Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qdUMoslaHBgFj3jhSu-NBvU9w6I.roa
File: qdUMoslaHBgFj3jhSu-NBvU9w6I.roa (raw, json)
Hash identifier: +U05wJ50D8L1RYb55kQYtofV6VD4bdPW++n+YvmqIOQ=
Subject key identifier: A9:D5:0C:A2:C9:5A:1C:18:05:8F:78:E1:4A:EF:8D:06:F5:3D:C3:A2
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0195F5B6C25444056CEA549A68FB856C2CAB
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qdUMoslaHBgFj3jhSu-NBvU9w6I.roa
Signing time: Wed 02 Apr 2025 08:55:49 +0000
ROA not before: Wed 02 Apr 2025 08:55:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212298
IP address blocks: 45.81.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:b6:c2:54:44:05:6c:ea:54:9a:68:fb:85:6c:2c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Apr 2 08:55:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9d50ca2c95a1c18058f78e14aef8d06f53dc3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:0b:c9:aa:e1:3c:84:3d:a0:60:d9:bd:9d:
2f:37:dc:37:3d:f6:02:86:25:04:e8:73:a2:64:ff:
44:a0:13:ce:19:b2:6b:f1:ea:8d:f7:6f:d9:99:81:
12:26:7d:8d:8c:95:e1:3f:70:42:d1:c3:d4:bb:46:
3c:37:20:68:39:39:ef:87:0b:76:6b:9a:ec:b9:46:
56:9b:32:e4:40:31:f4:84:09:0e:2e:86:44:96:03:
1e:cf:31:c2:38:08:1f:2a:57:8b:5d:95:3b:8c:2f:
ed:bb:62:ae:28:95:04:cc:8c:2b:95:ed:fa:92:a0:
e3:da:1c:76:8f:97:d8:32:9d:63:67:fa:aa:1b:92:
4b:5b:52:c3:9e:5a:4c:e7:fd:ef:cb:3c:fc:80:1c:
65:54:32:ce:c8:e1:cd:e3:d9:42:d5:a2:92:df:a1:
ac:d3:01:58:54:e2:d4:ac:b7:06:0c:77:47:c2:18:
1d:c4:62:26:5c:f1:4d:84:f3:59:ca:47:87:6c:8f:
d2:d4:e3:8b:e7:7c:f6:a9:10:b2:3f:b0:d1:bc:59:
53:8c:ae:47:40:e2:3c:8c:5a:4c:b3:16:3a:4b:76:
98:62:16:05:76:db:7f:0d:8b:8a:d3:a9:96:c6:00:
89:47:76:b6:a1:5f:ef:51:89:d2:65:a5:9a:ce:23:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D5:0C:A2:C9:5A:1C:18:05:8F:78:E1:4A:EF:8D:06:F5:3D:C3:A2
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/qdUMoslaHBgFj3jhSu-NBvU9w6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.20.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:5c:fd:39:45:13:ed:c8:97:cb:d4:03:03:11:84:a8:15:17:
26:bc:3c:57:df:ea:b4:c2:18:0a:d2:fb:bf:86:aa:d7:0d:98:
0f:ce:a1:56:1e:81:45:69:29:54:d5:c4:f0:24:72:9f:f8:3f:
74:b3:a0:1b:6f:3b:0a:45:84:89:1f:24:df:b6:36:c5:8b:45:
7e:f2:88:4e:23:5d:0a:ec:c5:59:43:31:95:ff:2b:7e:61:fa:
b1:dd:d1:b4:83:64:30:6c:b3:c5:6e:5d:33:cc:40:da:3c:dc:
bf:e3:1a:1c:0b:6b:0d:40:46:9e:5f:4a:24:12:a9:e2:78:a6:
b4:b1:6e:24:a9:e5:96:f9:98:63:52:82:4b:8b:8d:9d:43:c8:
b2:4b:ef:7a:2b:41:ab:e5:5c:56:f4:2b:30:c1:2a:75:59:1a:
4f:6c:d3:25:69:30:99:41:6c:be:f2:6b:10:6a:dd:ff:54:24:
46:a8:fc:ce:aa:92:c0:d8:1f:67:b5:c3:98:95:2c:cf:63:ae:
a7:92:c2:05:d1:a9:b3:d3:de:35:7e:b7:35:37:01:bd:e1:bb:
7d:3d:28:cf:55:c4:df:08:7b:e9:9f:b7:36:60:91:2b:87:0a:
d3:1d:3e:9d:b4:99:9a:aa:c9:04:bb:aa:90:4e:be:81:6c:e5:
72:47:9b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:23:14 2025 by rpki-client