Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qIVAA7ES2KyKes62kJ8uUCY8z-s.roa
File: qIVAA7ES2KyKes62kJ8uUCY8z-s.roa (raw, json)
Hash identifier: p2XxmMcAkZnixyabB25gwcXirSHF7igwAM+9BgMKxQU=
Subject key identifier: A8:85:40:03:B1:12:D8:AC:8A:7A:CE:B6:90:9F:2E:50:26:3C:CF:EB
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0195ECFEB43A013238CF7A44B1DC9512EAED
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qIVAA7ES2KyKes62kJ8uUCY8z-s.roa
Signing time: Mon 31 Mar 2025 16:17:50 +0000
ROA not before: Mon 31 Mar 2025 16:17:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41575
IP address blocks: 31.148.32.0/21 maxlen: 24
31.148.224.0/20 maxlen: 24
92.253.240.0/20 maxlen: 24
93.171.48.0/20 maxlen: 24
93.171.80.0/20 maxlen: 24
95.46.34.0/23 maxlen: 24
95.46.48.0/20 maxlen: 24
95.46.144.0/24 maxlen: 24
146.158.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:fe:b4:3a:01:32:38:cf:7a:44:b1:dc:95:12:ea:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 31 16:17:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8854003b112d8ac8a7aceb6909f2e50263ccfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:dc:3b:34:10:e9:2a:a6:2a:df:3a:a4:8f:
ec:ce:9a:8a:b7:0c:47:a1:21:2e:f0:c5:df:ed:76:
fc:3f:06:c3:4e:44:8a:c3:7e:9b:94:e6:10:92:ea:
51:f1:c1:42:6e:c5:f0:21:79:4f:4e:b3:cb:0f:c1:
e8:00:99:ac:ce:10:33:06:5f:7e:d5:87:4c:7a:6d:
18:e1:90:92:f3:99:85:10:88:2a:6f:cd:a8:1e:25:
4b:b4:46:84:78:8d:2a:64:a5:22:0e:bc:17:40:30:
89:27:80:19:9f:20:b5:15:be:2d:96:ea:09:9d:ba:
96:58:9d:41:40:20:0e:02:34:67:90:36:a6:bc:b7:
e0:94:e2:0b:94:80:b0:2a:b9:df:8d:b5:e9:d2:ea:
56:f8:86:f7:cf:3e:de:1a:c3:c5:1d:f4:a6:e4:98:
38:ef:ac:0c:db:be:e9:2c:cb:59:69:14:1e:3f:cb:
0e:1b:94:e7:f9:a1:6a:c6:ce:fd:9f:fa:5e:47:a7:
f0:1f:2e:b2:f3:6c:c3:22:c9:51:a2:25:a8:bb:51:
9e:eb:9d:cc:81:7d:e3:c7:db:03:4f:0e:6c:82:3c:
c0:15:4a:98:aa:21:a8:1d:77:29:f1:45:a1:b4:d3:
36:1d:86:4b:12:02:7d:ce:a5:c6:dc:0f:55:cd:b7:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:85:40:03:B1:12:D8:AC:8A:7A:CE:B6:90:9F:2E:50:26:3C:CF:EB
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qIVAA7ES2KyKes62kJ8uUCY8z-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.32.0/21
31.148.224.0/20
92.253.240.0/20
93.171.48.0/20
93.171.80.0/20
95.46.34.0/23
95.46.48.0/20
95.46.144.0/24
146.158.32.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:51:6c:98:21:33:a5:80:a3:64:6e:b9:c6:04:2f:36:32:c3:
96:1a:b1:39:be:47:4c:7b:b4:5c:3c:cd:93:01:fc:ed:d6:50:
b5:11:78:00:0b:ce:d1:c6:73:cf:d7:9d:ce:0b:dc:85:2c:46:
2c:45:d9:ee:dc:1d:10:d2:6e:7a:56:3f:de:02:3f:e2:ea:6c:
03:12:1e:bd:5f:dc:ef:18:54:53:a8:55:3e:d2:ad:9a:d7:b7:
bd:72:82:28:3c:c8:3b:85:f5:49:96:8b:b9:ec:b9:26:06:79:
04:31:9e:09:51:87:8e:0c:f7:22:b6:cd:7e:f7:36:3c:8d:d3:
81:77:47:23:71:87:e5:46:99:31:25:69:8f:fe:a2:dd:6c:20:
ee:bd:e6:ef:43:12:6f:51:d8:74:20:85:8d:72:3c:5c:49:bd:
0e:1a:9c:07:6e:41:ce:4f:61:76:10:ef:51:2a:a8:31:8f:04:
f0:10:9f:d2:01:4e:0f:25:f1:09:6c:dd:70:3b:f8:3d:f3:c6:
1f:8b:67:65:7b:64:ab:ed:42:fa:d5:59:1e:39:7b:25:ad:1e:
cf:87:d2:df:ab:09:80:23:00:03:c5:59:2c:3a:d7:87:22:d6:
56:b1:47:f0:6c:c9:b3:59:f6:94:6e:75:82:e6:90:7d:1a:1e:
44:a2:a5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:39 2025 by rpki-client