Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Pq__l0a6HrBOcCXhEDnn7AV0g54.roa
File: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (raw, json)
Hash identifier: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=
Subject key identifier: 3E:AF:FF:97:46:BA:1E:B0:4E:70:25:E1:10:39:E7:EC:05:74:83:9E
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 0194228E3B071FC9E8DF5632E6F95461EDCA
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Pq__l0a6HrBOcCXhEDnn7AV0g54.roa
Signing time: Wed 01 Jan 2025 15:48:54 +0000
ROA not before: Wed 01 Jan 2025 15:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213893
IP address blocks: 185.149.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3b:07:1f:c9:e8:df:56:32:e6:f9:54:61:ed:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eafff9746ba1eb04e7025e11039e7ec0574839e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:59:f8:c4:a4:44:83:55:89:3e:02:f4:3a:
cc:d3:5d:e7:11:bd:9e:c0:e4:9a:2c:f0:c4:52:fd:
5b:f6:a2:a1:60:e0:2c:7e:c7:3c:5a:82:8b:85:7a:
0a:bf:ba:bc:98:f2:3c:05:ee:ee:74:94:4f:de:98:
42:e2:ed:c5:4b:33:ee:7b:2f:e3:14:60:01:c2:5c:
cb:38:e5:9b:85:91:73:49:c6:1b:7c:df:c4:db:7f:
b7:80:e2:cd:54:88:84:95:bf:3d:f5:f0:0f:b4:42:
45:94:3b:eb:ff:26:62:f4:46:52:b4:c6:23:d8:cc:
7e:20:d0:9d:95:11:30:86:42:fc:36:33:d8:8b:9d:
8c:d0:ad:35:cc:ff:62:ec:ff:9e:46:42:47:2b:a2:
f1:e8:63:3d:d3:c8:13:95:b1:6b:92:78:52:49:f5:
1f:23:19:02:3e:02:fd:46:98:17:de:58:02:ee:ae:
5a:a3:83:5d:0f:ef:0e:08:9d:f4:bb:44:63:34:b3:
a7:44:01:bf:35:0c:51:f3:c3:03:91:5d:c6:c2:f0:
be:a0:ae:d2:b5:8d:8c:ca:8e:c4:45:08:4c:5d:c1:
3b:97:6f:6b:65:29:6c:24:b1:b3:72:a3:c7:b2:33:
f0:02:4d:af:02:65:9a:20:ad:4e:b6:e5:37:34:64:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AF:FF:97:46:BA:1E:B0:4E:70:25:E1:10:39:E7:EC:05:74:83:9E
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Pq__l0a6HrBOcCXhEDnn7AV0g54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.146.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:68:9d:1a:3e:51:eb:f9:4c:81:5e:71:df:67:6d:0d:96:be:
35:8e:23:90:4f:c3:75:c1:68:67:ba:f0:54:18:a5:3d:2a:13:
6a:c5:77:a7:03:ea:26:57:2c:02:44:0c:e5:2c:45:43:04:68:
17:b8:80:f3:ff:d6:23:4b:fc:81:29:98:49:fa:29:67:d4:a0:
03:e3:45:7e:ed:b4:93:f9:01:3e:e1:c3:65:e9:96:25:fe:95:
0c:68:89:10:d3:df:fa:8d:37:33:57:f6:be:b8:6b:07:19:cd:
85:9a:01:39:a2:4a:55:8f:f0:37:75:7d:a5:c0:53:4e:9d:a8:
8c:cd:08:0a:ac:40:e6:50:69:32:f8:cd:e2:05:08:a7:c2:1a:
70:27:1e:3f:78:44:21:b2:98:76:bb:8a:21:91:5c:43:04:7f:
39:cd:4c:be:2d:e3:d6:dc:01:20:d7:9e:fb:b0:6f:41:56:23:
4a:2f:df:27:b4:d9:0b:a7:26:e4:8e:0c:71:59:17:47:c5:3c:
36:19:12:1e:96:0c:de:9d:60:7a:d8:c2:9d:87:84:24:f5:be:
7e:c8:9b:51:8e:69:1e:e0:86:16:70:81:bc:66:e7:73:79:ee:
9b:5e:aa:66:0c:60:51:e0:bb:27:9f:34:ef:cc:d4:00:06:68:
d6:dd:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:58 2025 by rpki-client