Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/q_2J_90F4rPreclpPcC8HlAxjrA.roa
File: q_2J_90F4rPreclpPcC8HlAxjrA.roa (raw, json)
Hash identifier: HQ44EO8txOKcoFtZru4S60/X6J86Op89ytT0eAb7xzE=
Subject key identifier: AB:FD:89:FF:DD:05:E2:B3:EB:79:C9:69:3D:C0:BC:1E:50:31:8E:B0
Certificate issuer: /CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Certificate serial: 019422FBD4B5A506A9E079F650D7EA4362F8
Authority key identifier: 44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/q_2J_90F4rPreclpPcC8HlAxjrA.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204577
IP address blocks: 185.54.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d4:b5:a5:06:a9:e0:79:f6:50:d7:ea:43:62:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ceb61e71a619f2314e9d9846ec67bc88a1244c
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abfd89ffdd05e2b3eb79c9693dc0bc1e50318eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:a3:28:e9:10:bf:43:5a:6a:cc:d8:58:40:
c2:a6:ba:76:9b:73:1c:e4:a8:ea:85:53:c3:9c:88:
7e:e4:c1:0d:f4:b5:8e:cb:e6:dc:0d:ba:81:e2:d8:
2a:26:d7:52:38:bd:be:9d:0c:88:2e:d1:4a:d0:49:
3f:02:49:f2:0c:6a:05:13:ee:98:a3:ec:e0:2f:a0:
6d:f7:a3:c6:cf:50:26:b8:02:40:33:fa:ca:46:79:
ff:72:e9:0a:82:23:e6:c7:8e:f3:4b:a7:7a:20:ad:
05:60:dd:92:4b:10:89:67:77:b0:cf:99:69:b0:de:
31:18:93:3e:ff:a8:98:c7:3b:2e:d6:16:aa:b3:ae:
ec:af:c8:90:e2:df:7b:9a:be:f9:43:25:1a:47:34:
f6:ae:8a:e0:cb:db:dd:0b:72:23:00:3a:45:c8:76:
77:58:33:2d:b1:c8:5b:c9:0b:83:89:77:54:bc:98:
1c:cf:04:1a:6c:65:8d:d4:0e:7a:d8:1c:cb:60:f6:
24:34:90:a2:11:dd:46:d1:12:8d:ab:12:42:e5:e0:
ee:a8:50:3d:6c:8d:63:11:27:f8:f0:cb:f4:67:55:
88:72:6d:1a:d7:a1:46:c4:51:38:fa:e0:47:04:9b:
7d:33:47:ca:49:b8:42:54:5e:50:95:e4:ef:e2:99:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FD:89:FF:DD:05:E2:B3:EB:79:C9:69:3D:C0:BC:1E:50:31:8E:B0
X509v3 Authority Key Identifier:
keyid:44:CE:B6:1E:71:A6:19:F2:31:4E:9D:98:46:EC:67:BC:88:A1:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM62HnGmGfIxTp2YRuxnvIihJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/q_2J_90F4rPreclpPcC8HlAxjrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/07eac7-4d52-46d9-ba44-8945860d5238/1/RM62HnGmGfIxTp2YRuxnvIihJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:3b:90:f9:c5:d7:26:60:59:0c:82:1f:59:36:c5:b4:59:b1:
b9:7e:11:24:8c:18:d1:31:c1:cf:34:ac:2b:ba:76:c7:69:04:
17:ac:dc:15:d4:a9:74:fe:87:98:f1:8f:00:13:19:41:bb:bd:
ad:5e:e8:2c:b8:f2:84:f7:f8:26:05:b6:64:97:d2:6b:ff:39:
3c:61:18:0b:52:c5:72:bb:e1:c7:1c:3c:8d:70:db:65:4b:e7:
63:97:01:04:0c:58:36:8a:8c:70:b9:7e:0c:54:ae:ac:d1:7c:
df:5e:b0:a1:eb:76:ad:a7:75:77:71:61:00:59:b9:0d:b0:76:
02:55:26:dd:4f:9c:c1:06:93:d0:8b:bb:4b:b7:77:82:0a:9b:
55:23:c4:4a:3f:d4:a7:12:d3:06:a7:6d:4a:2c:f5:dd:8a:b5:
f3:50:8d:cc:40:be:e5:79:c3:52:d3:90:14:80:84:5a:b5:9e:
05:be:16:e7:83:74:de:30:48:d0:c4:de:a8:c7:c7:13:a2:02:
0b:16:69:3a:3d:02:4f:0e:1e:f6:2c:8d:ca:34:dc:14:63:15:
c0:71:73:8a:ad:88:98:cb:c1:3d:ba:87:ce:7b:15:d1:e8:77:
03:70:37:50:03:1d:30:ab:0f:36:ef:9d:80:6b:ea:8e:f6:66:
f7:46:09:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:04:09 2025 by rpki-client