Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/qKnzlWlOQZnzGIJDUIeCK_h8Aoc.roa
File: qKnzlWlOQZnzGIJDUIeCK_h8Aoc.roa (raw, json)
Hash identifier: 4PZR40U7MftnvDD1nJb+B1tTG4bqmFehEOX2TNF1dKo=
Subject key identifier: A8:A9:F3:95:69:4E:41:99:F3:18:82:43:50:87:82:2B:F8:7C:02:87
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 01941F8C379E79378A1F4003D6C6C8268ED0
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/qKnzlWlOQZnzGIJDUIeCK_h8Aoc.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 109.205.152.0/22 maxlen: 22
109.205.156.0/24 maxlen: 24
185.6.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 14:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:37:9e:79:37:8a:1f:40:03:d6:c6:c8:26:8e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8a9f395694e4199f31882435087822bf87c0287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:e8:d7:23:fc:19:c2:af:07:1f:8f:99:9b:
bb:52:69:f7:11:c4:64:3e:03:90:17:5d:91:f7:c9:
ef:b7:bd:38:e9:17:e3:2a:77:54:61:1a:66:a9:26:
f7:bc:9e:25:6a:36:b5:6e:48:4e:10:60:23:45:f4:
18:87:a7:2e:88:4b:f9:3e:dd:5a:0f:a3:fa:61:f9:
52:41:0a:a1:41:da:f0:6a:7c:68:d3:9a:a2:35:b5:
ae:c6:4e:39:81:e4:22:a9:25:02:27:e1:4e:fa:7a:
ac:d8:9e:22:ff:76:ee:c9:4a:22:53:c2:08:2f:20:
49:ab:a0:0f:0d:c1:75:a1:16:45:2e:70:89:ed:3c:
29:a8:ef:c5:59:8e:97:a2:68:c9:87:31:64:27:99:
84:a3:65:1c:36:ee:73:9b:2f:f8:ad:b9:56:7b:7d:
d2:74:f6:cd:53:cc:6d:a4:fa:54:46:9e:6d:92:e1:
26:f3:2b:56:c3:20:cb:1e:b5:5b:c0:e7:b5:d9:3c:
c6:b0:95:8c:b4:5d:6a:69:a0:b8:03:52:38:61:b5:
fb:c5:a4:c3:e0:e2:57:3d:c6:4e:43:f1:cb:f3:58:
d4:c7:68:de:9f:b3:99:f1:f3:c3:c8:bd:63:25:46:
f5:00:e7:27:13:74:9d:24:2c:8d:48:5f:a1:0a:0c:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A9:F3:95:69:4E:41:99:F3:18:82:43:50:87:82:2B:F8:7C:02:87
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/qKnzlWlOQZnzGIJDUIeCK_h8Aoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.152.0-109.205.156.255
185.6.132.0/23
Signature Algorithm: sha256WithRSAEncryption
07:e6:07:dd:a0:b7:99:d4:91:a1:6a:46:59:dd:15:d3:10:b4:
e5:63:96:58:c1:4a:b8:a8:4f:4b:2b:4f:90:af:d3:2f:56:2f:
b9:74:45:17:89:cb:ce:85:c0:b9:8f:cb:0f:83:50:00:e1:d3:
3b:ca:fd:4b:03:c2:69:07:b4:6b:42:8b:47:82:4a:09:d1:fb:
b3:5f:03:44:28:11:e5:e3:e4:02:3f:df:58:58:6f:63:13:a8:
99:51:e0:40:22:a4:a1:67:dd:13:e8:76:56:7a:7a:d4:b9:5a:
b5:01:1a:30:ed:15:01:cf:67:b3:98:dd:80:24:3a:39:b0:5d:
19:0a:ba:27:19:91:cc:a0:8b:63:87:8e:2a:51:30:5a:be:f1:
ad:1b:d0:f7:50:89:64:60:b4:27:cd:96:dc:6b:45:cf:21:5b:
7d:69:cd:13:f1:d0:95:53:1f:57:fa:8a:f7:83:14:cd:b1:8e:
43:ce:cd:3a:3a:98:f8:d7:0d:e8:ce:20:34:c9:1d:3a:6d:f7:
a1:ce:87:f5:98:54:0d:c8:55:73:fa:06:68:72:9e:1d:47:c9:
a0:47:32:ba:1a:40:89:9c:29:f5:4a:81:c0:43:ca:08:01:46:
49:e3:95:55:18:02:06:3d:16:b4:ad:71:8d:65:f5:2e:c5:3b:
bb:9a:ea:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 5 19:07:44 2025 by rpki-client