Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/qDlh24RbeDVjcAyrQ_STBRImmxI.roa
File: qDlh24RbeDVjcAyrQ_STBRImmxI.roa (raw, json)
Hash identifier: rXKS63u3mI4gIR/Pn3sZ2MevhW2+Svuk4c2ta1D48BU=
Subject key identifier: A8:39:61:DB:84:5B:78:35:63:70:0C:AB:43:F4:93:05:12:26:9B:12
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D6145627016488EA606B82E52BD1ED
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/qDlh24RbeDVjcAyrQ_STBRImmxI.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39531
IP address blocks: 93.115.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 02:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:14:56:27:01:64:88:ea:60:6b:82:e5:2b:d1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a83961db845b783563700cab43f4930512269b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:fd:7e:a6:27:e2:b8:8d:d1:ce:80:a5:97:
00:b3:7d:f5:01:90:dd:4c:04:1f:c6:e0:be:e2:b8:
d6:f6:f5:e6:80:13:31:0b:da:ee:a4:8c:e3:de:4a:
c3:f5:c0:f4:c0:99:56:8f:86:95:c2:f2:51:4e:94:
b0:2f:b7:3a:ea:f2:20:2b:4f:70:a1:90:1a:97:26:
c3:79:6c:da:d2:6b:77:81:eb:e3:d4:bd:93:e4:51:
2d:09:c0:1e:e7:2b:b0:85:b4:3d:19:3b:56:50:7e:
d3:d0:c4:8f:0d:ce:13:03:04:ff:7d:9c:d1:eb:30:
6e:ef:d5:73:e1:e6:48:76:53:9e:1e:da:f5:40:03:
0d:20:b8:8d:3c:b0:9e:bb:5a:f8:d9:9a:62:2a:e9:
b9:e5:10:48:a7:e4:14:88:3b:38:f5:80:1c:1e:2f:
c4:ad:7a:5e:fa:75:6a:36:08:fb:75:2a:7b:fb:f0:
22:4c:c1:ef:8a:67:91:c3:e4:0a:ba:f3:47:d7:e7:
ab:2a:67:6f:fe:6a:72:d4:29:16:9a:08:c6:e7:23:
b7:55:fb:3b:1b:0d:4e:b4:fc:9d:fb:fa:e5:63:2d:
98:3f:99:1d:47:e5:ab:9f:34:d8:86:26:23:b1:a5:
d3:5f:df:c4:5d:17:17:1d:6a:20:8b:3f:f9:38:7d:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:39:61:DB:84:5B:78:35:63:70:0C:AB:43:F4:93:05:12:26:9B:12
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/qDlh24RbeDVjcAyrQ_STBRImmxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.174.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5b:cc:92:50:b9:d0:84:5f:6f:2a:64:5f:69:18:24:d5:db:
2c:0a:07:39:b8:ed:35:60:e2:e2:08:c3:d7:90:8e:d9:a9:69:
de:1e:f3:12:b6:26:13:8b:ad:38:de:9b:5d:88:a1:d2:f7:29:
19:5f:ab:fe:c7:5e:24:b7:48:d8:5c:51:47:6e:27:61:19:38:
99:2b:94:6f:22:86:eb:6f:ad:11:10:b6:d9:67:81:f5:a3:e1:
9f:a7:26:02:38:97:80:f6:08:95:37:ac:94:a1:78:97:d0:cc:
00:9e:04:68:ee:83:3c:5f:c5:19:ca:92:59:a2:b3:4c:e4:57:
8b:63:ea:d4:30:2e:d1:2c:27:a0:ca:0d:44:9b:22:31:28:ea:
39:b6:20:07:e2:10:73:a8:c0:7f:f4:4e:b2:3f:36:b1:30:cc:
6b:3d:e1:fc:15:7a:04:53:73:e8:1e:83:68:a7:12:74:88:96:
64:f0:10:9f:24:9f:41:99:30:88:7c:fc:c5:a6:41:07:4d:aa:
b1:5f:3a:80:3a:8c:cb:b3:04:a9:cf:67:c7:2a:39:33:aa:a0:
fd:22:89:0e:36:16:bb:4b:ae:4b:0e:b3:12:eb:b1:2f:b1:37:
55:fe:9c:39:f5:3e:3d:d8:70:b2:cb:96:99:84:69:fe:37:30:
67:5b:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:26 2025 by rpki-client