Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/QErrhrzU2U7UlCrmA1T2T22i6Ew.roa
File: QErrhrzU2U7UlCrmA1T2T22i6Ew.roa (raw, json)
Hash identifier: ACC19M63SD4NWKmr69RvxEazwjXMuUP+D1rGLIBn6no=
Subject key identifier: 40:4A:EB:86:BC:D4:D9:4E:D4:94:2A:E6:03:54:F6:4F:6D:A2:E8:4C
Certificate issuer: /CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
Certificate serial: 0194258EDE5E56936137ED42D1EE95CA3435
Authority key identifier: 31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/QErrhrzU2U7UlCrmA1T2T22i6Ew.roa
Signing time: Thu 02 Jan 2025 05:48:27 +0000
ROA not before: Thu 02 Jan 2025 05:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211466
IP address blocks: 185.153.160.0/24 maxlen: 24
185.153.161.0/24 maxlen: 24
185.153.163.0/24 maxlen: 24
2a07:8780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:de:5e:56:93:61:37:ed:42:d1:ee:95:ca:34:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
Validity
Not Before: Jan 2 05:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=404aeb86bcd4d94ed4942ae60354f64f6da2e84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:71:04:fe:38:ff:3b:45:06:8c:f3:6c:05:2d:
f6:b5:68:67:5e:39:02:3a:9c:d8:32:8c:05:4a:2e:
77:a2:ad:bd:ff:0b:6e:b5:91:a3:4e:4b:25:c0:e2:
99:4d:8d:7a:08:ac:6c:8a:93:28:df:d2:ae:17:5b:
89:2c:f3:96:24:5b:0d:ce:17:22:d2:0b:3c:7e:24:
35:36:bc:fc:46:77:50:29:19:91:fb:2c:de:46:55:
f1:87:ec:d9:db:01:f0:ec:1b:fa:d0:0a:37:f0:09:
fe:0e:84:ce:0f:35:06:d5:7a:0e:0c:7b:49:59:0f:
1e:58:6a:f5:0a:a5:81:47:7c:dc:54:76:7d:e2:7f:
bf:3a:0b:28:f2:4d:12:b4:5d:0a:ef:fe:d8:9d:82:
65:07:be:3a:f8:b8:63:97:32:13:b5:21:d6:a9:05:
59:3d:0c:81:33:95:86:27:78:1e:73:b1:4f:b0:f9:
96:14:8e:4b:fa:3a:c7:4a:7a:5a:ec:d3:da:18:ee:
02:bf:67:b0:4a:e0:67:40:f2:f1:4e:f3:92:71:7a:
93:28:5b:f8:08:35:59:03:d5:94:54:21:49:0d:ec:
c7:86:68:7b:61:b5:da:94:fc:76:1e:8e:4c:99:cd:
d4:44:28:c6:c9:e8:55:45:7d:89:98:2d:7e:b8:28:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4A:EB:86:BC:D4:D9:4E:D4:94:2A:E6:03:54:F6:4F:6D:A2:E8:4C
X509v3 Authority Key Identifier:
keyid:31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/QErrhrzU2U7UlCrmA1T2T22i6Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.160.0/23
185.153.163.0/24
IPv6:
2a07:8780::/29
Signature Algorithm: sha256WithRSAEncryption
8d:40:f3:2b:b7:e0:59:03:71:b1:c6:b7:25:34:78:f3:10:4f:
0a:b5:0d:8a:f2:e6:e7:f6:ea:f6:f9:0f:3f:1c:1a:54:d7:ab:
8c:02:7d:b4:49:70:69:3a:83:1b:35:24:4d:3b:53:0c:53:45:
fc:2d:f9:fc:16:76:8a:69:17:b3:5e:21:e0:e2:1e:cc:d7:9e:
a9:9c:f3:4e:93:9c:9e:8b:a3:15:bc:d1:2b:fe:01:f1:01:49:
c6:2a:a2:c1:60:ac:4f:3d:7f:39:0e:ed:74:24:ba:1b:2c:85:
61:1c:a5:09:6c:ab:9c:c8:cb:c1:f4:7d:87:ec:53:5b:80:4b:
0c:9b:5f:2e:3c:ac:4d:24:c3:fb:80:d4:cc:c0:bb:0a:ab:2e:
a6:5b:82:ed:cd:db:27:75:86:78:d6:37:ce:b6:97:1d:45:06:
85:50:ff:c5:af:fb:d8:e1:7c:e0:0f:80:24:d2:30:f9:fa:5d:
37:61:98:6f:2d:ff:aa:d0:0e:56:0a:90:3a:86:36:29:39:b8:
3e:f7:0b:d1:1b:a7:bd:4a:bb:2a:e6:3b:5d:ce:93:6a:45:ef:
9c:fb:a5:58:1b:5d:c4:02:6f:0a:e6:c2:cc:9a:90:04:5f:ed:
6e:61:ae:f4:90:14:e5:6e:a9:4f:8e:4f:21:bd:88:7a:0d:06:
be:7a:48:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:42 2025 by rpki-client