Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/QwwF_wEdyDROs6QadM_Il4CHbmo.roa
File: QwwF_wEdyDROs6QadM_Il4CHbmo.roa (raw, json)
Hash identifier: wIhy46sTXD8c4yrBC6xzFGpvCG5G7CsjAqGsWxX4VHQ=
Subject key identifier: 43:0C:05:FF:01:1D:C8:34:4E:B3:A4:1A:74:CF:C8:97:80:87:6E:6A
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 01964D7E56E4E0BDC63D46C9E4EF68EBC20F
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/QwwF_wEdyDROs6QadM_Il4CHbmo.roa
Signing time: Sat 19 Apr 2025 10:00:47 +0000
ROA not before: Sat 19 Apr 2025 10:00:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 45.82.15.0/24 maxlen: 24
185.142.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:56:e4:e0:bd:c6:3d:46:c9:e4:ef:68:eb:c2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Apr 19 10:00:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=430c05ff011dc8344eb3a41a74cfc89780876e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a4:bf:d4:3f:09:0c:30:24:83:e4:95:33:33:
49:d7:23:83:8b:17:7f:b9:e4:e4:34:43:7a:54:80:
67:bd:90:44:6e:e0:d3:11:9b:3b:a6:e1:a1:4b:ff:
92:41:92:c0:01:fb:09:b3:83:b6:41:58:dd:2f:14:
0f:38:5b:f0:e5:10:a5:3a:b1:a0:67:a4:6f:d5:30:
cb:cf:54:7d:19:1d:66:ab:5c:ce:3d:51:c8:e4:73:
61:4c:15:30:64:16:d2:e0:4a:a2:85:6d:7f:b8:31:
07:1b:96:37:93:c0:59:52:71:97:06:9a:d7:0e:ce:
d1:95:c6:ca:09:ba:c9:02:b3:92:e2:06:ef:f5:c2:
c9:14:24:6f:5c:af:98:f7:cb:0a:43:55:68:48:c5:
aa:0d:72:f8:38:80:cb:a2:4d:d2:7b:0b:5c:c8:bd:
64:78:52:6c:8f:9c:bd:44:8e:e4:c7:6a:f2:c2:9c:
52:e5:37:f7:2b:41:6f:ba:ce:c6:66:ed:aa:fe:ec:
48:3d:32:bd:67:a2:eb:8f:ef:8d:83:43:5b:43:25:
91:62:8a:98:eb:a6:1f:c7:3d:0b:4c:28:b6:bb:6f:
43:e0:25:4e:a9:3b:78:54:25:92:c1:6d:a0:8c:06:
9d:4a:8b:97:39:b8:07:a4:63:5c:20:7f:06:2d:af:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0C:05:FF:01:1D:C8:34:4E:B3:A4:1A:74:CF:C8:97:80:87:6E:6A
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/QwwF_wEdyDROs6QadM_Il4CHbmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.15.0/24
185.142.99.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e6:12:47:11:9a:6a:f4:0b:4d:21:72:d2:32:c7:2e:e1:90:
cc:6b:bb:ec:05:bd:50:f2:5d:c6:cc:b4:b6:35:80:94:66:e8:
d4:ff:19:0a:b3:0a:05:dc:76:88:37:80:0c:e4:d3:9d:ec:27:
07:2c:66:ce:d2:61:2b:74:c4:9d:2e:b6:3b:80:cc:40:ea:2e:
77:13:f6:8b:a1:87:48:3f:6a:c1:7f:28:ed:56:1f:31:17:97:
85:5b:77:1a:9f:88:a1:09:25:b6:89:48:e1:ba:29:4f:bc:6c:
94:4f:e9:2a:29:dd:fc:a5:ea:89:c0:29:31:63:e8:41:be:78:
c2:24:95:2d:de:24:e0:8e:8d:09:81:84:00:b4:ea:6b:b7:8c:
56:ee:87:9f:f7:c1:44:f8:34:e8:c0:76:1d:e0:f6:4f:e0:8e:
49:a1:7e:51:ae:da:da:6d:4e:91:55:c8:93:31:35:8b:5d:c1:
b6:0b:d7:9e:87:15:82:f7:ed:97:0b:4e:0a:9d:13:69:2d:0b:
21:27:74:a0:7e:9f:8a:4a:28:b2:44:28:74:4f:bd:8c:12:d0:
88:92:7c:b0:84:79:62:74:24:e9:43:0e:e7:e6:96:77:d0:f7:
3e:09:64:fb:3a:c7:34:39:b5:b0:c3:72:81:59:d2:2a:7a:e8:
86:95:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:15 2025 by rpki-client