Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/Q8RAMK3WipIDpp-VDJJ-omvSfHI.roa
File: Q8RAMK3WipIDpp-VDJJ-omvSfHI.roa (raw, json)
Hash identifier: 4QVA82W8uBEE+D+gcPu8CgGYNwIYDHbUUfdVByOsalc=
Subject key identifier: 43:C4:40:30:AD:D6:8A:92:03:A6:9F:95:0C:92:7E:A2:6B:D2:7C:72
Certificate issuer: /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Certificate serial: 01941FFA5ECAAEC970F00E12AAABEF1EBEB7
Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/Q8RAMK3WipIDpp-VDJJ-omvSfHI.roa
Signing time: Wed 01 Jan 2025 03:48:09 +0000
ROA not before: Wed 01 Jan 2025 03:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198126
IP address blocks: 217.197.110.0/24 maxlen: 24
2a13:a240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5e:ca:ae:c9:70:f0:0e:12:aa:ab:ef:1e:be:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43c44030add68a9203a69f950c927ea26bd27c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:45:fd:d4:9c:23:9c:28:e2:77:da:87:6b:
d9:1a:88:97:f7:f2:d7:9a:c9:7f:6f:df:d7:95:f2:
bc:81:90:89:62:e5:c4:eb:9b:14:56:5e:a4:65:22:
56:f9:c8:ad:d0:da:47:29:7a:48:76:a5:28:da:13:
c1:ce:17:cf:7b:f5:8b:eb:2d:56:ff:8b:5e:a4:69:
e0:e1:48:40:b4:b3:56:ab:d1:10:89:86:e4:e8:58:
1a:a0:7b:f3:2c:22:e0:7f:bb:17:7a:f3:a4:eb:46:
50:cc:d0:96:ae:ed:4d:15:bb:b4:9e:f8:f9:30:c8:
0e:b2:3c:03:8c:2c:71:5f:7c:ef:5b:ee:b2:2f:e4:
e9:f0:58:cb:0d:cf:1a:50:16:f3:a0:58:ef:45:9c:
ee:81:21:01:4d:42:9e:4d:78:91:41:60:4f:57:62:
5d:d8:2b:34:5d:51:ee:30:06:da:f6:34:53:dd:b3:
3d:bc:26:63:77:48:7e:3e:36:6b:17:91:95:e9:b4:
c5:44:1c:7f:e2:27:e2:49:b9:9d:1b:f1:f4:57:bc:
85:08:a0:4f:8b:ce:79:3a:05:bb:7b:9a:c7:34:15:
c9:ce:83:d2:ba:7e:e3:3e:7d:85:0d:df:a8:e3:93:
78:4e:b3:ae:20:96:f2:a5:ab:95:93:44:0d:53:68:
a2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C4:40:30:AD:D6:8A:92:03:A6:9F:95:0C:92:7E:A2:6B:D2:7C:72
X509v3 Authority Key Identifier:
keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/Q8RAMK3WipIDpp-VDJJ-omvSfHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.110.0/24
IPv6:
2a13:a240::/29
Signature Algorithm: sha256WithRSAEncryption
86:4a:8a:9f:05:98:2d:02:64:fe:4f:a8:fa:85:7b:18:4f:0a:
21:cf:35:a7:6c:9b:19:3f:5e:ee:18:d8:4c:d9:d1:64:68:bf:
a1:d9:93:36:8c:5b:6a:73:4b:53:50:05:06:bf:62:ec:c3:1c:
ee:bf:f7:76:18:5a:4a:fa:c6:be:25:f9:a5:a2:f1:57:0d:eb:
1d:81:2e:f2:17:7b:1f:cc:af:e4:44:29:76:70:c2:fc:81:ce:
59:05:7b:3c:01:92:2e:1e:20:a6:da:b6:60:c1:63:09:f1:75:
4e:27:47:67:f3:0c:f7:b8:86:45:4a:36:13:31:a8:77:6a:fb:
71:0c:77:0d:fb:f4:bc:54:6c:88:21:6f:d8:66:ca:c9:02:34:
65:4f:82:1c:a1:bc:ee:a7:39:84:01:c3:97:0b:2c:de:3c:c3:
45:83:5f:8f:1a:f5:da:13:54:e2:0a:1d:8d:50:a7:c8:7e:54:
5e:61:cd:72:0b:87:ce:a2:08:fa:8a:2f:fc:6c:47:cb:fd:5e:
1e:ec:8b:06:51:14:b3:c3:21:7f:48:5a:13:bd:4b:47:70:aa:
8f:7b:25:9d:6a:64:b3:e1:af:44:e2:6f:ad:95:91:4b:47:33:
01:e0:d3:9e:e7:13:da:ac:ec:ee:c0:5d:fc:35:8e:ea:3e:4a:
f1:94:0d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 16:03:51 2025 by rpki-client