Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cqy_R2fKsiX6Li_iPrXMNoeyPLc.roa
File: cqy_R2fKsiX6Li_iPrXMNoeyPLc.roa (raw, json)
Hash identifier: s/0NC09asD8OU4V+8fsleECwJU1ibut+DXxc0Z8Knu0=
Subject key identifier: 72:AC:BF:47:67:CA:B2:25:FA:2E:2F:E2:3E:B5:CC:36:87:B2:3C:B7
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC1A65CDC8B652A32E0561690E8E64
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cqy_R2fKsiX6Li_iPrXMNoeyPLc.roa
Signing time: Wed 01 Jan 2025 17:48:54 +0000
ROA not before: Wed 01 Jan 2025 17:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205911
IP address blocks: 185.51.120.0/24 maxlen: 24
2a13:4800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1a:65:cd:c8:b6:52:a3:2e:05:61:69:0e:8e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72acbf4767cab225fa2e2fe23eb5cc3687b23cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:e6:af:8e:ad:80:cd:a0:4e:77:b0:cc:cd:
b6:0d:d5:31:ca:38:ff:91:71:91:3e:54:a9:00:6c:
9a:59:1e:39:40:d7:50:fe:d7:23:0a:cb:dc:34:d4:
d3:5a:fc:c2:9c:fd:7a:3e:a5:60:97:42:bc:b8:22:
fd:8b:d5:3b:6b:21:d6:37:d7:f3:1a:be:5f:09:ef:
4b:a9:2c:aa:2b:7b:29:af:6a:0e:b4:3f:7d:91:3f:
50:7d:6b:75:4a:7f:84:02:60:76:18:7a:2f:cb:58:
1b:54:27:97:7e:4c:5d:ba:79:d9:3d:43:42:b4:90:
30:c6:26:92:26:f8:74:a0:97:f0:f0:28:fe:65:97:
8c:4e:11:65:12:e4:4e:5d:da:74:7a:84:81:53:88:
b3:67:0d:1a:d4:30:f8:79:05:55:8b:7b:7b:b9:66:
52:d0:58:11:b2:51:5d:7c:d1:cc:ad:34:2a:c9:13:
fd:8c:48:91:9e:3b:b7:2d:cc:c1:b9:0f:b4:53:30:
fa:a7:81:e9:54:78:2c:20:78:e3:01:b9:17:e5:2a:
04:68:f6:2f:7a:7e:c6:97:db:b8:8c:99:d9:1a:eb:
bd:7c:3e:bc:71:03:e3:b5:cf:c6:d7:ef:ee:f2:77:
8d:39:39:25:e3:1c:bd:b1:24:78:10:5b:6d:97:29:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AC:BF:47:67:CA:B2:25:FA:2E:2F:E2:3E:B5:CC:36:87:B2:3C:B7
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cqy_R2fKsiX6Li_iPrXMNoeyPLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.120.0/24
IPv6:
2a13:4800::/29
Signature Algorithm: sha256WithRSAEncryption
41:21:1c:9c:06:96:b6:c3:ba:db:94:98:d3:de:f6:ec:1f:8c:
5f:fb:d9:bb:94:c9:3b:78:be:e8:02:5d:7e:df:6d:33:f6:20:
5c:6d:1d:0b:e3:03:cf:15:fe:d2:83:2d:05:91:9f:37:44:a9:
d6:b7:ca:97:5f:4f:2c:68:90:28:ae:9a:c2:66:de:8f:77:ab:
0d:3f:3b:31:8d:3c:43:9c:68:c1:d1:0d:3d:41:5d:28:58:1e:
68:9a:45:27:d1:55:52:36:f5:54:4f:45:75:e4:67:09:ee:95:
c4:80:84:be:58:67:22:26:bd:15:bf:7a:ed:fb:22:73:12:7f:
38:93:e8:71:4a:12:bc:e7:b9:1a:c4:8e:8c:fa:b4:56:8b:37:
12:6b:a6:8c:1f:2d:d4:20:ea:5c:9a:4a:7d:9e:bb:69:81:56:
93:8b:ac:02:13:f0:97:31:90:d4:79:14:77:6b:dd:2e:0f:bf:
46:b5:44:af:0e:ed:1e:58:5e:2e:f0:0f:e4:7b:05:f0:cf:d4:
9f:23:f4:78:93:b2:98:5f:0b:4b:bb:67:04:fa:d6:b4:b8:aa:
e3:76:4b:a2:cb:81:d8:c0:08:08:31:36:da:2c:ae:79:6e:0e:
92:34:2d:d8:1a:44:9d:ae:bf:a1:a8:37:72:c0:47:d1:5b:37:
c4:5f:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:22 2025 by rpki-client