Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/qMz3B-VU3_8LpWAo-sKQhYbnvMY.roa
File: qMz3B-VU3_8LpWAo-sKQhYbnvMY.roa (raw, json)
Hash identifier: QU8hgElN0hf7yELGSVVAhITECb3y2Ni6yBlFB4z2XxI=
Subject key identifier: A8:CC:F7:07:E5:54:DF:FF:0B:A5:60:28:FA:C2:90:85:86:E7:BC:C6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01942068554673FD3586470F5B9CFA1F89D0
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/qMz3B-VU3_8LpWAo-sKQhYbnvMY.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210281
IP address blocks: 193.233.134.0/24 maxlen: 24
193.233.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:55:46:73:fd:35:86:47:0f:5b:9c:fa:1f:89:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8ccf707e554dfff0ba56028fac2908586e7bcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:b8:00:7c:f4:a4:2e:7b:07:80:9e:3f:4c:
e7:27:99:87:37:ca:34:c0:f5:f9:33:53:70:b7:8c:
2c:46:b6:6c:43:eb:5d:c0:5b:58:d5:51:27:61:fb:
78:67:99:63:d2:45:fb:3c:14:44:69:0f:72:4d:96:
80:a3:27:26:c4:d7:bf:d2:bf:36:75:6e:0b:05:fd:
73:af:16:52:3c:68:e2:78:01:09:66:e6:ec:18:c3:
6c:72:dc:c3:a4:53:78:41:71:0a:96:46:d6:db:10:
df:5b:73:0d:4c:8f:8c:db:09:33:37:f4:ac:63:e5:
ba:48:da:be:5a:7f:0b:d2:04:da:dd:8e:2a:dd:44:
11:26:eb:95:11:48:36:68:34:f8:ee:0f:68:3b:a2:
8d:9e:65:56:70:eb:64:0e:85:12:27:82:61:fd:8e:
95:98:2e:84:07:9e:ed:78:3f:5b:49:73:38:f3:24:
ae:93:6d:2d:6a:a2:3d:34:8c:8b:b3:7c:53:c1:eb:
05:ed:94:29:eb:9d:1b:d0:3a:a9:a1:f4:ed:dc:31:
c4:5d:ba:c3:84:1d:21:3f:ed:bf:0e:4d:1e:4b:3f:
e6:4a:e3:f3:32:81:4a:67:47:01:e4:77:00:00:a5:
39:3f:15:33:7e:c5:f4:59:93:e8:16:df:79:96:5e:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CC:F7:07:E5:54:DF:FF:0B:A5:60:28:FA:C2:90:85:86:E7:BC:C6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/qMz3B-VU3_8LpWAo-sKQhYbnvMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.134.0/24
193.233.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:43:fe:88:91:05:36:40:76:1b:32:02:d7:be:4c:b3:84:77:
94:4a:9a:59:73:5d:0b:70:d3:15:f7:19:57:54:44:df:ef:7a:
0a:8a:6e:4a:91:f3:cd:bf:99:88:45:cb:66:02:5f:f4:a6:47:
0a:22:64:3e:f8:39:a6:6b:a6:d2:b4:fd:a5:7a:98:a8:84:f3:
5d:f3:71:c2:22:d1:b6:6a:8b:9d:df:fe:b4:88:5a:46:81:45:
56:68:af:a8:1e:74:fd:ef:32:84:07:6e:f3:46:04:17:68:bd:
32:fb:1d:be:4e:4b:11:07:92:61:de:69:25:ac:a2:93:77:be:
e3:57:55:b8:98:06:92:37:95:a3:fd:09:c6:b3:ae:f9:89:21:
f5:e4:f0:35:d9:23:22:2e:ee:bb:50:17:b0:61:18:48:aa:dc:
8b:9e:bd:bc:cb:62:d6:15:a0:6f:27:22:bb:03:ff:38:71:6d:
2b:6e:c8:74:4f:50:a3:54:72:04:7d:ff:96:ce:2a:e0:fb:41:
73:c4:df:1d:ed:7a:96:32:10:ad:f8:dc:a5:22:cf:1d:7e:c6:
1e:43:4e:50:83:ad:b5:3c:f0:3d:43:78:cc:1d:39:8c:fb:b0:
79:23:5a:6f:9e:8b:19:0b:9c:96:a9:36:df:20:77:39:c1:d2:
dd:8d:68:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:10:58 2025 by rpki-client