Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/QHGLz4vDf8HU0PXuv58AHJKDNwE.roa
File: QHGLz4vDf8HU0PXuv58AHJKDNwE.roa (raw, json)
Hash identifier: zsAsJqx3Xlx/j+LLE8QbsIeKt4A9wuocERvf2nTmf7A=
Subject key identifier: 40:71:8B:CF:8B:C3:7F:C1:D4:D0:F5:EE:BF:9F:00:1C:92:83:37:01
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 019422FC123AD36ED1E142DEF7941E85668B
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/QHGLz4vDf8HU0PXuv58AHJKDNwE.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209276
IP address blocks: 185.136.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:12:3a:d3:6e:d1:e1:42:de:f7:94:1e:85:66:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40718bcf8bc37fc1d4d0f5eebf9f001c92833701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:b2:1f:6d:6d:31:9a:96:90:81:f8:5d:de:
88:52:27:36:9e:ed:df:8e:7e:60:fa:8a:dc:5c:c7:
62:d8:c7:c9:09:f7:91:60:a2:74:6f:54:e3:58:dc:
bf:f3:51:c6:fc:90:d5:1d:3d:ca:77:d9:91:55:58:
9e:4c:15:79:27:12:3b:c7:38:47:47:f9:47:4e:1d:
d2:d5:28:d4:23:87:d5:fb:17:e3:37:ff:b0:df:11:
c3:09:0e:07:a3:9c:d9:c3:8e:a9:ec:cd:27:09:c7:
db:d5:68:6c:4b:dd:75:4e:65:f1:5c:e7:e4:e3:d1:
96:a8:21:00:14:1e:d6:49:c5:ce:0a:e1:9f:49:4f:
49:6e:af:0d:b5:d0:2c:79:25:8f:1f:ee:45:74:50:
6f:7b:f6:e8:30:50:e8:d7:69:3e:dd:eb:c5:c0:66:
ee:97:c6:75:db:c5:9c:63:44:08:91:2e:f7:78:44:
5f:58:e7:9b:ee:42:1c:3a:8b:e5:4f:cf:fa:5e:e3:
c7:10:b9:da:89:08:8e:7c:53:60:25:27:93:dc:e4:
b5:5d:14:8e:82:eb:48:43:5c:42:cd:7d:20:29:18:
27:e1:34:3e:94:ba:8f:81:19:b3:71:51:ba:88:c6:
65:43:fe:85:a0:0b:f3:93:87:b6:57:58:0f:26:1e:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:71:8B:CF:8B:C3:7F:C1:D4:D0:F5:EE:BF:9F:00:1C:92:83:37:01
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/QHGLz4vDf8HU0PXuv58AHJKDNwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.226.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b5:aa:76:6a:61:aa:ab:52:74:be:82:13:b7:79:77:58:57:
c2:6c:ea:a7:43:e4:79:43:ea:4f:9b:8f:50:34:49:9e:56:1e:
f2:fe:f7:01:6e:e6:5d:fd:32:12:b4:91:8c:85:a5:66:cd:15:
73:31:53:51:07:4e:07:21:21:fd:3f:2d:a4:f7:b9:e7:68:87:
9d:c4:cc:47:44:a0:05:2b:75:29:7d:00:d4:8b:19:7e:06:ed:
db:dd:a7:44:7b:ba:c6:05:b6:b0:62:20:c5:5c:8e:d1:54:03:
1b:56:11:15:da:59:4e:78:32:d5:09:45:6c:d6:6a:f3:36:a5:
8b:e3:f2:2a:b8:38:0b:73:d2:19:6e:61:df:c7:74:e1:3a:f3:
2e:13:3c:7e:71:9a:81:2c:11:c3:ef:33:6e:f2:18:db:84:ae:
fa:45:29:c4:d7:b9:51:ba:96:bc:9e:be:05:4d:a8:73:e7:b4:
b4:a3:4f:c2:af:3b:50:61:ab:17:5e:8f:20:74:ba:7f:ec:17:
46:28:e0:8b:13:6b:ca:5f:60:2c:a1:46:86:b3:0b:10:d5:cb:
a0:1b:da:09:9a:85:df:dd:08:e2:9c:b3:80:a0:13:62:49:67:
bd:2d:47:7e:52:85:bd:6e:b8:67:27:27:15:b3:c4:77:da:9b:
79:3e:f6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:16:28 2025 by rpki-client