Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/jQ4CExkfR5inS0zDHfJTtnlJ6V8.roa
File: jQ4CExkfR5inS0zDHfJTtnlJ6V8.roa (raw, json)
Hash identifier: GXyBOWfkGPF9vLeodoo4anr9TA244Yte3dkyFGm9PtM=
Subject key identifier: 8D:0E:02:13:19:1F:47:98:A7:4B:4C:C3:1D:F2:53:B6:79:49:E9:5F
Certificate issuer: /CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Certificate serial: 0194266B5778BDFAF80345D44796C64F06C1
Authority key identifier: D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/jQ4CExkfR5inS0zDHfJTtnlJ6V8.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29492
IP address blocks: 37.148.144.0/21 maxlen: 21
77.106.128.0/18 maxlen: 18
82.147.32.0/19 maxlen: 19
87.248.0.0/19 maxlen: 19
94.102.32.0/20 maxlen: 20
95.169.32.0/19 maxlen: 19
109.203.0.0/19 maxlen: 19
185.20.244.0/22 maxlen: 22
2a02:a18::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:57:78:bd:fa:f8:03:45:d4:47:96:c6:4f:06:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d0e0213191f4798a74b4cc31df253b67949e95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:3d:f3:3d:bb:23:89:1c:22:9d:08:c6:9c:
c9:70:a7:3c:39:4d:a9:93:be:1c:9d:3d:e2:8a:56:
bb:57:0d:64:85:5f:32:f1:2a:b2:62:a3:f4:5a:eb:
8e:22:34:97:46:25:f0:b5:03:a8:54:66:93:5d:fa:
12:5f:07:7d:de:5b:78:05:f2:67:09:2c:1a:83:de:
f7:9a:d2:77:c8:85:7e:f1:5a:7a:02:a3:0f:92:32:
4c:1c:02:69:be:ae:6a:64:41:c5:0f:91:d6:0f:dc:
5f:45:f3:1b:fa:1b:32:48:7f:31:c8:d8:d9:de:59:
ac:c1:ba:2b:83:14:ac:69:93:9e:1b:6f:da:05:97:
3e:b7:9a:ac:e4:27:63:ab:3e:4b:68:fb:f3:7f:43:
6e:07:19:c8:22:e8:2e:8a:a7:0a:b8:0d:b0:18:22:
ba:4f:ab:a3:62:7c:19:a5:fe:22:18:74:e1:64:b0:
d8:b2:6f:0b:ed:fe:77:d1:2f:0d:b2:6d:c7:e2:c1:
5d:6a:b9:07:6e:02:83:f9:fb:c6:db:e5:61:1e:ad:
7d:8b:f7:b6:24:ad:ab:f9:62:a9:8f:18:c0:d2:a9:
54:e8:72:b3:da:c1:13:e4:06:93:0d:8b:ca:8d:d5:
9f:99:ad:13:6a:87:88:9a:ec:8a:96:ba:30:73:34:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0E:02:13:19:1F:47:98:A7:4B:4C:C3:1D:F2:53:B6:79:49:E9:5F
X509v3 Authority Key Identifier:
keyid:D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/jQ4CExkfR5inS0zDHfJTtnlJ6V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.144.0/21
77.106.128.0/18
82.147.32.0/19
87.248.0.0/19
94.102.32.0/20
95.169.32.0/19
109.203.0.0/19
185.20.244.0/22
IPv6:
2a02:a18::/32
Signature Algorithm: sha256WithRSAEncryption
43:67:5c:2d:95:74:08:ba:d1:97:e8:90:c4:b9:e8:17:bd:51:
16:83:d5:a9:be:d1:c4:93:3f:30:ba:9b:3c:63:29:70:91:02:
d6:d3:09:f7:78:5d:84:3b:7d:2a:1c:b6:80:02:d0:79:5e:ca:
f6:7a:78:49:5d:f7:40:b7:5a:9f:5e:39:82:79:19:a7:4e:76:
43:0c:c7:4c:16:ce:de:9b:d1:42:69:b8:af:6e:f5:4e:f1:08:
d3:5a:5f:b7:48:af:82:e4:5b:1c:15:36:ea:e4:e5:d5:05:69:
a7:35:a4:a4:d2:28:72:39:5b:d7:63:71:94:38:f7:43:3c:67:
a7:49:ef:0c:37:d8:ab:a5:d9:86:7a:68:ad:2c:25:1a:90:e9:
33:6f:35:f2:46:32:f4:63:de:87:7a:ea:53:92:d5:c8:d9:89:
28:c9:c0:f7:ad:4d:c6:12:ad:ec:0d:ec:f7:82:26:c8:45:17:
df:72:00:dc:cb:b3:e2:f9:b6:f9:d1:cd:a3:55:d0:70:d3:bf:
e6:8a:06:b0:0b:16:e5:76:3a:cf:8b:ee:61:22:11:85:11:0e:
a1:fc:9a:58:bd:e8:2d:ad:79:19:22:7c:15:e3:69:15:69:f2:
93:af:5f:47:65:e7:77:e3:bf:d2:4c:d5:ae:07:37:7f:95:a9:
b1:aa:21:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:36:13 2025 by rpki-client