Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/qQMnV_AHkaoypfzXBStNqOIC8i4.roa
File: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (raw, json)
Hash identifier: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=
Subject key identifier: A9:03:27:57:F0:07:91:AA:32:A5:FC:D7:05:2B:4D:A8:E2:02:F2:2E
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01966B3D215FC140BA145A762119FC888191
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/qQMnV_AHkaoypfzXBStNqOIC8i4.roa
Signing time: Fri 25 Apr 2025 04:38:10 +0000
ROA not before: Fri 25 Apr 2025 04:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 141.226.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:3d:21:5f:c1:40:ba:14:5a:76:21:19:fc:88:81:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Apr 25 04:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9032757f00791aa32a5fcd7052b4da8e202f22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b0:33:a3:dd:25:67:bd:ba:1f:a3:15:e6:cb:
5c:e9:d5:b9:8b:00:e0:5a:78:19:aa:2c:97:b9:2d:
fa:64:f9:ed:af:84:7a:07:53:8d:06:3c:6a:04:72:
b9:5a:4d:be:59:c1:3f:59:5a:d1:d0:99:e5:55:ef:
e5:99:e4:5a:2c:de:1d:68:8b:1d:f3:fd:8b:32:75:
0c:81:4d:1d:bc:94:88:19:e2:ca:71:e1:d9:a4:cf:
67:de:af:b7:87:67:47:a3:1b:1f:c8:85:cf:62:73:
63:2f:fa:59:ad:60:ce:34:ac:b1:a0:49:51:87:67:
bc:ea:e8:0f:3b:a9:ad:3c:e9:eb:1c:3b:08:f0:5b:
e0:3f:a3:14:23:03:47:16:9b:b9:c2:24:cd:99:1d:
d9:9b:ba:c7:2c:a4:a0:ab:f8:30:8e:36:8d:ae:02:
3f:3a:03:85:1b:e3:5d:fa:dc:f8:e7:31:e0:0a:19:
42:23:1d:81:7f:6d:7d:16:71:33:19:58:4e:d0:1c:
a5:ad:c2:7c:dc:65:4d:a3:f7:8b:64:a9:79:ee:e2:
ad:ef:d7:ac:19:5d:42:2a:b9:e6:14:4f:d1:0e:f1:
43:a0:77:82:45:d4:cf:76:59:49:01:ce:e6:fd:8c:
30:41:3a:41:b3:54:b9:cc:94:bf:0c:9e:2a:4e:c9:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:03:27:57:F0:07:91:AA:32:A5:FC:D7:05:2B:4D:A8:E2:02:F2:2E
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/qQMnV_AHkaoypfzXBStNqOIC8i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.246.0/24
Signature Algorithm: sha256WithRSAEncryption
24:1c:24:7f:a4:c2:30:34:a1:0a:19:dd:d2:d4:05:7a:32:6a:
a0:45:10:d5:a2:3f:8f:c3:11:9a:01:25:6d:bb:1c:1c:a5:40:
54:d2:bd:5d:93:c2:82:38:75:2f:2f:8b:63:d2:41:c4:b6:cf:
e2:6f:16:a5:89:47:72:52:55:d4:b2:a3:7f:7b:ca:71:d9:b4:
c3:c0:0a:c2:c2:81:ec:8f:e3:36:ff:3d:73:cd:ab:58:c6:7a:
b8:73:23:9b:28:40:f9:c8:0d:3a:81:88:ac:67:1c:f5:fd:42:
8a:23:72:29:16:16:b3:ee:ad:00:f8:de:35:37:52:8c:4a:f1:
42:23:b7:4c:e9:87:11:c9:f8:88:5f:4d:73:1c:a5:a9:f6:be:
bb:ca:5e:93:76:37:7d:2a:88:72:0f:3d:61:4c:ef:81:d5:ad:
49:46:de:c8:73:5c:3d:8b:f3:f6:a0:c9:18:ad:af:37:66:07:
d9:b0:b7:d8:ef:41:48:5e:19:9d:40:ba:dc:5e:56:ec:cf:1c:
ad:b6:82:a6:5a:75:86:9c:74:c5:22:6e:7c:ff:50:44:3f:18:
55:56:09:f1:a3:26:66:00:9c:03:b5:98:72:b3:6a:99:0b:ac:
56:15:69:ea:f2:0b:37:d0:58:88:7e:f3:03:31:cc:ce:f2:48:
1e:ad:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:39:53 2025 by rpki-client