Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/QJqE80vTZcABh8uMbWp_f5_BfGo.roa
File: QJqE80vTZcABh8uMbWp_f5_BfGo.roa (raw, json)
Hash identifier: KSZyfhop/9B2Ebujy/Ez1nbME08Ct9341a602ePTFAM=
Subject key identifier: 40:9A:84:F3:4B:D3:65:C0:01:87:CB:8C:6D:6A:7F:7F:9F:C1:7C:6A
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 019424B2645796D6289B75C0DD4102E786E6
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/QJqE80vTZcABh8uMbWp_f5_BfGo.roa
Signing time: Thu 02 Jan 2025 01:47:38 +0000
ROA not before: Thu 02 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206119
IP address blocks: 5.181.19.0/24 maxlen: 24
5.182.244.0/24 maxlen: 24
5.182.245.0/24 maxlen: 24
5.182.246.0/24 maxlen: 24
89.200.216.0/24 maxlen: 24
89.200.217.0/24 maxlen: 24
89.200.218.0/24 maxlen: 24
93.157.189.0/24 maxlen: 24
93.157.191.0/24 maxlen: 24
146.19.12.0/24 maxlen: 24
185.93.52.0/24 maxlen: 24
185.93.53.0/24 maxlen: 24
185.93.54.0/24 maxlen: 24
185.93.55.0/24 maxlen: 24
185.107.132.0/24 maxlen: 24
185.195.253.0/24 maxlen: 24
185.195.254.0/24 maxlen: 24
185.195.255.0/24 maxlen: 24
185.233.246.0/24 maxlen: 24
185.233.247.0/24 maxlen: 24
2a05:f740::/29 maxlen: 29
2a06:af40::/29 maxlen: 29
2a0a:61c0::/29 maxlen: 29
2a0c:f700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:64:57:96:d6:28:9b:75:c0:dd:41:02:e7:86:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jan 2 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=409a84f34bd365c00187cb8c6d6a7f7f9fc17c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:88:3b:aa:51:98:9a:a1:f8:93:2e:44:e6:
0d:42:04:ce:01:7b:c9:dd:1d:0b:14:b4:62:28:d2:
5b:07:5c:fe:0d:f8:74:60:36:6e:09:fb:dc:02:fe:
4a:ed:45:72:26:6f:75:b4:fd:38:e2:19:e3:ac:cb:
7b:1c:4a:72:c9:13:11:90:c8:b8:9b:0a:ab:fd:9a:
38:71:71:88:94:da:2e:d8:79:f3:4d:e8:25:16:28:
40:68:f8:24:b1:63:b8:23:c7:ad:06:f9:39:26:c7:
71:b8:39:f1:ac:fd:4d:6d:16:fc:a5:29:dd:ef:1e:
c9:36:85:10:01:48:f5:29:83:e3:05:06:c1:0e:d6:
25:21:d9:8c:d0:74:ec:bc:ec:5e:a5:25:22:b2:94:
f9:16:8b:8d:6e:3f:ea:75:27:60:a4:25:11:f7:c2:
05:2a:b3:a0:2b:2f:c5:ef:d9:27:d8:93:26:8a:21:
32:35:02:d6:ca:55:f5:64:44:55:7c:03:a0:f7:b0:
70:9e:f7:53:06:89:c8:b7:26:a2:bf:54:0c:e2:77:
70:6e:c6:d5:f6:e3:a4:7a:aa:20:37:df:08:82:a2:
da:d5:f6:54:a4:db:e6:3f:7a:61:67:13:52:ec:5b:
8b:8d:33:0f:b8:af:50:07:1f:2e:e7:ce:82:be:2b:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9A:84:F3:4B:D3:65:C0:01:87:CB:8C:6D:6A:7F:7F:9F:C1:7C:6A
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/QJqE80vTZcABh8uMbWp_f5_BfGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.19.0/24
5.182.244.0-5.182.246.255
89.200.216.0-89.200.218.255
93.157.189.0/24
93.157.191.0/24
146.19.12.0/24
185.93.52.0/22
185.107.132.0/24
185.195.253.0-185.195.255.255
185.233.246.0/23
IPv6:
2a05:f740::/29
2a06:af40::/29
2a0a:61c0::/29
2a0c:f700::/29
Signature Algorithm: sha256WithRSAEncryption
ad:66:43:5f:8f:7b:7d:6e:81:9e:93:96:04:b0:74:0e:2e:5e:
5a:0d:76:87:82:7b:37:01:4b:30:a9:01:cd:75:63:67:f0:de:
41:eb:67:77:e4:db:a5:fc:80:04:29:4c:a5:dd:0f:96:76:42:
4c:03:62:1e:bd:f3:c8:3d:84:04:94:59:ed:d2:74:6e:39:40:
95:b8:76:dc:3f:0d:33:73:3e:de:e2:03:4f:f6:a4:4f:66:ce:
f7:27:0b:72:51:3d:5a:d6:3d:0c:8a:66:37:fd:61:57:42:ba:
f4:70:14:73:1c:a6:06:b1:8a:91:0f:ac:c0:51:d2:0b:90:55:
aa:01:70:c0:e1:f9:c5:4d:87:04:8b:48:71:54:f6:86:7f:ca:
24:66:3a:b9:46:b6:1f:d1:5b:83:eb:33:09:28:05:17:a0:f0:
d0:76:54:bf:a5:20:92:4d:d5:af:31:3e:87:6d:9e:bd:78:ae:
5b:29:48:96:f7:21:eb:4e:41:8a:53:17:11:16:b6:b8:9e:86:
e5:0d:e1:d0:83:a0:f1:87:57:d9:2c:b7:e7:4b:7a:e3:81:46:
e8:32:21:ce:9d:a5:89:16:7b:e7:77:0e:7b:3d:91:16:97:9b:
35:e3:7c:24:38:49:f9:aa:fd:70:4c:46:5f:58:d0:a7:7e:22:
b1:b9:fc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:34 2025 by rpki-client