen: 22
176.126.57.0/24 maxlen: 24
2001:67c:778::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ea:21:d3:ba:2f:41:e4:14:87:09:49:ff:46:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Jan 1 21:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43486b26f77b8bc71f3372faa54c6b86713566d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:ce:37:8a:22:96:e7:ff:46:d1:60:c5:1d:
10:dd:c1:9e:20:de:82:86:46:67:7f:57:fe:93:ee:
8b:a7:50:b7:2d:4c:bb:e9:55:ac:23:8d:93:ef:ab:
dc:41:40:86:ce:c7:26:78:30:06:89:66:04:62:2f:
00:e0:81:27:70:48:37:a5:7d:c1:e8:06:83:5b:fd:
89:e8:1d:b6:a8:2d:2c:d9:86:33:c3:65:77:be:85:
08:08:d1:30:ac:c2:32:14:9c:25:39:e0:9e:5f:f4:
09:29:e9:3f:54:e0:3b:98:bf:04:68:b8:a2:c9:1e:
84:38:39:c3:e4:16:fd:26:91:1f:c5:a6:3e:2a:fd:
22:1b:5c:4c:72:3b:75:6f:76:17:75:32:8c:e1:4f:
5d:84:53:40:85:30:e9:30:d2:d6:17:af:ff:03:24:
d4:81:98:55:90:14:30:ac:a3:1d:df:96:21:d7:a8:
73:ab:80:bf:fd:2f:e4:18:54:d1:d4:b6:bd:f4:ad:
65:b1:79:9b:df:76:c7:9e:d5:88:20:06:95:e4:d8:
c7:d0:78:dd:ae:dc:83:41:4c:31:2f:d5:10:bb:c3:
68:09:3c:27:4b:b0:40:3b:fe:54:b6:b6:4c:33:38:
f9:9d:c0:32:a5:1a:50:8b:33:f2:72:a5:9b:90:f2:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:48:6B:26:F7:7B:8B:C7:1F:33:72:FA:A5:4C:6B:86:71:35:66:D1
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/Q0hrJvd7i8cfM3L6pUxrhnE1ZtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.97.0/24
109.207.105.0/24
176.126.56.0/22
IPv6:
2001:67c:778::/48
Signature Algorithm: sha256WithRSAEncryption
92:fd:33:50:ae:cb:a9:4c:cf:94:d3:61:38:c3:16:75:5d:2c:
93:99:cf:a6:52:2e:16:98:c1:bb:55:fb:3c:e2:76:2c:f3:6b:
64:ac:44:54:38:08:34:ea:95:02:03:45:78:5a:38:f6:7f:e8:
99:c3:0f:5c:1c:ba:2b:d5:02:08:33:fc:c3:2d:78:4a:0d:4e:
50:da:22:e4:7a:95:de:50:7c:31:a3:c7:23:29:4b:22:44:68:
51:f2:a8:32:14:1b:49:c4:38:09:98:91:11:a7:4d:5f:fb:69:
7d:db:1c:37:20:07:84:20:41:bd:89:53:87:b9:3b:20:70:d2:
97:78:f1:56:50:1e:65:9d:bd:f7:95:74:f7:9d:05:02:4c:dc:
03:3b:90:4b:b3:d0:48:d3:6e:97:9e:af:fd:5a:dc:5b:09:bf:
eb:61:f8:99:65:a5:4a:48:c0:27:40:2e:45:57:00:44:11:7d:
f8:c7:a3:e8:80:3c:d8:87:bd:2f:68:2b:0f:ed:20:a1:e3:8b:
50:8d:fd:c0:21:f5:7b:65:9d:ad:ed:d3:ae:85:31:82:dd:04:
b2:29:fc:b9:92:0e:74:bc:c9:f1:44:1e:42:22:2a:1b:54:a1:
74:86:de:97:d0:da:24:f9:a6:61:cf:ac:b9:67:58:8e:2a:7d:
a3:ab:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:50 2025 by rpki-client