Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa
File: qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa (raw, json)
Hash identifier: ThX6Wi8fnBNMU2VW9z+5scRKlGLAdJdy5Sm4VgDw7kY=
Subject key identifier: AB:0A:90:BF:4F:E4:58:FA:DF:DA:E5:01:30:A4:F6:4E:F0:4A:DE:62
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019666A01A5BA3110D8174252BD9F939027C
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa
Signing time: Thu 24 Apr 2025 07:08:10 +0000
ROA not before: Thu 24 Apr 2025 07:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24750
IP address blocks: 2a05:4c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:66:a0:1a:5b:a3:11:0d:81:74:25:2b:d9:f9:39:02:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Apr 24 07:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab0a90bf4fe458fadfdae50130a4f64ef04ade62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:e2:4e:67:08:38:8e:a4:be:1f:85:b7:83:
be:9b:7a:9c:3b:6a:e2:4a:17:06:b3:84:c5:1f:79:
99:f0:37:a8:4d:e0:0a:6e:d2:ce:90:f0:9a:56:c2:
02:c7:52:bc:7a:f7:96:92:16:de:b4:13:52:75:b0:
eb:b6:7e:37:e5:1b:ed:9f:cd:d5:8b:df:cc:f4:51:
e5:71:7a:b2:cf:97:dc:ab:b4:4c:d1:a5:d3:cc:ad:
ea:29:10:3f:ed:24:d8:3d:85:92:d0:c5:5e:e8:9b:
1f:f3:35:ef:18:5e:9a:f6:d8:fd:d1:4d:c6:9b:5b:
bd:dd:2d:ef:26:6c:a5:52:10:28:fc:11:f1:48:02:
53:50:8b:d1:91:24:56:cd:8d:a7:bb:cd:ee:90:3a:
2b:bf:12:e4:64:41:72:03:04:9f:8c:0d:2a:67:d4:
0b:ee:2c:74:6c:1d:29:73:4e:49:02:7c:c8:e0:3c:
21:56:e1:0b:3c:1e:45:70:17:60:39:5e:d0:fd:c0:
cd:9c:08:3f:3c:a3:2c:03:5f:95:09:96:88:e9:40:
e9:d7:5b:4f:2e:f2:f5:e2:a0:9d:2d:b4:c9:01:d3:
b4:a5:5f:08:97:56:f1:cb:16:61:f9:f1:17:83:69:
05:3b:ac:f8:76:13:ab:67:67:18:0e:02:2f:0f:86:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0A:90:BF:4F:E4:58:FA:DF:DA:E5:01:30:A4:F6:4E:F0:4A:DE:62
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4c00::/29
Signature Algorithm: sha256WithRSAEncryption
80:89:24:ef:d0:60:99:fa:f6:1a:3c:9c:d8:de:f9:6f:a4:13:
c1:36:34:7f:c3:57:0b:64:d8:47:73:a3:5a:ca:e5:c3:fe:31:
3d:b5:08:31:5b:83:d1:d6:bf:7b:5e:82:6b:37:9e:0b:21:ba:
2e:24:2f:2c:b0:60:2a:26:ab:55:63:f3:b2:89:6b:a9:ee:9f:
ae:72:05:f4:35:e1:72:3d:5d:3e:ba:fc:4f:3f:19:94:b2:1e:
cd:06:04:15:df:83:78:59:2f:9d:46:4e:8c:d8:dd:af:ce:0a:
e3:02:bd:c5:2d:08:ec:6e:ec:7b:59:c7:6d:d8:d9:6a:3c:b0:
58:2d:91:f6:08:97:ed:30:75:fc:a9:40:8f:2b:fd:d8:2c:1e:
a1:66:ac:bf:59:e2:99:cd:8b:b9:1a:e8:d7:b3:b6:9d:05:b7:
cc:e5:e1:c4:f8:a5:05:cc:a8:f5:f6:cb:db:f9:7f:40:cb:56:
09:f4:53:9b:3c:af:be:be:67:a0:55:b8:10:b9:cb:19:0e:35:
8c:2b:12:78:cb:62:ec:c2:9e:30:c0:96:b0:31:a1:61:f9:af:
44:f9:c8:ff:a0:0e:90:e2:56:b7:0e:3d:c9:d0:a5:05:47:84:
c2:5b:a3:b1:3f:c5:87:52:39:b2:ab:68:49:69:51:84:b4:c2:
0c:0f:f2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:28:02 2025 by rpki-client