Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/qHH2o0DyGGvFZsG0UvDbftuaafE.roa
File: qHH2o0DyGGvFZsG0UvDbftuaafE.roa (raw, json)
Hash identifier: kKq7Omvw8T994nGi5bKJ+ng+xxGY7/jkfWqujpmbzDo=
Subject key identifier: A8:71:F6:A3:40:F2:18:6B:C5:66:C1:B4:52:F0:DB:7E:DB:9A:69:F1
Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial: 0194258F854F15D4AC2E828579B1FDAA7615
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/qHH2o0DyGGvFZsG0UvDbftuaafE.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43362
IP address blocks: 78.108.80.0/24 maxlen: 24
78.108.82.0/23 maxlen: 23
78.108.86.0/23 maxlen: 23
78.108.88.0/23 maxlen: 23
78.108.90.0/23 maxlen: 23
78.108.92.0/23 maxlen: 23
78.108.94.0/23 maxlen: 23
178.250.240.0/23 maxlen: 23
178.250.242.0/23 maxlen: 23
178.250.244.0/23 maxlen: 23
178.250.246.0/23 maxlen: 23
185.84.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:85:4f:15:d4:ac:2e:82:85:79:b1:fd:aa:76:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a871f6a340f2186bc566c1b452f0db7edb9a69f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:a4:17:3b:84:49:1d:5c:bc:f3:e3:a3:ce:
7d:37:11:8c:5c:98:b5:99:0a:9a:9b:a6:1f:90:b3:
a1:5d:94:a3:4b:f3:6f:5c:0b:8d:32:43:13:c9:f2:
59:53:44:20:c5:12:a9:25:fe:6e:fe:47:e3:b2:e6:
6d:70:3a:79:4e:13:be:ec:ea:e1:a1:1e:15:21:bd:
da:1d:dc:e6:04:4b:a3:c9:51:18:37:5e:ed:99:67:
04:63:8a:c1:8d:b0:27:fa:e5:4c:16:84:cb:05:f5:
de:74:9c:a9:b4:b5:14:e6:6f:a8:5e:e0:6d:ee:13:
30:15:74:93:b8:a5:c1:54:65:53:06:64:2f:79:19:
ce:cd:70:60:6d:1e:66:1d:4f:d0:02:0b:d2:8b:e4:
60:ba:16:4b:d3:e3:26:87:b1:57:4d:65:bc:f8:23:
45:3c:53:72:42:d8:8b:48:ff:d2:13:08:b1:63:c8:
1b:69:dd:6e:ea:e7:9a:99:64:1e:ac:70:01:96:f9:
06:42:9d:e0:a8:b7:d6:74:92:f7:e6:99:97:bc:9b:
a5:13:77:1e:6b:63:4b:96:56:e6:7b:77:ec:24:d0:
43:6c:6f:28:8b:a7:d9:ec:cb:93:c7:8a:74:a1:58:
fd:51:d3:64:93:1d:99:22:fa:20:21:2b:9b:47:ac:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:71:F6:A3:40:F2:18:6B:C5:66:C1:B4:52:F0:DB:7E:DB:9A:69:F1
X509v3 Authority Key Identifier:
keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/qHH2o0DyGGvFZsG0UvDbftuaafE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.80.0/24
78.108.82.0/23
78.108.86.0-78.108.95.255
178.250.240.0/21
185.84.108.0/23
Signature Algorithm: sha256WithRSAEncryption
08:e2:a8:35:fb:e8:d6:48:d9:d3:67:ae:71:b0:d6:11:ec:d6:
7f:ad:1c:a3:05:fe:d5:20:20:94:32:b4:69:70:61:69:c3:3b:
dd:52:38:c0:44:d3:17:e0:8d:f1:26:dd:9c:c8:e0:14:d1:41:
02:de:ff:05:d0:2d:0e:cf:15:66:73:16:20:af:2f:d5:bf:34:
87:d9:4a:c6:91:87:a2:79:0a:60:12:4e:2f:40:db:d6:bb:1b:
80:0a:42:55:b5:f0:70:c5:07:db:98:21:92:86:e2:56:6f:50:
c3:b7:51:e9:e2:52:0e:d7:01:7e:f3:eb:ad:e7:21:49:84:58:
88:31:3a:5b:62:2e:2c:c5:59:42:2f:c9:da:2e:45:fb:80:ea:
7b:77:3a:f9:6a:5d:2b:db:6f:50:04:90:b3:04:06:d0:e9:f5:
c1:39:74:fc:7a:bc:dd:ce:78:1f:65:7d:a0:34:b5:bb:fe:c4:
7b:90:7a:d7:ea:1c:58:74:e6:d5:33:1a:36:95:c8:44:8d:bc:
87:80:d8:ea:07:4b:c8:33:36:85:63:43:3d:b9:0c:39:72:22:
cf:fb:1c:cd:6e:a1:7a:ba:73:39:61:75:cd:b0:9b:77:4b:50:
5f:3e:a9:d4:16:1a:6e:47:08:f2:93:15:72:13:9d:33:3c:0f:
cb:94:7f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:44 2025 by rpki-client