Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/q75v5EqZWH70d3-zw1Mz9lAhrNA.roa
File: q75v5EqZWH70d3-zw1Mz9lAhrNA.roa (raw, json)
Hash identifier: 42QWIn0E5NYeaE/XqOKgGlGrf3JcLpIWupxVplExU4g=
Subject key identifier: AB:BE:6F:E4:4A:99:58:7E:F4:77:7F:B3:C3:53:33:F6:50:21:AC:D0
Certificate issuer: /CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Certificate serial: 01942826223A92FD09C11960C41351C2438F
Authority key identifier: C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/q75v5EqZWH70d3-zw1Mz9lAhrNA.roa
Signing time: Thu 02 Jan 2025 17:52:55 +0000
ROA not before: Thu 02 Jan 2025 17:52:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197999
IP address blocks: 185.202.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:22:3a:92:fd:09:c1:19:60:c4:13:51:c2:43:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Validity
Not Before: Jan 2 17:52:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abbe6fe44a99587ef4777fb3c35333f65021acd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:cd:1a:95:31:d6:56:a5:d5:2e:d7:34:e3:
e2:12:3e:27:5c:5a:56:2c:bd:ff:af:8d:c4:42:cb:
8b:c8:b6:76:bc:fb:16:3e:94:af:2a:25:29:4d:83:
fd:e9:9f:65:bf:87:f3:d0:5b:c4:8b:44:eb:7f:82:
58:94:7c:72:fc:2e:20:80:8c:ed:84:ab:ba:15:74:
e0:13:27:9c:91:c1:a1:2d:5f:e6:26:7b:e3:74:5e:
2a:1f:23:04:48:98:0f:87:1b:a7:57:10:44:cb:ff:
78:a1:14:28:aa:ee:a8:01:e0:9e:09:40:3f:eb:7a:
1d:53:5b:6c:3a:d5:87:90:24:eb:1e:da:6b:af:0a:
95:f3:8d:69:7e:c8:4a:07:2b:f2:0e:0d:20:d4:dc:
84:ed:e7:1c:48:65:75:71:a4:46:af:0d:44:72:69:
cd:5d:38:44:b0:36:af:a9:81:11:fe:e1:53:9c:d9:
85:e4:a3:68:97:58:39:2a:c3:e7:30:a2:90:2d:ed:
2a:50:a1:f9:a9:95:11:cd:9a:b7:98:27:fb:cb:7f:
c7:fe:82:2a:ec:89:4e:b2:b6:62:ac:64:59:31:64:
df:f9:db:05:0b:0a:67:2d:3e:7d:a3:a6:cd:83:d9:
65:f6:ff:c7:8f:6b:ad:75:94:f9:3f:92:2c:b6:50:
10:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BE:6F:E4:4A:99:58:7E:F4:77:7F:B3:C3:53:33:F6:50:21:AC:D0
X509v3 Authority Key Identifier:
keyid:C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/q75v5EqZWH70d3-zw1Mz9lAhrNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.7.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b0:a0:5a:c9:62:e0:ad:ea:63:a6:11:4d:28:29:c0:04:40:
11:3e:da:e6:f9:23:a5:3f:8a:93:92:9a:93:78:7a:9f:9c:72:
e9:9e:66:fc:58:91:86:86:60:fc:14:31:0b:f8:a7:cc:49:52:
cd:d5:75:e9:36:2a:92:a7:22:2e:4e:ec:f1:97:a7:4a:1f:e6:
e3:c7:f6:97:91:34:c6:e9:91:6e:1a:bf:ef:aa:85:9f:44:77:
41:0c:3f:aa:7e:c4:68:f8:42:47:75:94:42:e4:6d:b7:d7:8f:
b2:3f:b7:39:f4:8d:ca:44:ba:f4:a2:73:fd:f7:37:4d:67:47:
58:23:75:c2:04:7f:47:ea:93:a8:57:46:3c:1e:53:64:a5:fc:
15:fe:72:ee:3e:51:43:b1:50:02:2d:9e:a4:09:42:59:01:d2:
4f:89:15:72:0e:3b:0b:71:bc:94:5b:98:3d:2b:e7:fb:db:d9:
91:00:e5:1d:b4:be:6c:ed:9e:52:da:e2:66:74:60:e2:3a:fc:
e3:d5:3d:32:a0:98:2a:43:a1:ba:b3:9f:e4:23:bb:fe:ff:fc:
06:e2:96:bf:d7:8b:3d:f6:1a:10:da:d5:a4:07:89:39:f7:35:
e1:85:87:a9:90:d9:4f:0e:c0:6c:57:56:c8:ac:97:b7:eb:82:
a0:77:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:50:18 2025 by rpki-client