Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qrb-tdWSEhPD0BUJE19AeClKurg.roa
File: qrb-tdWSEhPD0BUJE19AeClKurg.roa (raw, json)
Hash identifier: j6SZUm4sJ64X8j9MxTBSyy+oAIngQTC9+nOP66oGhMU=
Subject key identifier: AA:B6:FE:B5:D5:92:12:13:C3:D0:15:09:13:5F:40:78:29:4A:BA:B8
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019447951150FFD062AB7443B8FBDE01AE58
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qrb-tdWSEhPD0BUJE19AeClKurg.roa
Signing time: Wed 08 Jan 2025 20:22:19 +0000
ROA not before: Wed 08 Jan 2025 20:22:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.9.30.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:47:95:11:50:ff:d0:62:ab:74:43:b8:fb:de:01:ae:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 8 20:22:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aab6feb5d5921213c3d01509135f4078294abab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ff:fe:4c:fe:e8:85:41:7f:6a:f8:8d:f5:b3:
31:aa:11:3f:b3:90:af:72:b0:18:48:6f:16:63:2e:
ab:70:bc:af:dc:51:ea:38:bb:ec:6f:bc:ca:34:58:
51:1e:f6:34:ff:ab:bb:23:ac:86:22:f5:1e:a1:92:
1a:52:45:f8:10:60:2f:64:44:f0:18:42:e6:88:27:
cd:35:bb:58:19:66:1e:22:bd:42:53:93:24:b6:6e:
20:52:39:df:80:03:01:1d:ec:0a:cd:2a:b9:37:92:
dd:a1:c9:2c:1b:6f:38:c1:d6:6a:c0:50:28:6a:5d:
7b:d3:d5:ac:d2:5b:61:fd:d4:c9:8e:33:9d:cd:19:
e6:e3:c3:bc:9c:c1:b5:fc:cc:d7:d3:c0:7b:7d:4e:
86:6d:b1:06:a9:74:b6:7b:b7:10:75:e5:b0:63:19:
77:fe:48:ac:c5:4a:41:79:29:d0:61:ac:7c:db:98:
d5:7d:74:e1:15:92:8c:2b:a8:1b:c8:89:cf:a4:26:
ca:d3:c1:2c:d9:69:0e:88:cb:4f:ba:94:75:26:e9:
6e:b6:36:64:c5:3f:5c:eb:ea:6a:fc:4f:e3:21:ce:
53:98:18:6b:01:91:5d:8c:3c:fc:98:69:2a:55:be:
81:af:4d:cc:d2:0d:2f:4a:74:f0:4a:25:28:6d:2e:
40:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B6:FE:B5:D5:92:12:13:C3:D0:15:09:13:5F:40:78:29:4A:BA:B8
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qrb-tdWSEhPD0BUJE19AeClKurg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/23
45.9.30.0/24
45.13.190.0/24
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.94.170.0/24
45.132.181.0/24
45.144.213.0/24
85.209.120.0/24
193.57.41.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f5:b1:a6:a6:5e:c7:a8:2f:ea:2d:bc:ae:fc:9c:fd:ca:2d:
df:ce:a9:ad:51:26:f1:c4:8c:6a:8a:d2:d3:57:25:64:03:84:
b8:f7:3a:64:bd:e9:9f:79:44:44:ed:73:39:dc:94:58:1a:3f:
93:8b:ba:b7:e8:18:84:af:a6:9c:4f:75:11:12:dd:4f:ec:11:
96:76:e9:42:84:86:6e:db:af:95:9e:dc:d4:af:05:77:92:0f:
51:b0:83:f0:6b:79:5f:6a:ef:c6:16:ad:e6:03:0c:49:19:d3:
f3:64:aa:a1:83:6d:1c:58:71:c2:bf:df:17:ed:ee:0c:2c:3a:
1f:8e:9a:89:4f:e4:0e:c5:22:18:bf:f1:2f:a0:26:17:68:95:
3d:b4:26:5b:91:0c:d1:55:4e:bd:32:07:15:b6:2d:af:c9:31:
3d:bd:7a:93:0d:d6:49:d6:13:45:5b:35:e8:11:97:76:11:7d:
43:32:2b:fc:b1:17:85:3a:1e:d7:6a:4a:1f:62:17:7a:e3:fb:
69:d5:52:45:20:cf:03:42:5b:19:fd:fd:18:b5:36:e2:80:5f:
31:e3:8a:07:1e:b3:d2:e8:96:a3:3f:b7:04:91:82:55:df:43:
b1:bf:02:df:1e:9e:fa:ad:99:5d:85:76:ab:a9:3e:2d:c6:61:
4d:16:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:52:41 2025 by rpki-client