Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/QRwZwj-EtgWsWtGLyP94z8eYhbY.roa
File: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (raw, json)
Hash identifier: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=
Subject key identifier: 41:1C:19:C2:3F:84:B6:05:AC:5A:D1:8B:C8:FF:78:CF:C7:98:85:B6
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 019424B27FC66221E514BF07E37B26AE8F10
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/QRwZwj-EtgWsWtGLyP94z8eYhbY.roa
Signing time: Thu 02 Jan 2025 01:47:45 +0000
ROA not before: Thu 02 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60893
IP address blocks: 91.132.240.0/22 maxlen: 24
91.132.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7f:c6:62:21:e5:14:bf:07:e3:7b:26:ae:8f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Jan 2 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=411c19c23f84b605ac5ad18bc8ff78cfc79885b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:0a:3a:2b:57:63:59:56:51:c9:7b:fc:e6:
45:f9:36:5b:39:95:16:86:fc:81:a5:c8:b7:2a:c3:
df:6c:48:ed:98:ef:d8:4f:b1:af:06:ab:f9:29:7e:
19:2f:a6:28:52:ac:06:70:64:cc:f9:ec:fb:9d:35:
aa:2f:4a:8e:41:c9:6a:61:f3:90:6a:03:35:bb:21:
35:4c:0a:e4:40:11:74:22:33:c5:33:ad:6b:90:43:
0f:a3:7e:f3:fb:10:da:47:ca:a7:f1:33:1f:66:f1:
74:58:d4:3f:a9:7c:9b:2e:d1:58:6b:6b:e4:c8:26:
24:49:36:67:e5:60:9f:85:ad:ce:35:7a:ff:d0:e5:
b7:a7:03:68:01:21:96:ed:29:a9:04:e1:cb:b8:a0:
bc:71:58:cf:b4:a7:0d:8a:9b:0a:fc:18:e5:e3:fd:
0d:91:80:5f:7b:32:98:50:0f:0f:c8:f5:36:1a:b7:
aa:d8:95:fe:fd:a2:33:9e:c3:01:02:c3:b9:57:c2:
53:f8:36:08:da:7c:ca:aa:4d:d7:91:74:73:ba:0d:
66:58:30:7d:a3:f8:02:72:b6:dd:45:be:f4:64:81:
3f:4b:e7:77:e0:71:93:09:be:0e:da:6a:8a:16:e8:
8a:b3:1a:2a:51:c4:37:9b:76:0b:45:a3:81:2d:f0:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1C:19:C2:3F:84:B6:05:AC:5A:D1:8B:C8:FF:78:CF:C7:98:85:B6
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/QRwZwj-EtgWsWtGLyP94z8eYhbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.240.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:0f:24:08:cd:05:db:19:aa:8a:0f:89:9e:f2:be:d1:32:11:
54:07:50:0b:92:4a:e7:63:dd:63:9c:1d:8d:b2:dc:11:e9:5f:
dd:62:d4:63:a0:99:47:d5:5b:29:fd:a8:0c:5d:06:51:6a:5c:
b4:21:39:b9:7b:96:ea:d5:a0:dd:9c:a5:40:67:fd:31:98:41:
80:5f:cf:3e:4b:64:5c:11:ac:fc:08:26:9d:93:1c:37:ec:0b:
3b:0e:f1:40:c6:b1:fa:6b:ef:a8:82:9a:b9:8d:c4:1e:16:9b:
90:f3:33:96:d2:10:e9:d1:75:e0:c0:16:ce:86:09:be:2c:1b:
6a:cf:14:4c:6a:2d:ff:46:db:bd:17:93:95:bd:d6:9f:0a:b7:
4e:b8:a7:dd:9c:b6:00:57:da:5a:d5:0f:2c:ee:d2:dd:5a:b2:
03:11:c8:12:6b:dc:cf:e8:2f:39:89:4f:72:60:27:8e:2d:59:
6a:ae:7c:ba:82:5a:05:76:69:02:37:97:60:5d:ff:d1:67:59:
8c:1d:a4:ba:82:4f:44:a0:d5:80:32:08:71:40:0a:69:a5:e2:
ea:42:52:f7:ae:dc:2f:fc:27:4f:aa:6e:c7:83:8a:83:5f:f9:
67:5b:7e:f8:56:e1:b8:97:2d:95:4c:b5:1e:28:49:9c:16:cc:
ec:cc:d8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:42 2025 by rpki-client