Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/2QTRX3rMARDGeCqwmM0inJSU1I8.roa
File: 2QTRX3rMARDGeCqwmM0inJSU1I8.roa (raw, json)
Hash identifier: JqKkV8sJ2151XjqigefJVjz+CjQivqO6Q6p2fwfafME=
Subject key identifier: D9:04:D1:5F:7A:CC:01:10:C6:78:2A:B0:98:CD:22:9C:94:94:D4:8F
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 019428258CBDA38A565332482E7241B61DCE
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/2QTRX3rMARDGeCqwmM0inJSU1I8.roa
Signing time: Thu 02 Jan 2025 17:52:16 +0000
ROA not before: Thu 02 Jan 2025 17:52:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212396
IP address blocks: 46.244.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:8c:bd:a3:8a:56:53:32:48:2e:72:41:b6:1d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 17:52:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d904d15f7acc0110c6782ab098cd229c9494d48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:02:b0:df:7e:d2:9c:32:28:94:b3:ac:b0:
75:fe:be:3b:c4:bb:e2:3f:40:29:52:9f:e2:50:76:
5d:71:e9:0a:fe:2e:81:ef:01:ba:68:4f:01:99:bb:
8f:24:42:ba:7a:e8:a1:17:07:1b:77:fe:8f:ee:3c:
a1:5d:a1:b3:00:e1:38:e2:e5:ae:d6:6a:01:5e:96:
a1:b2:9f:6f:f2:b8:d5:70:b6:c7:56:5b:36:0e:1d:
8e:c6:e6:08:e9:a1:9f:39:c4:1e:86:8b:2f:f8:87:
10:07:0a:2a:cb:e0:da:1e:2b:c3:4b:1c:32:ce:cc:
bd:d3:4e:71:c0:64:dc:34:87:5e:89:2e:90:f0:42:
68:5d:9a:5a:d4:60:1a:42:41:28:0d:11:ac:14:ce:
6e:d6:38:dd:6d:20:77:67:7a:78:8d:6f:1e:a0:d8:
cc:a8:df:fa:3b:f9:72:1f:47:fa:7f:e1:76:59:16:
34:1b:73:44:db:37:0b:e4:13:18:e4:ca:9d:ad:12:
f2:06:2e:b9:9f:19:69:9f:fe:02:a4:97:14:16:9e:
6e:39:98:da:4f:3d:02:08:e2:5d:ca:d2:f3:b6:95:
1c:e1:98:b0:1d:d8:34:10:31:88:2e:8b:33:8f:87:
95:a9:54:fa:5c:7f:b0:04:06:6a:7b:06:e1:f3:0d:
04:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:04:D1:5F:7A:CC:01:10:C6:78:2A:B0:98:CD:22:9C:94:94:D4:8F
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/2QTRX3rMARDGeCqwmM0inJSU1I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.96.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e9:d1:f7:00:31:0f:07:b9:c5:52:b6:f1:a0:4d:2a:3a:49:
16:3e:14:db:c5:c6:0a:78:ac:6d:3c:28:d9:bf:e6:03:65:ca:
d3:e0:a7:be:ac:9d:d4:0e:77:9b:84:b5:ce:48:3a:2f:52:23:
6b:b9:6c:80:27:30:5c:d5:84:c5:dc:d5:f6:2c:62:f4:b1:f5:
db:96:c5:93:a0:80:fa:09:96:56:22:5d:bb:99:c9:4a:dc:3b:
6a:c0:8f:b2:93:95:f2:bf:5d:11:b9:8b:fd:02:2a:32:81:cc:
e8:f9:31:63:79:11:7e:6b:90:8c:d2:fc:c9:9d:40:b3:86:b9:
77:49:6b:bf:5d:2e:39:8a:15:80:71:67:b7:ee:2d:42:ea:b2:
2c:6d:fe:a5:32:f7:e9:88:05:fd:19:04:24:10:07:f7:2d:c7:
9a:0d:fc:a7:22:16:5c:2d:2c:91:47:f6:17:73:3d:07:fa:67:
33:4a:11:4b:1a:59:d9:e3:bc:c9:9d:fe:c1:11:e8:a3:79:3a:
cb:8b:24:eb:b9:8b:36:b8:24:6c:bd:07:f9:40:6e:49:3d:ad:
12:ef:b1:9a:e7:0f:30:60:f4:89:14:ce:b9:c0:96:ad:cd:56:
10:4e:7e:7a:0c:6f:87:a9:43:6d:b7:be:99:de:55:e5:65:3e:
b7:5b:6c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:34 2025 by rpki-client