Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/QHEU0D3GCFvoG6qGQ-JKWkDoP1A.roa
File: QHEU0D3GCFvoG6qGQ-JKWkDoP1A.roa (raw, json)
Hash identifier: F05lkaQnND60UO9cKPH3FKf1IBZrlMiKh9r6gnh0NN0=
Subject key identifier: 40:71:14:D0:3D:C6:08:5B:E8:1B:AA:86:43:E2:4A:5A:40:E8:3F:50
Certificate issuer: /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial: 0196B3D9FEE436355B1810F0263FA15A6E4A
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/QHEU0D3GCFvoG6qGQ-JKWkDoP1A.roa
Signing time: Fri 09 May 2025 07:02:10 +0000
ROA not before: Fri 09 May 2025 07:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8648
IP address blocks: 81.173.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:fe:e4:36:35:5b:18:10:f0:26:3f:a1:5a:6e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Validity
Not Before: May 9 07:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=407114d03dc6085be81baa8643e24a5a40e83f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2f:0d:6f:34:fb:79:a2:df:72:0e:54:76:a4:
4d:a5:52:25:79:92:dc:25:2b:1a:f0:5d:df:2f:0c:
47:42:0e:67:4c:22:9e:e3:18:10:07:36:d3:5d:60:
f4:41:72:78:bf:89:77:60:84:04:7e:2d:a4:74:03:
1a:5a:1a:04:18:9d:fe:3b:7a:c3:89:47:c7:1f:fd:
c8:35:1f:7b:48:4b:cc:64:b6:df:bb:d8:16:87:7a:
b1:aa:64:0d:3d:64:54:08:c0:77:8d:66:bd:11:c4:
2f:d1:d1:d0:ed:98:cc:22:74:c1:f5:28:4c:f9:2d:
24:b9:d8:e9:64:19:12:3f:10:ec:b1:88:19:7a:8d:
74:be:97:f0:95:28:07:2f:dc:ac:fa:86:ad:f7:d4:
c8:7f:94:16:dd:ca:32:d3:ec:ac:8e:38:ea:d8:78:
7c:63:b4:a8:cc:44:98:1e:3e:ae:e0:ac:22:29:8c:
19:74:85:f8:f5:e0:e7:0e:d7:20:f8:29:bd:5a:77:
e1:92:e8:17:c4:fd:6a:23:9a:62:20:fe:f5:ce:23:
d8:6e:74:92:3a:4a:7c:e4:23:fa:dd:5a:b1:bf:1f:
86:53:f2:39:c2:4e:c6:7e:f9:56:35:33:5d:62:eb:
3a:d8:7d:cb:e2:d4:e7:a2:33:cc:ae:62:c3:85:50:
41:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:71:14:D0:3D:C6:08:5B:E8:1B:AA:86:43:E2:4A:5A:40:E8:3F:50
X509v3 Authority Key Identifier:
keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/QHEU0D3GCFvoG6qGQ-JKWkDoP1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.173.88.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:ce:d2:56:5e:3b:0e:47:b8:bd:d1:75:ed:8b:01:fd:d4:4b:
5f:85:e2:60:6c:f3:7d:00:ee:6c:bb:01:49:f7:6d:37:69:a9:
6d:c5:61:68:fd:e3:74:53:20:ba:5f:85:6d:c0:f2:61:ea:55:
00:3a:eb:b1:59:28:73:83:48:7b:f5:17:49:97:b2:cc:f8:b4:
55:8c:cb:58:e4:f0:ba:27:05:83:9a:00:c4:ea:b6:ab:b6:87:
51:c5:d9:a9:89:bb:e5:24:c6:f1:ec:35:60:9e:be:89:a7:51:
c0:83:ee:12:e7:57:d9:cd:ed:f2:e4:69:58:b6:c6:4f:88:20:
75:e3:f7:f4:5b:c8:68:a3:10:0d:24:c4:4f:4e:e6:1d:c5:f7:
8c:c2:a7:a2:91:f9:c3:00:a8:25:ce:5b:93:c1:55:42:d4:75:
8d:73:93:ae:83:0d:f3:f7:be:7a:e9:21:43:8b:4c:ab:5f:4d:
bc:11:e1:9b:24:69:95:b6:42:e9:8f:ae:2f:b4:05:c3:6d:dd:
1c:e8:88:4b:18:6c:d0:f3:a4:84:d2:5f:83:96:7e:13:71:ee:
39:40:89:45:6d:c0:14:96:75:b3:a1:2f:b2:cb:13:1e:9c:75:
49:de:ec:90:c1:5c:4e:2e:dc:22:02:76:fc:db:97:63:f4:fc:
4c:0a:cc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:27:09 2025 by rpki-client