Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/QrfYxaTHhTSXop-ghzKRc2pRZhA.roa
File: QrfYxaTHhTSXop-ghzKRc2pRZhA.roa (raw, json)
Hash identifier: PMTolMEGmvsQvzQ9GGSfcadwLJNVLNi1hDvyzf87EUg=
Subject key identifier: 42:B7:D8:C5:A4:C7:85:34:97:A2:9F:A0:87:32:91:73:6A:51:66:10
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 0194266B7A577449FAC4CB4E8BDDE8A6A1A5
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/QrfYxaTHhTSXop-ghzKRc2pRZhA.roa
Signing time: Thu 02 Jan 2025 09:49:25 +0000
ROA not before: Thu 02 Jan 2025 09:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57004
IP address blocks: 185.191.200.0/24 maxlen: 32
185.191.201.0/24 maxlen: 32
185.191.202.0/24 maxlen: 32
185.191.203.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:7a:57:74:49:fa:c4:cb:4e:8b:dd:e8:a6:a1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Jan 2 09:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42b7d8c5a4c7853497a29fa0873291736a516610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:db:05:87:82:a5:0b:71:e2:e6:e6:75:b7:
cb:10:e1:e2:1a:c4:25:5e:1e:77:c7:1a:fa:70:70:
cc:43:c7:00:f9:65:e8:eb:90:2f:85:cd:97:e1:ac:
8a:37:30:2a:e8:d1:8d:fe:07:bd:ad:21:be:43:8f:
68:85:c6:e5:af:ae:e8:a8:d1:5e:fd:85:5f:51:8c:
b2:72:3a:a4:ef:dc:9a:2e:39:a7:81:88:7f:5d:0b:
70:b8:0a:ab:45:57:cd:3c:d4:f0:6c:96:02:da:df:
27:a2:6c:73:b1:ff:a0:1b:29:b0:4f:dc:9a:48:4b:
96:fb:97:53:88:27:65:d3:c3:be:45:30:ae:99:18:
d3:4b:e8:f4:12:ac:80:39:78:d8:a1:d6:5e:ae:3e:
b8:2c:d5:1c:39:e3:71:dc:c2:90:e6:b9:f6:38:74:
5c:45:ca:72:6c:1b:2f:41:7d:e9:e5:d5:3f:a1:64:
fb:33:91:4a:1c:df:f6:01:b2:fa:03:39:08:37:98:
1c:b3:f7:d6:1c:c3:e1:8e:b3:81:40:6c:ac:f9:4f:
d6:02:b5:2d:95:0f:a8:24:78:3e:40:c3:df:37:19:
ca:e2:3c:7d:c0:b4:0f:dd:b0:31:46:cc:64:9d:89:
93:05:a1:99:52:8e:5e:d7:32:c2:8f:3a:1a:b7:a5:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B7:D8:C5:A4:C7:85:34:97:A2:9F:A0:87:32:91:73:6A:51:66:10
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/QrfYxaTHhTSXop-ghzKRc2pRZhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.200.0/22
Signature Algorithm: sha256WithRSAEncryption
58:a2:19:6a:ee:9e:b6:e0:37:04:ce:37:fb:15:29:fb:be:f2:
6c:e2:89:d8:8d:f7:2a:b8:5b:42:a1:74:01:4d:1d:96:87:ae:
db:47:39:e6:63:93:ad:18:24:59:e6:1e:5f:11:1a:8f:db:75:
94:9d:98:78:a1:c6:ee:14:e4:d6:d6:69:8d:db:6a:4a:bd:e1:
96:68:35:98:a1:68:36:81:db:73:06:f1:2d:72:1e:0e:2c:31:
9e:78:0e:5f:5c:65:ec:1a:70:a7:d0:80:84:ae:5e:8d:12:98:
46:03:a4:3a:2b:2d:ca:2b:0d:68:c4:39:b6:f9:85:56:d0:b2:
82:78:85:23:b2:b5:ea:6c:c0:f0:6a:47:60:0b:41:58:72:43:
19:39:74:67:3f:8a:92:f8:a5:c7:2c:02:da:1a:a5:fd:96:ab:
a8:d0:09:46:2c:6a:00:fb:40:76:2f:38:2f:98:ad:28:0a:77:
c7:47:91:7c:a9:ff:45:0a:d1:f9:c4:e7:7a:da:23:03:33:cd:
6d:c6:2f:d9:6f:b2:1b:6b:11:23:46:1b:d7:04:68:86:05:aa:
93:c3:c1:30:b6:c5:d9:31:2e:d3:2d:15:be:34:da:23:00:97:
0b:ad:6f:57:b5:6a:e3:2a:18:62:46:14:9f:c2:89:3a:10:fd:
d9:49:44:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:44:58 2025 by rpki-client