Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/Q4SQTvELqYETYT6vjRCA2iGLGgc.roa
File: Q4SQTvELqYETYT6vjRCA2iGLGgc.roa (raw, json)
Hash identifier: tzC8sef+XSgDXhot9EyLUIit2vwD1a0sRJU8Ks3S1wY=
Subject key identifier: 43:84:90:4E:F1:0B:A9:81:13:61:3E:AF:8D:10:80:DA:21:8B:1A:07
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 0194258E3CAAE69ECAD034D24B5CEF967DE9
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/Q4SQTvELqYETYT6vjRCA2iGLGgc.roa
Signing time: Thu 02 Jan 2025 05:47:46 +0000
ROA not before: Thu 02 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208484
IP address blocks: 5.145.184.0/21 maxlen: 21
185.116.248.0/22 maxlen: 22
2a04:64c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:3c:aa:e6:9e:ca:d0:34:d2:4b:5c:ef:96:7d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Jan 2 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4384904ef10ba98113613eaf8d1080da218b1a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:db:0e:3e:85:63:94:29:cd:da:33:23:46:
f1:83:b2:5b:a5:9f:60:74:7b:3c:9c:1b:07:f6:f2:
0c:fd:f3:0a:7a:c0:7b:ae:75:38:4b:18:bf:9d:50:
3b:89:03:17:e2:6b:22:fd:79:aa:d8:de:69:d5:45:
60:1e:7e:5e:5f:3c:68:ba:5b:b4:d9:de:c4:fa:0a:
40:7c:86:2d:b9:de:58:a0:08:5d:68:33:66:ab:f3:
c7:1d:97:e5:f0:14:a8:f0:02:b7:73:54:28:c9:92:
2b:cd:eb:ec:3d:5d:5e:4b:94:0d:9d:a5:f1:4b:25:
f6:de:bd:3b:bd:9a:49:6b:a2:38:42:83:64:75:df:
fb:2d:3d:4a:14:9f:d9:c4:20:85:00:67:a7:f9:90:
19:06:47:85:41:d8:51:e9:e2:f9:4f:b8:1e:99:8c:
33:b9:59:de:85:4e:32:10:c3:1f:e4:41:7c:a6:1b:
0c:58:5a:31:b0:9f:43:ae:d9:e6:f0:44:92:19:02:
c7:ac:6b:c9:4d:3c:3a:a7:9f:ea:2a:71:d5:e7:fa:
5c:c9:20:7a:0d:a6:88:db:44:e8:a9:4c:f7:3c:47:
ca:f7:59:d5:d9:0e:af:8b:4f:3f:a1:68:b6:7d:54:
74:20:87:7f:29:17:ab:9d:bf:b7:c6:5d:80:3f:89:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:84:90:4E:F1:0B:A9:81:13:61:3E:AF:8D:10:80:DA:21:8B:1A:07
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/Q4SQTvELqYETYT6vjRCA2iGLGgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.184.0/21
185.116.248.0/22
IPv6:
2a04:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
22:01:4b:57:c3:56:9b:3a:85:da:29:a9:c7:b6:f4:fa:1c:f7:
41:9f:08:52:31:f2:47:6c:fd:07:34:40:d0:2f:6e:fb:1a:7e:
db:31:fd:c6:90:ec:0c:d0:0a:d0:b9:a4:5e:11:03:2b:4d:56:
7f:08:b5:72:b3:07:8b:5e:3c:df:a0:3f:65:45:67:bf:56:06:
38:7d:c7:29:7c:39:de:60:38:2a:ff:a2:b9:5f:c5:1e:30:75:
7b:94:88:26:b4:5b:12:f0:be:c2:06:af:1d:c3:3d:bf:a9:ef:
79:1a:a4:45:1f:27:64:5e:fd:9b:8f:2e:67:02:8c:07:26:7d:
af:af:a2:7b:77:04:b3:b0:e8:5a:46:65:84:eb:40:b7:db:80:
2b:11:d3:2c:18:92:5a:55:51:ba:88:74:5d:f4:23:fe:8d:db:
24:0d:b2:ba:d4:dd:a5:7e:fc:61:36:d1:10:21:37:b4:d4:38:
c3:49:28:2b:71:ca:b5:04:a0:27:5a:45:df:4e:07:6f:4e:9b:
e4:61:7e:fb:9e:73:ee:7c:22:3d:04:3d:26:88:20:41:4d:5a:
13:28:f1:2b:6c:74:12:5e:f7:79:e6:6a:7e:b1:0a:af:ec:f5:
b5:21:42:c5:15:b6:0d:9c:22:e7:0c:e5:b5:18:b0:02:b1:e6:
51:93:3d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:23 2025 by rpki-client