Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/hqDxB-Ir5z3Y_G6a9rOSto5ZH88.roa
File: hqDxB-Ir5z3Y_G6a9rOSto5ZH88.roa (raw, json)
Hash identifier: 2802mZRHrPPS6iUejTLOubgUc+cQnwe3PYotooKVAJk=
Subject key identifier: 86:A0:F1:07:E2:2B:E7:3D:D8:FC:6E:9A:F6:B3:92:B6:8E:59:1F:CF
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 019424B397282F590FD5A1909297C8EFFAA4
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/hqDxB-Ir5z3Y_G6a9rOSto5ZH88.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 195.85.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:97:28:2f:59:0f:d5:a1:90:92:97:c8:ef:fa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86a0f107e22be73dd8fc6e9af6b392b68e591fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:51:1d:34:5e:a9:2d:97:7b:c6:da:9e:14:
cb:40:8b:de:f9:c2:d3:7a:08:93:cc:6d:91:37:5c:
12:1b:a2:10:f1:be:25:86:19:04:51:c1:06:8e:a8:
dc:2b:50:87:93:ad:b4:79:b2:ab:77:a0:70:12:6d:
9d:d2:be:be:ca:99:cd:02:35:cc:9f:fd:3c:68:5b:
1a:87:e0:cf:e3:2a:b8:7b:a1:dc:29:ad:48:53:86:
18:c8:cf:a1:52:96:e6:38:b2:73:77:7e:17:1c:04:
f0:d4:a6:8d:b9:4e:75:87:81:6f:87:f8:c5:26:84:
83:f8:00:ce:fe:ab:a0:c4:71:f2:88:ab:5a:6b:1a:
a4:cc:30:fb:6c:49:a9:44:34:0f:b4:dd:5c:41:8e:
35:7f:a7:5f:59:2b:89:29:f8:4e:c5:9e:a7:d5:1b:
53:0e:7b:b1:67:be:21:ea:b8:6f:18:3c:b5:d3:4a:
c5:23:bb:26:c0:d8:27:d7:9c:f9:0b:0d:2b:10:72:
ba:2d:fa:11:18:b4:31:20:10:03:8e:7e:be:2c:34:
de:2a:80:68:9f:91:f3:3c:de:18:9b:11:7f:c2:db:
00:6e:95:03:34:4a:04:a6:be:39:89:74:4d:45:fa:
33:e5:4c:3b:41:b5:86:7a:69:14:4b:d9:1e:f3:11:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A0:F1:07:E2:2B:E7:3D:D8:FC:6E:9A:F6:B3:92:B6:8E:59:1F:CF
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/hqDxB-Ir5z3Y_G6a9rOSto5ZH88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.59.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:5a:6e:0d:0a:d2:f3:89:5d:4a:45:fe:e1:34:99:88:3c:af:
e4:1d:e0:30:25:9e:c3:32:d1:f6:a8:aa:f4:eb:af:47:f7:3a:
b7:1f:67:61:df:3f:eb:4e:f5:0a:12:6a:3f:e2:ba:23:40:39:
3a:94:aa:70:ab:ee:1c:e4:56:b1:d8:6d:4b:42:28:70:f1:52:
90:f2:18:5a:80:e5:02:c4:50:77:5e:b7:9b:33:f0:47:3c:c6:
24:cd:b1:91:b8:99:5b:91:1b:2a:fa:4a:c5:2d:27:5b:dc:17:
13:2e:59:e1:7d:70:27:fa:d0:29:97:9f:b0:17:1d:bb:ae:04:
72:cf:d1:15:83:35:6e:5d:ce:88:07:1d:36:e5:db:89:47:6c:
5e:40:44:8c:13:11:97:96:0b:32:8f:d5:de:da:9e:d0:9d:c1:
b7:1f:75:52:7e:c6:53:9d:b7:04:92:e3:32:6e:03:fb:85:a9:
0b:3b:4c:c3:57:9f:f1:61:18:8b:f7:ef:11:88:22:9d:58:fa:
2a:22:ec:28:96:dd:dd:00:1d:b4:8f:62:70:86:6a:4f:7c:48:
5f:fd:52:83:79:de:b4:70:89:e1:ac:65:30:5f:53:09:c5:be:
d8:d8:c3:9b:ed:ad:c5:de:5a:0a:ac:0e:a8:5b:9a:d5:61:b3:
1d:96:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:50:32 2025 by rpki-client