Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/QSiu2o8yvX-7lTIYlrRdn3A1iGo.roa
File: QSiu2o8yvX-7lTIYlrRdn3A1iGo.roa (raw, json)
Hash identifier: 7IpNvDtHzCXBqYppLIWhOXhyXloL9H2f5Plfi2MJpdo=
Subject key identifier: 41:28:AE:DA:8F:32:BD:7F:BB:95:32:18:96:B4:5D:9F:70:35:88:6A
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 01942826925729C96A5308043A85FDCE2B51
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/QSiu2o8yvX-7lTIYlrRdn3A1iGo.roa
Signing time: Thu 02 Jan 2025 17:53:23 +0000
ROA not before: Thu 02 Jan 2025 17:53:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.15.21.0/24 maxlen: 24
194.53.136.0/24 maxlen: 24
194.53.137.0/24 maxlen: 24
194.53.138.0/24 maxlen: 24
194.53.139.0/24 maxlen: 24
2a0e:1d80:6::/48 maxlen: 48
2a0e:1d80:8::/48 maxlen: 48
2a0e:1d80:9::/48 maxlen: 48
2a0e:1d80:10::/48 maxlen: 48
2a0e:1d80:11::/48 maxlen: 48
2a0e:1d80:12::/48 maxlen: 48
2a0e:1d80:13::/48 maxlen: 48
2a0e:1d80:14::/48 maxlen: 48
2a0e:1d80:15::/48 maxlen: 48
2a0e:1d80:117::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:92:57:29:c9:6a:53:08:04:3a:85:fd:ce:2b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Jan 2 17:53:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4128aeda8f32bd7fbb95321896b45d9f7035886a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:60:86:8c:c3:e4:fd:a7:42:a5:c4:59:11:
46:79:31:d7:b8:41:c6:19:1b:ab:41:17:27:72:cc:
3e:41:fa:1e:80:38:34:53:29:b1:cc:58:e6:9e:5e:
bd:8a:90:a3:1a:18:f7:6c:56:72:40:54:54:1c:1f:
fe:7f:a4:c9:49:16:9c:9e:03:a4:52:be:e4:6e:9d:
8c:79:98:6b:13:7e:f6:8f:a6:61:4c:d5:68:35:3f:
0d:32:c0:02:40:cf:ee:7b:11:e0:83:96:82:8d:3d:
e3:3a:29:bf:58:5a:43:4a:66:3d:c2:29:03:01:dd:
3e:e9:25:fc:44:12:ff:a6:d0:f6:09:c1:07:19:e0:
3d:ff:7e:85:8b:a7:98:9b:9f:90:7b:4f:18:6b:53:
04:f7:de:54:36:c7:0d:c6:7e:1c:a1:6e:5a:c7:af:
a4:72:2f:d1:75:1c:5c:fe:b9:c3:78:e9:83:21:88:
b7:84:40:8e:52:cf:c9:47:d8:1b:1d:c8:c1:9f:6a:
98:0d:38:7c:33:0b:eb:86:fc:45:c8:01:1d:6f:80:
16:a5:09:8c:e9:a5:12:36:b3:5d:2a:ca:c8:a0:ef:
32:6f:8b:f5:31:99:f8:71:95:55:88:67:69:ec:19:
e5:5c:1f:65:01:54:91:13:5c:5e:5a:cd:22:e1:87:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:28:AE:DA:8F:32:BD:7F:BB:95:32:18:96:B4:5D:9F:70:35:88:6A
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/QSiu2o8yvX-7lTIYlrRdn3A1iGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.21.0/24
194.53.136.0/22
IPv6:
2a0e:1d80:6::/48
2a0e:1d80:8::/47
2a0e:1d80:10::-2a0e:1d80:15:ffff:ffff:ffff:ffff:ffff
2a0e:1d80:117::/64
Signature Algorithm: sha256WithRSAEncryption
2f:22:c7:83:15:53:77:ee:50:1d:f8:d6:e3:48:4d:f6:f1:f2:
c8:13:ce:c7:7a:0b:55:f7:c9:44:1b:37:b2:76:67:db:c3:20:
9e:f2:d7:1b:56:6b:c9:3d:fa:a6:cf:22:f8:89:2a:e2:0d:2e:
94:c0:9a:00:a3:15:ec:f6:76:3f:58:cd:6c:3a:f0:fd:1e:be:
6a:be:a5:b1:fb:a9:e7:cd:9d:51:ff:82:54:b3:fb:98:8c:e9:
42:f7:fb:82:77:39:95:8a:f0:3f:c8:a4:8b:42:80:e3:6f:b6:
06:76:89:4e:db:ca:61:6d:65:86:0b:e7:14:67:d3:8a:51:56:
03:30:02:d6:7c:2f:4c:e4:b1:25:7d:e1:d0:01:6d:33:be:f2:
b8:00:66:80:29:71:30:03:9c:df:42:95:22:f9:a1:c7:0f:77:
35:f8:05:3e:96:d8:7e:d9:cc:ad:68:03:7f:ed:4d:f4:9d:24:
25:83:b2:87:bd:73:3a:32:49:66:8d:89:ca:49:60:22:c3:c1:
57:1f:a0:21:60:58:9c:7e:6d:11:7d:78:0d:b4:34:eb:f4:79:
a1:cb:f7:44:13:33:19:6b:f6:90:13:15:fe:45:b4:48:d8:2c:
c2:e0:53:f4:91:07:56:d2:e5:f5:cc:81:f3:13:ca:1e:3f:26:
c9:b5:f6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:07:50 2025 by rpki-client