Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa
File: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (raw, json)
Hash identifier: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=
Subject key identifier: 42:4A:BF:EF:93:23:CA:F8:96:7B:63:6A:81:3F:FE:33:09:FD:82:73
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 0194244582595DB16045593CF53562B40273
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa
Signing time: Wed 01 Jan 2025 23:48:42 +0000
ROA not before: Wed 01 Jan 2025 23:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57635
IP address blocks: 193.203.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:82:59:5d:b1:60:45:59:3c:f5:35:62:b4:02:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 1 23:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=424abfef9323caf8967b636a813ffe3309fd8273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:ed:9c:e6:e3:4c:75:b3:46:58:59:e2:14:
40:c9:61:fc:7b:e3:7d:84:84:da:d0:ee:52:58:1c:
97:10:84:a0:7a:a8:94:7b:d5:86:72:0a:e3:4e:2e:
48:f4:39:3d:00:22:c5:41:7d:6d:1c:9c:c2:cd:38:
81:7a:99:eb:fc:b0:9b:0e:b2:32:f6:06:30:09:9d:
4e:10:47:bb:86:70:e9:ae:d4:34:68:2b:a1:cc:70:
61:13:b9:d5:52:2b:4e:51:db:97:69:f0:3f:54:c7:
bc:ab:ef:f2:35:df:ca:31:93:45:92:8a:2c:91:4c:
ba:8e:66:61:be:27:f5:2c:bd:33:cf:fb:b6:03:4e:
3c:a6:17:2d:95:a9:ee:03:ad:c7:9b:3f:24:da:ce:
4d:b2:46:ff:d9:e9:09:02:57:91:79:9a:73:c3:8d:
80:c1:51:21:83:1c:cf:b6:91:f7:45:3b:4c:58:d0:
0a:63:97:a6:14:09:d8:4f:c9:38:0e:b9:9f:9c:bf:
7b:c1:2d:f5:60:bf:1b:b0:26:a9:26:81:b4:f5:2f:
02:87:67:8e:49:c3:9e:46:51:9b:bb:2e:87:44:43:
1e:1e:21:c0:20:c0:46:10:66:e0:c8:c7:e2:8f:fb:
db:97:16:57:a3:25:ca:cd:b5:45:b9:66:42:6d:94:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4A:BF:EF:93:23:CA:F8:96:7B:63:6A:81:3F:FE:33:09:FD:82:73
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.38.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ff:d9:71:59:72:86:84:18:00:f7:9e:62:2b:d2:92:88:b6:
da:5f:fe:0d:8d:20:42:bb:2c:6b:68:61:75:40:d2:9b:3a:de:
b9:77:83:36:d9:98:1f:fd:bc:23:e2:d9:f4:02:c1:e9:bb:a6:
2d:f8:4f:f3:dc:33:ea:af:f9:e2:21:59:bc:7f:1a:a6:1f:73:
d4:c9:fa:17:7e:80:11:b8:24:15:54:8c:5d:e3:64:d1:5e:88:
f7:c1:be:8e:7c:4a:25:78:2f:69:04:19:81:45:b7:ac:0f:44:
5d:a0:60:96:cd:86:33:ca:7a:4d:80:f8:41:1e:04:ac:64:4c:
17:51:53:27:ab:1e:7f:13:8f:de:31:5a:be:72:f5:ad:bb:72:
d3:34:50:8a:23:5b:ee:d0:9c:39:52:86:48:b0:10:f0:9c:01:
95:49:81:61:99:29:60:e1:af:97:74:13:be:e9:09:0e:02:63:
e7:2e:77:cc:cf:ea:89:68:cf:6d:1a:c2:5c:0d:3b:cd:0e:3b:
a6:80:c7:6e:e6:e5:0d:eb:dd:f7:c2:5e:9c:ab:50:dd:f4:b7:
14:a4:49:f3:ce:60:3f:d9:f1:fe:e5:48:a3:58:12:fe:c2:50:
70:1f:b1:86:02:97:c7:ce:5f:db:64:67:d6:32:e5:fc:19:b2:
39:99:34:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:16:58 2025 by rpki-client