Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/QW_u_BPcMPsF84l9cOWIg2BTeQw.roa
File: QW_u_BPcMPsF84l9cOWIg2BTeQw.roa (raw, json)
Hash identifier: KPJQ5aR80UVpiuaQZx0f7/aPYO2DxWpPPoUdDzKm3j4=
Subject key identifier: 41:6F:EE:FC:13:DC:30:FB:05:F3:89:7D:70:E5:88:83:60:53:79:0C
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 019421B1DA0409F3C9153056F0DBE2C5D947
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/QW_u_BPcMPsF84l9cOWIg2BTeQw.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213133
IP address blocks: 93.179.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:da:04:09:f3:c9:15:30:56:f0:db:e2:c5:d9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=416feefc13dc30fb05f3897d70e588836053790c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:2f:46:03:64:cf:07:24:ba:35:e4:b4:29:
be:6e:df:9b:d2:b2:46:61:f6:d0:e8:5a:27:89:58:
19:ff:3c:35:40:e2:47:ff:ae:91:63:bb:a4:f2:e2:
95:ec:d2:cf:33:13:a7:0b:d8:f6:ac:15:4b:49:f0:
55:b8:f2:67:c7:1b:5e:f4:db:26:fd:b3:eb:c1:9e:
1a:a7:57:90:e4:e8:f1:a5:a4:ce:0e:f9:be:0c:19:
6d:59:32:fe:80:63:e8:1f:7e:bd:f5:87:28:70:6f:
82:36:ba:c7:ab:c5:90:f9:82:e8:60:58:24:6a:35:
3c:41:8f:c4:7d:bd:9a:a4:72:d2:e8:be:fd:3f:59:
a2:65:2f:d2:0c:f7:0a:8b:79:35:04:b3:da:49:59:
c7:88:4e:83:be:10:d3:87:ab:6c:39:ac:e8:90:26:
90:f6:2b:f9:78:57:3d:9d:89:c1:27:fd:b9:d9:c4:
b5:ba:0f:b7:03:97:4e:6f:90:db:b7:be:0b:1c:35:
a6:47:e8:39:ff:81:08:5a:f1:3b:a8:74:ee:5c:bc:
a4:fe:75:a1:05:6d:86:9d:b9:27:eb:46:59:e6:af:
d4:ef:a1:70:a5:b7:a3:1e:43:f8:95:8b:f9:1d:26:
ec:fd:1f:16:73:70:48:eb:a4:95:28:b9:d0:c7:a2:
a1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6F:EE:FC:13:DC:30:FB:05:F3:89:7D:70:E5:88:83:60:53:79:0C
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/QW_u_BPcMPsF84l9cOWIg2BTeQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.95.0/24
Signature Algorithm: sha256WithRSAEncryption
96:73:40:ac:d9:c7:fb:40:73:4a:dc:2b:da:4a:e9:a4:14:ac:
64:4c:d6:9e:3d:45:fc:8b:5a:82:55:ae:d3:f1:2f:18:79:7a:
42:a6:e7:b0:bc:89:e1:16:5a:84:05:e9:9a:b1:3f:26:f8:98:
f2:31:8e:10:44:5b:26:ce:d4:f1:05:6a:c6:16:b5:23:f6:c0:
0a:b4:ef:18:84:a4:c6:4e:27:34:58:05:fe:5f:58:57:c2:01:
32:9b:d3:ad:21:a7:fe:69:74:2f:ba:f3:0f:8a:4f:b6:f0:3f:
c9:f3:ec:a9:62:fb:04:0c:1d:27:6d:ed:ec:a0:a5:af:0a:f3:
2a:b9:ab:81:71:f0:34:fb:70:e0:f4:9e:d1:89:93:87:ed:37:
4f:2c:08:d0:91:c5:24:6c:cc:d3:21:5b:66:00:b3:6b:9b:6c:
63:44:53:a6:a5:15:52:af:97:ca:00:69:d1:34:20:fa:50:2f:
78:92:d6:bc:1a:13:8f:23:37:d6:af:f5:58:96:63:a7:c5:14:
70:86:5b:bb:f6:29:4c:f0:07:01:77:df:fd:c5:e5:10:ff:82:
76:8d:17:d8:c1:4d:86:fa:4d:c4:0e:9e:52:03:fb:a2:9e:a9:
17:0b:8f:d9:6f:22:50:61:52:d4:cc:5a:84:13:29:b3:29:f6:
6d:ae:a0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:30:21 2025 by rpki-client