Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/qGuTXxX3KPPGE7gornZUmtCgXus.roa
File: qGuTXxX3KPPGE7gornZUmtCgXus.roa (raw, json)
Hash identifier: hoxbUVU+eahUxnAmZd8qLyauIUnjncf8aJqcwbWkeXs=
Subject key identifier: A8:6B:93:5F:15:F7:28:F3:C6:13:B8:28:AE:76:54:9A:D0:A0:5E:EB
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 01942669EB4122675889823AB77CBBB58534
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/qGuTXxX3KPPGE7gornZUmtCgXus.roa
Signing time: Thu 02 Jan 2025 09:47:43 +0000
ROA not before: Thu 02 Jan 2025 09:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48135
IP address blocks: 94.127.80.0/22 maxlen: 22
94.127.81.0/24 maxlen: 24
94.127.83.0/24 maxlen: 24
94.127.84.0/22 maxlen: 22
94.127.85.0/24 maxlen: 24
94.127.86.0/23 maxlen: 23
94.127.86.0/24 maxlen: 24
94.127.87.0/24 maxlen: 24
151.89.0.0/16 maxlen: 16
151.89.0.0/17 maxlen: 17
151.89.54.0/24 maxlen: 24
151.89.55.0/24 maxlen: 24
151.89.56.0/24 maxlen: 24
151.89.128.0/17 maxlen: 17
151.89.232.0/22 maxlen: 22
185.51.12.0/24 maxlen: 24
185.51.13.0/24 maxlen: 24
185.51.14.0/24 maxlen: 24
185.51.15.0/24 maxlen: 24
193.111.46.0/24 maxlen: 24
193.169.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:eb:41:22:67:58:89:82:3a:b7:7c:bb:b5:85:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Jan 2 09:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a86b935f15f728f3c613b828ae76549ad0a05eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:2e:a1:ca:0e:c4:f0:4d:d8:39:39:3f:f8:
74:ff:34:e7:82:23:3f:45:e0:17:38:84:0e:e3:66:
99:08:ae:eb:b8:1f:7b:26:61:78:ce:15:75:c4:b8:
25:4f:1d:86:37:4d:5f:ec:5a:f0:7e:db:80:ca:95:
2c:c0:69:ec:fb:09:b0:f4:99:e6:2e:d4:14:36:2e:
e9:af:4f:69:41:79:15:95:3f:5e:47:48:f6:42:42:
ea:71:b6:f4:89:0c:94:cd:c3:a8:6c:56:08:49:89:
cd:0a:d6:8b:3c:97:e4:dc:7b:2b:a5:e1:c9:fb:4b:
90:21:94:ca:d3:f8:b1:cc:68:be:dd:79:79:c9:a6:
12:90:72:56:0a:59:8f:f0:fd:91:a5:be:e7:62:83:
71:16:5d:e3:42:31:9d:48:13:90:16:fa:90:88:29:
81:a9:7c:32:e3:82:ce:84:84:2a:12:b7:a4:12:75:
6f:81:06:1d:f7:92:d6:87:dd:af:fb:75:91:94:55:
6d:65:67:11:91:42:14:65:6c:5b:e9:bd:a8:46:f1:
c0:25:58:bd:1a:fb:5b:2d:fa:c8:d4:7d:de:bd:f7:
18:af:8b:34:06:44:fa:da:ee:6f:30:11:32:cf:d7:
1b:c2:8d:31:5c:25:86:f1:53:8d:83:52:17:b5:dc:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6B:93:5F:15:F7:28:F3:C6:13:B8:28:AE:76:54:9A:D0:A0:5E:EB
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/qGuTXxX3KPPGE7gornZUmtCgXus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.80.0/21
151.89.0.0/16
185.51.12.0/22
193.111.46.0/24
193.169.150.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:58:5e:a5:d7:5f:59:0b:55:96:55:a8:d6:98:ae:74:13:e2:
bd:76:2e:2d:95:2c:19:b3:ef:6c:47:59:8a:d1:62:8e:10:47:
0c:a5:59:e7:18:e9:91:67:8f:60:6b:d0:f2:e2:6a:a9:d1:14:
69:ba:fa:d6:07:56:db:9b:a3:94:2c:06:86:df:a1:65:96:1d:
f6:64:88:57:2e:7e:34:21:3b:46:a2:58:ee:2e:70:ec:0f:96:
67:2c:c2:0d:1e:86:2b:af:64:cc:7b:e7:62:c3:d3:06:4d:35:
b6:0a:8d:e8:fa:4f:ec:49:ac:62:5e:45:69:4b:ac:1d:2a:4d:
04:6d:e0:f0:05:db:48:a4:2d:35:d9:f9:e5:49:e5:41:d7:2a:
66:b2:3a:70:a9:50:c1:60:77:64:e9:af:2b:6c:f2:da:a5:31:
83:23:2e:b5:5d:a7:8a:98:7e:19:aa:87:5d:2e:3d:54:e8:49:
a1:c4:f0:1e:f8:c7:8b:56:77:5e:4a:62:e4:b1:77:76:a0:17:
c0:09:36:c1:99:6a:6c:5b:32:02:79:d8:85:0c:9c:29:ac:81:
03:ad:30:b4:71:c9:4a:ba:eb:5e:9b:e1:62:69:f9:50:6b:4d:
94:e0:ec:14:84:ea:9b:c3:be:81:18:73:77:f4:b1:c3:2e:9f:
5e:63:f2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:37:29 2025 by rpki-client