Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/qKzJgLnJqbeDXyV-ycImwsgvDDg.roa
File: qKzJgLnJqbeDXyV-ycImwsgvDDg.roa (raw, json)
Hash identifier: aG2do145Ob8Jlod59pCz1QJaZfsQ+AVFS5an66p82B4=
Subject key identifier: A8:AC:C9:80:B9:C9:A9:B7:83:5F:25:7E:C9:C2:26:C2:C8:2F:0C:38
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019427482CEFF8C704C7475FDB4ECFB8DA14
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/qKzJgLnJqbeDXyV-ycImwsgvDDg.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 185.227.64.0/22 maxlen: 22
185.235.136.0/24 maxlen: 24
185.235.139.0/24 maxlen: 24
185.255.208.0/22 maxlen: 22
185.255.208.0/24 maxlen: 24
2a0a:4b80::/30 maxlen: 30
2a0a:4b84::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2c:ef:f8:c7:04:c7:47:5f:db:4e:cf:b8:da:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8acc980b9c9a9b7835f257ec9c226c2c82f0c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b0:e2:4a:6a:bc:81:e6:ff:cb:2c:26:1a:74:
3a:6f:fa:5c:63:5d:6e:42:21:62:99:9a:10:95:05:
61:c3:56:2e:36:5f:17:30:76:bc:ff:45:fd:df:72:
31:21:03:2b:37:11:03:32:04:6e:fa:f8:b0:78:51:
d6:eb:fe:1d:e6:0d:8f:db:83:29:9a:75:dd:c7:5a:
f6:1e:90:f0:5d:7f:2e:db:f1:18:59:58:5b:dc:90:
f8:2f:91:e4:cd:9e:1a:42:d0:62:fb:d5:95:23:3c:
ed:cf:9b:ea:e8:32:9d:66:58:05:9a:39:2d:fe:b1:
f0:b4:4f:bc:c7:b6:a0:1b:6c:32:74:8b:29:e6:cd:
d9:da:53:8f:19:8d:76:6d:0f:d8:1c:c3:b7:76:32:
f2:96:a6:b9:15:0e:eb:e4:66:6e:85:53:b9:62:53:
44:b6:7e:18:06:2c:5a:e2:2a:25:03:bf:61:53:4c:
d5:84:15:dc:b0:3f:07:62:4e:54:8b:9b:64:8a:50:
bb:ae:8b:7b:02:b7:1e:c8:99:0d:35:d3:51:86:56:
b0:12:3b:9d:d0:75:2d:42:1d:21:8f:91:cf:8f:63:
6d:88:54:4f:74:61:ac:6a:91:aa:3c:9a:8a:47:4c:
ea:ef:2c:2b:73:8a:0b:6f:f6:33:a3:2e:b8:86:5e:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AC:C9:80:B9:C9:A9:B7:83:5F:25:7E:C9:C2:26:C2:C8:2F:0C:38
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/qKzJgLnJqbeDXyV-ycImwsgvDDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.64.0/22
185.235.136.0/24
185.235.139.0/24
185.255.208.0/22
IPv6:
2a0a:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
01:61:9c:9e:55:30:5a:fe:35:46:6c:fe:fd:ce:c6:18:e8:59:
7a:c1:b8:81:71:9d:c0:c0:91:37:92:18:01:d3:b4:3b:6f:2f:
29:19:88:c6:46:c9:38:c7:b0:15:be:cc:de:5f:7c:1d:8c:34:
c3:7f:92:8e:58:1b:5f:5b:1a:80:6b:7f:a2:88:c7:c8:d1:9f:
2e:ea:f5:76:a1:d5:d5:73:46:42:53:40:1b:1a:cf:df:a7:b4:
b6:e1:14:22:be:60:97:fa:43:93:1f:21:99:05:bd:49:11:4a:
1f:86:42:da:ad:35:24:cb:41:1b:2d:2e:a9:fe:ea:f1:a1:69:
51:d6:60:92:c5:e3:9c:2f:1a:0a:66:2c:f8:88:b1:01:82:cd:
d0:35:54:52:be:e3:a7:9b:d1:1f:d7:88:b6:32:57:70:d2:83:
c3:53:49:d4:ef:8d:69:d4:14:97:3b:f7:52:4c:ba:25:f5:b1:
79:fb:81:c1:80:fd:f1:36:db:2f:c7:1d:11:c0:48:b9:77:47:
6f:45:ca:bf:2b:97:26:0c:b1:72:54:4d:2e:83:1b:29:46:85:
91:03:d0:46:b9:ec:67:b0:9d:7a:12:9d:8f:ae:8e:71:39:ae:
4f:0d:a0:3b:56:f4:12:70:f2:03:47:1b:36:95:fe:04:61:35:
c8:df:e5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:49:57 2025 by rpki-client