Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QPj7fd0QURVD0rz-opFCUiAKDzY.roa
File: QPj7fd0QURVD0rz-opFCUiAKDzY.roa (raw, json)
Hash identifier: fItUwHZjf+hqnCwq/c1HqjC1DnfaODRiE0JIXEa8JBg=
Subject key identifier: 40:F8:FB:7D:DD:10:51:15:43:D2:BC:FE:A2:91:42:52:20:0A:0F:36
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195ED2F3AD87E69CFA3EC6C958445F1E69A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QPj7fd0QURVD0rz-opFCUiAKDzY.roa
Signing time: Mon 31 Mar 2025 17:10:50 +0000
ROA not before: Mon 31 Mar 2025 17:10:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 45.66.230.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
79.110.62.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
94.156.104.0/24 maxlen: 24
94.156.166.0/24 maxlen: 24
141.98.6.0/24 maxlen: 24
176.125.254.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ed:2f:3a:d8:7e:69:cf:a3:ec:6c:95:84:45:f1:e6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 31 17:10:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40f8fb7ddd10511543d2bcfea2914252200a0f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:8b:4e:37:95:a2:9e:31:29:4e:79:a9:a7:
72:1d:65:7d:2e:52:4c:44:c2:9e:0a:ed:f6:04:14:
97:57:34:04:85:14:ba:c9:97:87:96:1e:dd:15:fc:
f4:0e:66:63:ca:14:3f:02:2b:2e:77:c2:bf:c7:33:
7c:d8:b9:86:65:bd:7d:15:04:a0:2f:31:36:a0:48:
89:f6:64:53:19:f0:72:32:a9:92:65:39:ab:eb:34:
3d:fd:da:e9:15:51:3e:2b:f1:e2:9c:ee:88:04:3e:
c5:20:6c:59:6b:21:ae:e9:c9:5e:cf:53:65:33:3a:
09:99:6d:0b:b8:1f:09:3e:e7:e8:32:c9:80:00:9f:
c2:28:8c:5e:09:67:35:6a:a3:ff:e5:b5:5f:83:c3:
e3:30:f0:c0:a2:41:f6:bd:ec:c4:37:03:54:3a:9b:
71:80:61:5b:a8:b6:be:8e:dc:7e:56:e8:5c:1f:69:
77:33:aa:7f:6d:f2:96:b1:25:ef:b7:8a:1f:f6:85:
ac:37:a7:9b:23:dc:77:e5:99:47:0e:12:20:ed:30:
12:62:c9:49:3e:27:21:ed:ea:6e:e5:c3:e2:48:42:
47:36:aa:cb:b2:9f:45:f1:be:01:60:33:dd:d5:b3:
05:99:00:7b:0a:e8:8a:97:ec:74:5f:8f:73:85:0f:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F8:FB:7D:DD:10:51:15:43:D2:BC:FE:A2:91:42:52:20:0A:0F:36
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QPj7fd0QURVD0rz-opFCUiAKDzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.230.0/24
45.88.88.0/24
79.110.62.0/24
83.219.97.0/24
87.121.86.0/24
87.121.221.0/24
94.156.104.0/24
94.156.166.0/24
141.98.6.0/24
176.125.254.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a6:8c:cb:be:2f:27:72:75:31:33:0e:9b:4a:b6:a2:b1:44:
e4:31:22:ca:fb:02:66:4b:9b:7e:f4:eb:82:9d:13:24:53:8e:
c8:c3:aa:32:41:a9:82:10:f7:3d:55:eb:3e:35:86:06:88:7a:
23:bc:3c:5b:5c:d8:39:2b:28:ab:2b:e7:d6:87:08:53:a1:f2:
e5:14:ef:fc:b1:e2:42:f5:37:a7:07:25:b1:53:9a:6e:9f:03:
f0:25:b2:48:fd:fd:a9:cf:66:57:a8:d1:bf:bc:61:7c:fc:e5:
6b:d7:be:71:69:25:90:14:a8:60:93:2c:a5:22:56:e7:e2:98:
49:0f:10:12:9a:96:37:26:bd:82:22:5d:2a:fd:db:7a:de:0a:
17:4b:66:43:70:41:ab:3e:ca:47:02:2c:78:e2:2b:ca:bc:c3:
7f:78:df:1c:f6:90:68:4a:7c:a0:6f:89:00:15:82:70:fe:9e:
0c:f3:65:56:f1:53:81:20:79:58:82:83:84:b4:02:21:99:34:
ad:0c:ff:95:72:17:c8:4d:9b:25:96:1b:46:26:8a:97:be:2f:
28:4b:34:15:7f:b1:2f:0d:9c:6e:fc:ca:e6:50:5e:6b:1e:02:
44:3d:28:ab:18:7a:69:07:bf:ce:59:47:09:c9:dd:c7:fb:83:
32:76:f3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:18:37 2025 by rpki-client