Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/Q1ID3jqh-PT7k00It8t9krcFrp0.roa
File: Q1ID3jqh-PT7k00It8t9krcFrp0.roa (raw, json)
Hash identifier: 53/LWfxj68LBwdUpxNq1PQF6QDcY5qwZBSFj5Skh+H4=
Subject key identifier: 43:52:03:DE:3A:A1:F8:F4:FB:93:4D:08:B7:CB:7D:92:B7:05:AE:9D
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 019428233A8315B805BAEEEE71700B709E09
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/Q1ID3jqh-PT7k00It8t9krcFrp0.roa
Signing time: Thu 02 Jan 2025 17:49:44 +0000
ROA not before: Thu 02 Jan 2025 17:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199255
IP address blocks: 185.4.248.0/24 maxlen: 24
185.4.249.0/24 maxlen: 24
185.4.251.0/24 maxlen: 24
2a02:6840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:3a:83:15:b8:05:ba:ee:ee:71:70:0b:70:9e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Jan 2 17:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=435203de3aa1f8f4fb934d08b7cb7d92b705ae9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:92:15:f0:c9:36:f8:38:01:58:d0:e7:d5:
6f:8a:51:57:c2:1a:2d:03:b9:bd:28:ef:d1:48:f3:
9c:68:a6:a2:3a:e4:7c:81:83:4c:22:dc:8b:34:bf:
96:60:ee:b4:4f:ba:6e:3e:40:66:e7:a3:0b:31:75:
85:f3:70:7b:d6:a9:e4:10:17:ee:3f:85:bd:d3:cc:
b4:19:ae:4d:2d:71:74:72:3f:fb:e1:93:74:4c:e6:
a0:b8:5d:67:2a:bd:1d:c1:6a:47:12:52:17:2a:db:
8d:38:09:3d:7c:d5:43:a6:eb:2f:20:ca:cb:5b:d6:
86:26:e1:cb:83:79:b2:34:26:24:b2:cc:20:ed:3f:
0e:7c:10:7e:52:06:a1:7e:a4:8d:d7:3a:6c:81:bf:
d0:78:16:c3:69:d1:58:f0:ab:d4:5f:d6:54:8b:6e:
02:8f:a9:47:8c:ba:fa:fb:39:50:53:a7:b9:f5:1d:
63:64:a4:27:45:72:de:e2:b5:0f:38:50:8f:d3:25:
5e:6b:b7:a5:6e:69:c9:b9:3e:b3:63:42:5f:22:50:
84:26:1e:3e:62:fd:0f:38:db:0c:62:c9:a0:c2:4e:
29:c0:58:bb:39:c6:78:28:63:0e:f4:1f:6c:4e:ff:
46:77:17:48:35:74:c9:a7:5d:63:95:b6:38:a0:f7:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:03:DE:3A:A1:F8:F4:FB:93:4D:08:B7:CB:7D:92:B7:05:AE:9D
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/Q1ID3jqh-PT7k00It8t9krcFrp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.248.0/23
185.4.251.0/24
IPv6:
2a02:6840::/32
Signature Algorithm: sha256WithRSAEncryption
08:2e:ca:72:c0:4e:3e:c3:12:48:40:cc:39:d2:a0:cf:dc:cd:
26:17:8e:54:2c:af:a6:af:12:cc:36:ff:e8:ca:97:0b:89:48:
96:f3:d9:f4:54:e4:cf:39:77:c7:18:8e:76:d5:9c:be:0a:25:
31:c0:cf:83:ed:e0:47:d8:c9:d3:f0:c4:5e:31:21:c2:df:d9:
bc:ff:cc:bf:dd:44:3d:85:05:aa:ca:e9:0c:c7:21:09:ad:47:
06:ae:4d:44:c6:7a:1c:8b:bf:d5:00:34:dd:1c:6e:e7:a4:5e:
66:84:a7:5a:01:38:c9:94:57:93:3d:f4:32:66:32:74:a5:f4:
82:d6:b9:cf:48:42:2e:52:be:41:d9:51:53:2a:b9:6a:f6:d2:
f2:79:4a:45:7a:81:12:51:cf:df:d1:17:64:aa:a5:ad:67:d3:
3b:d9:3b:2d:66:97:ef:70:61:c5:b4:ba:ff:dd:92:b6:7a:88:
b5:8c:42:c3:6c:35:14:ed:04:2e:95:29:35:fa:c3:c3:f7:53:
51:58:bd:5d:42:e4:60:ae:f1:5a:18:8c:2c:9e:97:d0:55:a3:
85:a9:21:f2:e5:76:23:47:2b:73:dc:c0:fb:2d:62:e2:2f:0f:
f5:71:00:a2:e1:2e:4d:62:79:60:70:f7:22:27:2d:ff:39:60:
68:87:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:14 2025 by rpki-client