Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/qRvHhsUzZRo3GIbvVdtrbB33RHM.roa
File: qRvHhsUzZRo3GIbvVdtrbB33RHM.roa (raw, json)
Hash identifier: I0ja9Wkg3NaDCO4/Iu1ewOYHJdhLcuLZy6a2WJD503M=
Subject key identifier: A9:1B:C7:86:C5:33:65:1A:37:18:86:EF:55:DB:6B:6C:1D:F7:44:73
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019426D9EEAEE95ACA3A0C78F279C7508105
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/qRvHhsUzZRo3GIbvVdtrbB33RHM.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39519
IP address blocks: 86.105.223.0/24 maxlen: 24
152.89.92.0/22 maxlen: 24
194.107.165.0/24 maxlen: 24
195.93.242.0/23 maxlen: 24
195.191.98.0/24 maxlen: 24
2001:4ba2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ee:ae:e9:5a:ca:3a:0c:78:f2:79:c7:50:81:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a91bc786c533651a371886ef55db6b6c1df74473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:86:9f:d9:13:b4:0a:5a:4c:aa:ce:f5:d6:
99:6c:16:32:a3:c9:da:6d:f6:a9:77:af:e5:10:f9:
c3:e2:27:0f:53:b2:3b:74:4b:42:45:50:a1:b0:7d:
65:4f:1c:99:e5:bb:62:1a:54:32:93:08:cd:55:d0:
93:6f:f3:ef:5f:84:3f:6b:60:ee:4a:7e:e8:81:ec:
b6:55:d8:15:05:d0:66:36:6d:37:f7:55:04:97:cb:
e4:d4:12:db:c7:45:7f:ac:3d:49:18:39:02:a7:ec:
eb:74:39:e4:c6:1c:94:fa:17:62:dd:3b:eb:44:38:
e7:4d:e8:43:54:a6:cb:65:e1:d4:c3:f4:a8:4c:a4:
69:11:b7:07:6a:f7:9f:05:77:0b:d0:73:89:b1:7d:
b2:b8:b3:aa:35:55:94:d9:ef:86:1f:b8:b6:5e:ca:
d8:e2:f8:b3:58:dc:c8:04:40:4e:f6:73:12:65:ed:
c5:9e:f1:ee:00:c7:0d:bb:43:f7:df:a9:82:0c:0c:
61:2c:f5:48:1d:ec:70:10:21:29:df:22:f4:c9:24:
c9:e8:fa:81:4c:36:b4:4a:76:e1:6e:15:1d:37:08:
f7:42:95:be:41:bb:2e:7d:c1:0b:9a:44:d0:d3:a4:
4a:40:37:75:42:5e:c2:48:c0:32:b7:57:f4:d1:56:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1B:C7:86:C5:33:65:1A:37:18:86:EF:55:DB:6B:6C:1D:F7:44:73
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/qRvHhsUzZRo3GIbvVdtrbB33RHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.223.0/24
152.89.92.0/22
194.107.165.0/24
195.93.242.0/23
195.191.98.0/24
IPv6:
2001:4ba2::/32
Signature Algorithm: sha256WithRSAEncryption
80:00:a3:3f:8c:37:90:0c:be:c6:33:47:c5:c3:16:94:7d:df:
22:7f:a4:d4:53:4b:01:e0:c9:74:ab:0f:9c:52:0d:e2:d6:57:
74:87:ca:86:be:66:cc:4b:10:c8:49:50:9f:d5:2a:36:8d:73:
3f:79:4b:b0:f1:e8:43:f5:c1:70:c8:d2:ac:11:71:1f:8a:9b:
04:1c:2a:a5:3c:20:cd:c6:27:4b:39:6a:b0:74:5f:87:62:97:
bf:a1:62:14:ef:ee:a9:c9:86:a9:f4:05:ac:8a:0f:15:e8:11:
8d:3d:67:f9:e9:46:00:e2:f0:58:88:74:88:8a:5b:de:bb:d8:
9a:42:cb:72:97:6f:7e:97:40:fc:56:76:7d:f3:72:2d:10:ad:
ef:94:92:e1:47:af:6c:7e:27:e9:41:80:0c:6f:b9:16:0b:10:
68:f1:d7:1b:9b:d1:2f:ad:8e:97:cb:d4:1e:23:04:21:eb:a6:
09:25:f6:f7:2e:10:83:24:f8:89:b4:9a:aa:b7:87:f0:45:af:
0e:5c:31:bd:1c:2a:62:ee:3b:69:13:f9:0e:81:b1:7c:0f:d0:
b8:85:a9:df:21:96:cc:11:b7:5b:49:5d:94:ff:80:47:a1:29:
e7:7e:21:15:58:d6:23:0b:86:8a:8b:f2:ee:3f:d0:d6:fb:a3:
6c:89:2f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:33:31 2025 by rpki-client