Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/qpS5E6zN7Za0_vE5y0g_cgWncv8.roa
File: qpS5E6zN7Za0_vE5y0g_cgWncv8.roa (raw, json)
Hash identifier: pquZUL+QWeP5wqagKXvKjrrNKaLrKYUyFpeUGLpB5cY=
Subject key identifier: AA:94:B9:13:AC:CD:ED:96:B4:FE:F1:39:CB:48:3F:72:05:A7:72:FF
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 01941F8C3F9C894479E5E00BC71734198D2E
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/qpS5E6zN7Za0_vE5y0g_cgWncv8.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16097
IP address blocks: 185.105.255.0/24 maxlen: 24
2a06:3a80::/40 maxlen: 40
2a06:3a80:300::/40 maxlen: 40
2a06:3a80:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3f:9c:89:44:79:e5:e0:0b:c7:17:34:19:8d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa94b913accded96b4fef139cb483f7205a772ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:a2:08:11:3d:1d:49:f1:7b:a4:88:b4:2c:
37:5d:fa:1c:c2:04:ea:c1:25:f5:c9:46:d6:18:11:
fb:02:06:ba:69:95:c8:79:f9:d5:21:1b:98:e7:d6:
45:a2:c2:e3:ff:07:a3:d4:4e:23:fc:c1:04:ac:16:
35:7e:85:c9:9f:a3:02:da:94:2d:c9:0a:1b:09:b0:
09:e9:bd:d9:01:d0:52:9f:d8:9f:20:d7:07:4b:8d:
48:17:94:36:b4:a5:23:c6:48:df:ed:5d:58:3f:9c:
d7:d9:a9:eb:e0:45:6a:3c:de:19:bd:b6:41:4d:ee:
d2:a3:7a:bc:a7:57:c0:7d:f3:72:7c:b5:41:05:03:
ca:eb:71:d1:7d:d3:86:66:2e:40:46:c2:fe:a9:70:
aa:cd:bb:86:a2:5e:28:0f:ef:2f:53:97:25:f5:6d:
05:fd:76:71:07:72:3f:45:4a:e3:76:9f:6b:37:79:
b7:2e:8a:65:3e:1d:ed:7f:47:a9:27:30:98:87:3f:
50:a0:6b:8b:93:86:32:44:61:37:20:27:82:c9:1f:
41:96:e9:a7:c9:99:00:8c:76:9d:3e:1c:9b:ca:67:
13:06:d7:38:04:77:c6:fe:66:77:84:84:3f:b1:74:
27:a2:f7:ad:37:1d:76:c8:df:6c:a4:13:14:da:a7:
71:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:94:B9:13:AC:CD:ED:96:B4:FE:F1:39:CB:48:3F:72:05:A7:72:FF
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/qpS5E6zN7Za0_vE5y0g_cgWncv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.255.0/24
IPv6:
2a06:3a80::/40
2a06:3a80:300::-2a06:3a80:4ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
66:e7:74:64:18:af:84:76:f1:5f:42:d9:23:6d:27:da:8e:ab:
25:28:8a:e6:a3:62:ca:75:09:26:65:1e:95:12:d5:8b:19:1a:
0d:24:e3:81:16:b8:6e:ec:d8:d6:7e:4a:9b:45:9c:20:26:6b:
61:90:3c:8e:45:f6:8a:90:4d:c1:d2:5e:e4:be:79:88:6c:84:
e9:08:a5:60:07:21:e1:07:4c:e5:e1:51:39:6b:47:36:12:f0:
7b:83:c2:48:56:96:c6:a9:ad:2d:d1:f3:e9:2b:8a:07:1f:63:
1e:7a:ad:67:b4:f7:a3:d5:ab:42:2c:db:1b:32:ab:e2:67:f6:
73:72:3c:03:a9:61:0a:09:6c:e0:aa:a7:35:ad:ea:35:43:5c:
56:9e:32:c2:35:97:d2:5b:10:35:3f:7a:62:24:d1:d8:99:4e:
63:cc:bb:c2:3e:f7:1c:1f:16:d4:46:2e:e2:c8:22:08:e6:cc:
33:9d:88:48:23:25:0e:ff:46:4f:09:f7:52:63:b9:bc:e4:82:
52:a8:86:e2:89:2e:ba:6a:5b:ec:2f:29:72:42:81:9b:25:6b:
4e:ce:78:c7:a1:4b:80:72:ad:a5:c1:e9:d4:fc:6f:08:42:ad:
9b:c1:e1:27:32:59:fc:f9:bc:eb:c2:d2:85:7a:1f:79:49:f4:
34:0b:28:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:33:30 2025 by rpki-client