Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QVpUZXXtRIH20Imi_FSbaFyiVsM.roa
File: QVpUZXXtRIH20Imi_FSbaFyiVsM.roa (raw, json)
Hash identifier: 4TM9EKcDHQ+gG0op3bcQD0U+ZAq/ULDsduNRox8hgWE=
Subject key identifier: 41:5A:54:65:75:ED:44:81:F6:D0:89:A2:FC:54:9B:68:5C:A2:56:C3
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01975B59BF977FF9437844C5ABDC9B5F1A79
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QVpUZXXtRIH20Imi_FSbaFyiVsM.roa
Signing time: Tue 10 Jun 2025 19:38:17 +0000
ROA not before: Tue 10 Jun 2025 19:38:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.149.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:59:bf:97:7f:f9:43:78:44:c5:ab:dc:9b:5f:1a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 10 19:38:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=415a546575ed4481f6d089a2fc549b685ca256c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:ae:5b:ce:29:48:6f:b5:cf:27:d8:32:5d:
f3:10:9b:1c:2a:71:ac:81:99:9d:8b:ba:94:6c:a0:
0e:16:ee:37:88:a6:fa:1a:80:3b:58:b3:25:23:28:
a8:38:8a:cf:73:52:7f:49:3f:ef:80:08:7c:b8:9c:
92:fd:92:af:b8:5b:36:00:af:4f:33:d4:95:11:3e:
4e:d0:fb:34:e6:f3:2e:5d:c1:77:12:fa:87:d7:a4:
08:7a:1d:49:24:f4:ec:2d:60:2b:2f:4d:51:3f:8d:
0e:5f:83:54:5b:20:30:dc:1b:fb:0b:00:77:d8:98:
52:a9:f4:8c:75:53:d9:68:ba:3d:57:ad:c0:ef:9e:
1b:92:72:05:db:3a:cf:2c:db:fb:27:df:1a:73:28:
16:23:0e:ad:39:6f:6f:90:f6:16:0a:45:cf:ca:ff:
21:da:06:e4:eb:13:59:89:71:07:7c:26:86:0c:82:
a3:5a:1b:1a:13:76:d3:13:87:4e:38:87:cf:ab:15:
42:6b:67:12:08:4f:ef:8e:7a:8e:b3:01:61:bf:22:
11:44:73:d7:9e:22:d0:b6:6d:3c:9d:e8:86:bb:32:
25:1a:4c:fc:cd:13:46:5d:8d:ff:07:43:19:dc:99:
e1:5a:44:9a:36:27:4a:3b:ae:ca:aa:f4:72:34:d1:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5A:54:65:75:ED:44:81:F6:D0:89:A2:FC:54:9B:68:5C:A2:56:C3
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QVpUZXXtRIH20Imi_FSbaFyiVsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.26.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0f:4c:c0:db:3f:56:43:ef:e3:39:1a:e0:81:bd:89:26:a6:
03:5c:45:21:6f:21:d5:5f:2a:65:59:a2:47:c2:fc:ea:c6:74:
0c:5c:15:25:cc:38:14:ba:34:e6:ec:f7:e3:fa:35:d9:91:81:
5d:fa:37:c9:2a:3b:68:ab:a5:e5:f7:4a:6c:f5:7e:71:b5:67:
56:c4:ad:fd:c4:8a:b8:de:f8:02:62:0d:d5:eb:25:30:25:2d:
ac:d7:44:37:c7:ea:90:ae:c9:27:4e:3c:4c:38:b3:05:6c:41:
0d:37:8a:14:0f:50:88:53:c6:50:ba:f6:4a:3f:40:19:13:52:
da:61:d5:96:67:82:50:ee:3d:b8:70:d0:df:aa:1f:08:72:0c:
6d:06:72:d3:ab:80:7e:4c:0d:c4:a0:4f:c5:ce:e8:2b:70:0f:
f8:8d:26:28:2c:a9:e0:2e:95:a8:19:4f:65:4c:90:85:c8:76:
96:8f:05:6a:c0:24:ea:2b:4b:d0:f4:76:d8:b9:be:bd:1e:0f:
0b:81:01:76:04:17:9a:1e:00:60:f0:59:70:6d:bb:21:d4:b8:
7c:74:7b:4f:36:d7:ab:0f:a4:5c:53:ef:bf:a4:44:fc:d7:4a:
44:8d:a2:66:77:27:a1:62:02:a0:ef:15:83:97:8d:a1:dc:43:
30:97:2f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:01:38 2025 by rpki-client