Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Qak--g4cNpU6CoUjtQGbcVvopDE.roa
File: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (raw, json)
Hash identifier: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=
Subject key identifier: 41:A9:3E:FA:0E:1C:36:95:3A:0A:85:23:B5:01:9B:71:5B:E8:A4:31
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B65A4AA3D9FA375CD8F18E04587CF4
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Qak--g4cNpU6CoUjtQGbcVvopDE.roa
Signing time: Thu 02 Jan 2025 15:50:49 +0000
ROA not before: Thu 02 Jan 2025 15:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398108
IP address blocks: 92.204.128.0/20 maxlen: 20
92.204.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:5a:4a:a3:d9:fa:37:5c:d8:f1:8e:04:58:7c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41a93efa0e1c36953a0a8523b5019b715be8a431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:b8:bf:16:76:cd:34:e9:93:c7:95:23:f2:
89:36:10:5b:af:fa:28:97:05:6c:29:e7:dc:b9:ee:
20:94:f4:88:0c:6d:01:00:32:59:b5:95:b1:63:8c:
be:f4:5f:fd:03:70:56:c5:4e:2d:e1:1c:a6:00:d4:
b2:e6:98:8e:b0:2e:bb:7c:cf:18:24:95:78:49:db:
ae:93:ab:7d:7f:7b:fd:3a:bb:df:b5:89:3a:7d:a8:
f6:7d:e0:64:29:55:77:94:49:91:9c:f7:ab:cd:e2:
42:ee:72:86:38:8a:a5:86:1b:fb:7c:37:ea:a1:c3:
18:fa:f9:df:0a:f0:c9:24:e6:51:6b:df:55:a3:15:
05:db:b9:9a:85:95:7e:07:47:cf:60:2f:8f:e4:f5:
79:8b:c1:69:20:59:43:3e:7e:fc:52:12:f9:78:f4:
1a:5a:6b:84:92:67:ef:16:55:05:1e:3e:86:de:3d:
a0:3f:0c:ee:d9:40:06:4b:32:1a:1d:6a:f5:d5:45:
39:3e:a3:8f:0f:28:72:c4:c1:df:a6:11:d9:a0:24:
6f:12:e3:ef:e7:aa:46:c7:e6:89:dd:17:f5:44:b1:
b7:2f:2b:5e:30:a7:29:ae:70:32:d7:f9:a6:d2:be:
b7:98:7a:f9:a0:0b:74:d7:e2:ff:5d:23:c8:00:4e:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A9:3E:FA:0E:1C:36:95:3A:0A:85:23:B5:01:9B:71:5B:E8:A4:31
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Qak--g4cNpU6CoUjtQGbcVvopDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.204.128.0-92.204.151.255
Signature Algorithm: sha256WithRSAEncryption
28:ad:2d:9e:84:2e:9d:47:c3:af:8e:be:54:9e:d9:18:da:c2:
c5:ad:33:14:d5:b7:74:de:21:88:fe:85:c7:74:d4:60:24:f9:
6a:0e:b5:51:a0:c2:ee:98:19:83:38:54:07:48:e8:c8:e7:32:
da:a5:07:b1:ec:6e:13:09:01:1a:b1:51:12:31:7e:24:21:ab:
44:08:61:82:b9:6a:11:0a:25:fc:da:ea:90:8d:63:27:0e:11:
2f:e6:e8:1c:0c:4c:be:5e:53:bd:4f:18:53:50:28:8f:73:0f:
dc:84:0c:0f:5e:57:65:df:a5:94:82:82:fd:5d:bc:fd:51:d7:
a2:ae:8f:fc:98:fc:9d:c3:95:25:b1:1b:90:db:85:dc:96:19:
aa:6e:c0:66:44:f7:d6:37:de:46:61:20:df:c2:63:92:65:85:
17:6c:4b:db:55:74:86:55:74:ad:22:b2:3b:10:b0:5c:6f:33:
1f:6f:50:9b:4c:1e:61:a4:76:4a:59:e4:2b:7e:ee:52:ee:c4:
bb:2e:c7:5e:96:dc:64:22:a1:08:36:1b:70:51:a5:98:da:27:
46:94:ac:f0:2e:20:44:68:a7:1b:55:a4:00:8b:85:eb:da:c3:
5d:d6:98:e6:72:e8:6b:e3:7f:c6:3f:97:25:85:a9:0a:ed:c5:
57:cf:6d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:09 2025 by rpki-client