Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/QRbrmHMbnacFIghz2vQJ1iEwIPo.roa
File: QRbrmHMbnacFIghz2vQJ1iEwIPo.roa (raw, json)
Hash identifier: gpC7d4/OhCyOZcpUbHREfEufrTPs9FXkeTxWhp4MXlw=
Subject key identifier: 41:16:EB:98:73:1B:9D:A7:05:22:08:73:DA:F4:09:D6:21:30:20:FA
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 019420D60BF39D9B7867D2FF92EE6FC5CCAA
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/QRbrmHMbnacFIghz2vQJ1iEwIPo.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198171
IP address blocks: 185.102.76.0/22 maxlen: 22
2a00:ca80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0b:f3:9d:9b:78:67:d2:ff:92:ee:6f:c5:cc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4116eb98731b9da705220873daf409d6213020fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:4b:00:54:f1:42:b0:2b:e6:53:77:04:9b:
3e:70:ca:8d:2d:8f:22:33:7e:99:78:50:c3:42:30:
c9:8a:bc:85:ab:5f:93:2c:89:76:a6:e2:21:ad:5e:
73:5d:46:ee:c2:1d:ca:7b:63:ec:88:b7:ad:74:dd:
ec:9d:aa:45:19:9a:ac:b0:a6:fb:27:d8:16:b5:0e:
8b:78:68:40:c7:fa:9e:f5:3e:1b:4f:a3:63:cf:9c:
09:1f:70:92:5c:24:e6:18:87:96:cb:20:fa:ba:a5:
73:42:09:1a:73:9f:08:8c:97:ad:99:48:e4:b3:10:
08:03:38:3c:15:1a:09:5d:ed:af:62:52:9a:b0:3d:
2b:5f:ef:af:a0:b4:43:e0:1f:a4:41:a5:98:53:3c:
41:08:b6:1a:f9:9e:8e:a3:3c:e4:d3:8e:57:e5:cd:
12:86:ac:5d:92:27:da:4f:ac:dc:a1:46:e2:0c:5e:
86:b5:64:de:04:1b:c6:7a:e5:ae:02:1f:6f:b4:21:
6f:65:3b:9b:15:36:e0:55:45:9f:16:6b:87:ee:a5:
bb:3d:27:1c:73:99:e3:8d:93:bd:3e:94:da:a1:99:
7c:82:90:4b:5c:3c:9c:76:c0:21:22:2f:e7:4d:69:
c7:d5:04:80:6b:af:c1:21:5b:3e:2f:83:af:2a:18:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:16:EB:98:73:1B:9D:A7:05:22:08:73:DA:F4:09:D6:21:30:20:FA
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/QRbrmHMbnacFIghz2vQJ1iEwIPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.76.0/22
IPv6:
2a00:ca80::/32
Signature Algorithm: sha256WithRSAEncryption
45:b2:ab:25:85:00:8f:78:a7:13:b6:f3:38:08:4d:c8:ff:ba:
6c:27:05:bf:e4:4d:eb:6a:dd:29:e0:73:13:6b:65:11:d6:ae:
af:87:e3:22:98:48:ad:02:24:7f:62:6d:6b:c3:6f:96:1c:b1:
54:47:96:fe:f7:f8:1f:22:80:16:48:7f:2f:f4:42:ef:c6:b0:
ee:de:da:c9:36:79:b0:bf:53:cc:83:de:a6:56:59:71:6a:59:
4f:eb:74:10:9a:38:0c:2b:f2:bf:27:14:37:82:ab:ca:32:1e:
03:11:54:e0:a8:22:9c:1a:0c:ec:48:83:3c:da:73:6f:18:ba:
ae:df:b4:48:1f:33:ab:5a:d2:50:09:d1:df:7d:76:cb:51:e9:
94:6a:30:71:28:4e:14:04:bf:d0:3a:89:8b:af:e3:c6:66:58:
1d:12:98:0d:05:85:87:ae:c3:89:8d:85:2f:ac:e5:0d:22:40:
47:76:2a:52:6a:27:1e:fc:49:19:3a:d0:fe:d7:7c:58:a7:21:
1c:9b:0d:92:9c:80:d5:24:e4:e1:71:02:b4:51:81:b1:52:fc:
b9:ba:58:16:20:0a:42:00:29:43:cf:87:66:f8:8c:30:46:25:
ad:af:d7:8a:15:13:8e:9b:f9:97:17:29:d5:32:9a:dd:cc:21:
e0:3f:88:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:54:31 2025 by rpki-client