Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/dqsjUPzHMdBxxTU7uTUWfsL38S4.roa
File: dqsjUPzHMdBxxTU7uTUWfsL38S4.roa (raw, json)
Hash identifier: As3LPwYYzL/fwCofU+5BYsQuQyeSgAWdIQ5+bNJCRBY=
Subject key identifier: 76:AB:23:50:FC:C7:31:D0:71:C5:35:3B:B9:35:16:7E:C2:F7:F1:2E
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BA6EBA81AD9646F0A096E88535A2F
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/dqsjUPzHMdBxxTU7uTUWfsL38S4.roa
Signing time: Thu 02 Jan 2025 09:49:36 +0000
ROA not before: Thu 02 Jan 2025 09:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49453
IP address blocks: 178.20.29.0/24 maxlen: 24
178.20.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a6:eb:a8:1a:d9:64:6f:0a:09:6e:88:53:5a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76ab2350fcc731d071c5353bb935167ec2f7f12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:3e:77:cc:ad:5a:09:8f:6a:a6:da:f5:12:
25:1c:8e:6a:f9:8f:3b:1c:22:5c:21:2b:e0:51:c1:
58:e3:35:23:93:cc:f7:3e:27:e3:b6:87:3b:1c:8e:
97:92:0b:09:37:6e:e4:01:0b:5a:b5:76:da:69:f3:
f7:6e:33:28:2f:36:80:f6:e3:2d:10:51:d2:0a:07:
6f:97:51:1f:86:22:ab:f6:d1:b3:e3:bf:c4:5e:73:
ee:e9:0f:04:08:f1:43:ae:3a:34:1f:2e:35:d2:cc:
11:99:16:f7:b3:b4:25:f0:fd:6e:1b:bd:b2:52:10:
d7:f4:64:99:5a:78:6a:8c:77:4d:1c:53:b5:8c:9a:
39:da:88:7a:ba:17:d9:fa:61:44:e6:84:d6:56:73:
0e:d7:6a:0a:7d:ee:f7:b3:d4:c2:a6:0b:64:a6:c5:
56:f0:e9:47:3f:fd:4d:e8:0b:6d:53:1d:38:89:9b:
ef:07:c6:8b:77:39:ed:90:67:fd:b2:91:29:17:36:
fc:cf:4e:07:23:a5:a0:61:9e:5b:c0:de:9c:c9:9d:
f0:1f:b2:46:57:ab:77:d9:e8:bd:62:6d:14:73:2a:
84:84:92:30:cc:57:c9:29:e0:15:55:03:40:17:d0:
9c:e0:7a:e4:7e:79:99:1e:92:11:58:e1:b9:b8:c5:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AB:23:50:FC:C7:31:D0:71:C5:35:3B:B9:35:16:7E:C2:F7:F1:2E
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/dqsjUPzHMdBxxTU7uTUWfsL38S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.29.0/24
178.20.31.0/24
Signature Algorithm: sha256WithRSAEncryption
60:29:9d:5a:57:8f:2a:68:1c:dc:87:33:a8:db:1b:ff:e1:61:
24:25:8e:68:fc:26:8d:7f:be:87:7d:04:87:eb:00:81:ce:46:
3d:72:8d:bb:4a:7a:14:42:33:a0:23:a3:92:f1:a4:a6:19:fd:
f4:24:8e:12:38:d5:b2:db:a8:dc:20:30:66:32:3c:3c:79:20:
0d:05:53:33:59:a8:1f:ce:11:c1:68:2d:ec:38:ba:9d:4f:fa:
0c:67:38:4b:e6:1d:08:d2:a1:8c:20:e4:1c:8a:74:5c:14:61:
c0:1c:9f:05:a7:d8:b8:c5:6b:b4:a6:44:3a:be:ef:21:3c:ae:
7b:20:cb:8f:ce:3f:7c:ee:29:c4:7c:2f:69:03:39:bf:a7:49:
fa:71:aa:3c:c6:f9:23:fb:5f:e7:43:0a:1c:d6:6a:3c:b6:55:
14:f0:6c:03:c7:a2:34:91:6d:71:a7:9c:5d:75:f6:d5:7d:a6:
d8:55:48:e4:aa:ec:87:57:59:fa:18:74:05:e7:75:ce:a6:a4:
80:73:9c:7d:d3:cd:50:da:fe:cb:43:6e:2a:0a:28:cb:c7:70:
f6:3a:43:9f:b8:29:66:94:ee:80:b0:fb:19:c5:6b:af:31:da:
10:e4:fe:78:83:05:d9:cc:30:96:19:cc:56:5d:76:25:12:fb:
07:cf:e7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:02:26 2025 by rpki-client