Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/Qt-NHTWPG9Blnlp9KwVRBT4_TNs.roa
File: Qt-NHTWPG9Blnlp9KwVRBT4_TNs.roa (raw, json)
Hash identifier: iMKB/O68vIbAIcl8B86g//4tQCSnWahP5EtY42n7PM0=
Subject key identifier: 42:DF:8D:1D:35:8F:1B:D0:65:9E:5A:7D:2B:05:51:05:3E:3F:4C:DB
Certificate issuer: /CN=e96a769beca3b1932955158135596365c43c83b1
Certificate serial: 019426D95F0ACF607FAFA535D12037F07C27
Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/Qt-NHTWPG9Blnlp9KwVRBT4_TNs.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211701
IP address blocks: 193.169.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5f:0a:cf:60:7f:af:a5:35:d1:20:37:f0:7c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96a769beca3b1932955158135596365c43c83b1
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42df8d1d358f1bd0659e5a7d2b0551053e3f4cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:84:e2:d3:cc:16:f4:5a:88:fe:9f:74:32:
80:9f:61:3b:4a:5f:52:61:e7:c3:fa:5b:91:4f:f5:
8a:fb:ed:8c:ef:26:a7:45:10:21:03:fa:28:49:aa:
b6:ad:43:95:4f:fc:57:d1:18:b1:a9:97:88:bd:4a:
cb:a5:89:c9:c0:3e:02:ea:7a:34:ef:6f:8a:d0:9c:
ce:ba:b8:f0:62:99:16:1b:e3:6d:93:df:c2:70:fb:
ea:ba:db:0e:f5:4e:47:b0:8b:a5:2b:33:ca:90:50:
73:be:a9:33:7b:a1:5f:2b:7b:23:22:39:cc:d7:73:
fd:0c:15:89:dc:8d:a5:7e:7a:b3:db:74:07:4b:a4:
a6:71:31:ad:f6:3d:59:4c:f9:16:a8:0e:a0:01:7a:
93:12:3b:b6:e2:07:fc:7a:9a:a5:aa:0f:05:ae:a5:
45:68:64:df:a4:83:88:2d:06:af:b5:55:84:e1:e0:
e8:4d:ac:ba:c5:06:73:34:46:1a:63:d7:9c:ed:e6:
a0:85:14:c9:e4:d7:ae:78:e5:54:ef:42:86:c6:13:
e7:9a:37:8a:7d:85:91:51:f0:60:43:11:89:47:5b:
56:a6:7e:76:eb:43:7c:60:75:ef:27:bc:97:1f:19:
e2:3c:6e:e9:f3:d7:ff:2e:42:cf:34:74:24:29:46:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DF:8D:1D:35:8F:1B:D0:65:9E:5A:7D:2B:05:51:05:3E:3F:4C:DB
X509v3 Authority Key Identifier:
keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/Qt-NHTWPG9Blnlp9KwVRBT4_TNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.136.0/24
Signature Algorithm: sha256WithRSAEncryption
88:88:e3:17:a9:c8:13:b4:33:1e:cc:5f:bf:5a:2a:ca:8e:fd:
a5:0d:95:59:c2:83:7e:cb:5d:45:b5:ac:b0:3c:2d:fb:2c:89:
1a:8e:b9:bb:e4:d9:b6:36:25:f4:77:1b:49:ac:99:f0:ed:a8:
ec:a2:51:e7:cb:d2:25:28:2a:06:3a:db:64:60:09:83:eb:11:
0c:e5:49:47:6e:a6:03:80:78:d7:f0:1c:95:37:f2:f2:e6:f5:
db:8e:7e:7d:1e:1c:c2:f8:59:68:ac:08:67:57:0d:2e:20:5a:
87:e1:a7:b3:60:de:80:a1:b5:a3:85:53:fc:fd:fa:27:05:9d:
31:c1:86:4e:81:b3:8e:97:c1:0b:39:73:a5:18:35:35:f8:1b:
b5:bf:7c:82:45:14:5b:16:0c:0c:43:9a:2f:9c:7a:7b:d3:77:
40:89:13:6d:01:1c:c9:fc:dc:fc:73:00:b7:dc:ad:0b:69:63:
98:46:1a:e9:aa:8c:72:6b:d2:86:28:4d:98:69:25:ed:9b:81:
ca:ad:ee:a9:8f:00:40:c4:c5:7b:4b:e7:54:51:bb:a5:5d:20:
ad:eb:8c:0a:b4:e3:4a:81:49:55:cd:bc:ec:54:92:07:8c:03:
3b:ba:ce:cb:56:b1:9a:90:b4:fa:be:af:0b:b2:48:a6:42:a7:
be:0c:f2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:25 2025 by rpki-client