Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qV9nDoiAF8gXIliFSRDis-24Brk.roa
File: qV9nDoiAF8gXIliFSRDis-24Brk.roa (raw, json)
Hash identifier: eLJUFzJaFlCcRkk7o2Yeb7uf/k9AVTcuJ8+yZUv8EVw=
Subject key identifier: A9:5F:67:0E:88:80:17:C8:17:22:58:85:49:10:E2:B3:ED:B8:06:B9
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019427469D274AC3E64218211EC019E57685
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qV9nDoiAF8gXIliFSRDis-24Brk.roa
Signing time: Thu 02 Jan 2025 13:48:46 +0000
ROA not before: Thu 02 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49334
IP address blocks: 31.210.34.0/24 maxlen: 24
31.210.52.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
78.135.65.0/24 maxlen: 24
188.132.131.0/24 maxlen: 24
188.132.173.0/24 maxlen: 24
188.132.181.0/24 maxlen: 24
188.132.182.0/24 maxlen: 24
188.132.187.0/24 maxlen: 24
212.68.53.0/24 maxlen: 24
212.68.54.0/24 maxlen: 24
212.68.58.0/24 maxlen: 24
212.68.62.0/24 maxlen: 24
212.68.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:9d:27:4a:c3:e6:42:18:21:1e:c0:19:e5:76:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a95f670e888017c8172258854910e2b3edb806b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:fc:37:ab:6a:3b:d9:b0:9a:d7:cc:f2:37:
bd:02:62:0f:37:11:30:96:7e:0b:9c:b5:4a:7e:90:
b8:66:15:c3:ac:7e:a6:7f:cb:43:0c:a7:2e:3a:52:
5a:05:f4:a1:0d:e3:6f:d8:7f:6e:8f:65:66:a6:14:
6d:bd:d9:62:cb:e7:96:e5:56:20:87:73:94:a1:ef:
a1:d5:80:9b:35:0a:15:1c:38:b7:3e:ba:a9:68:cf:
4d:cf:6d:8d:d4:f8:68:4a:f6:48:02:a6:0b:0a:c6:
40:19:49:e3:66:44:27:66:99:fb:e1:05:e3:02:bb:
8b:ee:40:e9:a9:a0:ee:01:da:22:13:8c:71:75:b1:
80:fa:2f:18:eb:2a:f7:5c:7f:81:94:82:01:56:a6:
bf:1b:db:14:9a:dc:c8:36:49:e7:47:df:b6:92:d1:
dd:06:bb:0d:3b:b5:a6:37:7b:9c:d4:ca:94:1f:7b:
82:28:f2:f4:2f:45:71:c1:1d:3a:13:2f:77:2a:3f:
91:2d:90:8d:ce:d7:72:1c:ac:19:11:08:c8:91:9c:
aa:4d:6c:93:18:d4:a3:6e:f4:28:b8:51:2d:9e:94:
7d:ed:b4:0f:a3:91:14:56:1a:c8:1f:53:1a:1f:82:
f7:06:32:f9:5d:2f:24:47:ce:40:05:6f:f3:e8:b2:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5F:67:0E:88:80:17:C8:17:22:58:85:49:10:E2:B3:ED:B8:06:B9
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qV9nDoiAF8gXIliFSRDis-24Brk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.34.0/24
31.210.52.0/23
78.135.65.0/24
188.132.131.0/24
188.132.173.0/24
188.132.181.0-188.132.182.255
188.132.187.0/24
212.68.53.0-212.68.54.255
212.68.58.0/24
212.68.62.0/23
Signature Algorithm: sha256WithRSAEncryption
21:b9:b2:eb:af:bd:bd:ff:e7:e1:cc:2e:31:2c:37:8a:07:bb:
08:6e:5f:f9:11:b6:d6:d4:50:f1:04:8a:0d:7e:18:3a:79:cd:
a2:90:03:6d:fb:eb:c0:c6:f6:a8:8a:81:c5:c9:af:b5:f7:4a:
ef:01:33:5a:1e:c9:0f:55:81:61:e1:bf:f3:18:40:30:bc:79:
fb:ba:8a:29:d8:2d:90:59:02:a0:41:a5:81:ab:d0:6f:a5:6e:
cf:30:67:a9:ac:85:e2:70:79:b8:83:e6:3e:e3:b8:9f:05:a8:
5a:c7:23:52:32:53:91:43:c9:c9:ed:cc:d6:80:79:57:48:e6:
d4:af:c7:2f:58:03:87:5e:8f:c2:a1:01:be:42:49:90:9a:50:
f1:a3:a5:61:c4:b3:f5:d9:18:cd:07:2f:7e:65:19:71:e8:c6:
70:98:e7:53:fb:5c:59:31:57:49:da:4f:8b:4b:7c:0c:46:52:
46:0e:40:40:db:e3:ff:b3:11:b4:57:0e:9d:82:9a:7b:55:9b:
08:5a:f9:d5:a1:62:a9:98:c2:3d:4a:64:99:72:45:ea:a5:83:
3f:55:67:9d:a2:b3:ad:ef:b0:71:5e:9c:a2:48:9d:f9:c3:da:
c1:4e:3a:e7:27:3e:96:c6:42:84:6d:13:26:e8:34:31:67:d9:
c6:e7:da:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:10:20 2025 by rpki-client