Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/qTElxIuYhBq2Kr2moM3xQmQlUEA.roa
File: qTElxIuYhBq2Kr2moM3xQmQlUEA.roa (raw, json)
Hash identifier: 6HA56HJcMMODNW40FbLFvKXa1rIMDv54m0DX5YcNqN0=
Subject key identifier: A9:31:25:C4:8B:98:84:1A:B6:2A:BD:A6:A0:CD:F1:42:64:25:50:40
Certificate issuer: /CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d
Certificate serial: 0194222040A86B682841B11A6010FF9DBD80
Authority key identifier: 96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/qTElxIuYhBq2Kr2moM3xQmQlUEA.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34895
IP address blocks: 83.138.64.0/18 maxlen: 18
185.171.136.0/22 maxlen: 22
2a01:4da0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:40:a8:6b:68:28:41:b1:1a:60:10:ff:9d:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a93125c48b98841ab62abda6a0cdf14264255040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:07:0f:46:db:93:4e:aa:c0:62:2a:7d:db:
24:79:5c:b9:d5:03:f7:5f:2f:0d:77:0b:d9:66:a4:
94:65:de:43:1a:b0:aa:db:94:cf:38:56:d0:3f:1d:
2e:6c:f0:d2:52:22:cd:28:2e:f0:4e:05:7d:b6:c1:
49:f7:93:11:43:ca:89:35:f3:b6:d0:f4:c1:17:13:
f6:b9:a0:0f:96:4b:99:e3:86:0c:4b:92:74:c5:47:
8d:a4:90:00:32:ea:d3:29:a2:a0:58:5d:fc:82:df:
8d:48:1c:25:fe:37:b0:cd:81:5a:d5:7a:35:9f:5e:
ac:42:db:ac:7a:fa:03:00:b7:0e:04:32:7e:c3:7d:
31:e4:5c:ee:0c:35:05:56:15:f9:ae:49:04:8b:a9:
29:08:9e:a6:17:56:56:eb:93:fb:c2:42:2f:34:c5:
97:15:be:89:cf:ca:3e:1d:95:de:bd:16:37:d3:03:
8c:81:ac:db:41:0a:30:ce:20:6f:53:eb:b2:c3:28:
cb:50:46:f4:9a:cc:94:8d:7c:37:2c:d5:40:3f:29:
a0:fb:7b:7f:73:85:4d:58:bb:15:35:5e:64:f6:ea:
d1:7e:7f:85:b0:0e:b8:3a:b6:36:64:63:f7:c6:a0:
17:e5:4e:97:f3:a2:f2:dc:87:2f:f5:a4:df:dd:9b:
c0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:31:25:C4:8B:98:84:1A:B6:2A:BD:A6:A0:CD:F1:42:64:25:50:40
X509v3 Authority Key Identifier:
keyid:96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/qTElxIuYhBq2Kr2moM3xQmQlUEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.64.0/18
185.171.136.0/22
IPv6:
2a01:4da0::/48
Signature Algorithm: sha256WithRSAEncryption
9c:6a:9e:75:45:8b:c7:52:a1:c3:86:33:b8:cb:67:22:a0:c6:
73:ae:5b:ae:4a:5e:b9:a8:2d:6f:de:5e:7e:64:04:ae:c5:5a:
40:19:00:1b:84:f0:41:3c:3f:9a:b1:56:46:ac:e2:04:be:9e:
c9:59:8d:62:5a:62:dc:be:ad:e9:b2:6c:6a:e7:db:91:0a:3a:
29:0b:02:83:d1:b9:80:18:ac:61:0f:4e:c7:7b:ca:4b:cf:d2:
60:95:69:d7:31:f6:88:09:cc:1e:79:d7:2e:ed:44:0b:b0:dd:
93:66:b8:6a:e5:82:bc:97:41:a1:14:a0:8e:66:6d:19:5b:a3:
ee:f7:6d:62:f1:be:e5:25:cc:82:d3:02:59:52:bc:c4:e1:08:
b2:44:f3:a6:02:5f:f0:94:ed:2f:05:5a:5c:1b:f2:be:e5:b5:
c5:96:cf:1b:31:8c:0a:f5:36:2f:42:1e:f6:eb:b6:c9:0a:ea:
38:47:19:4e:a7:a8:83:00:37:29:e5:ac:fd:94:3e:6e:61:7d:
b5:49:db:82:a0:5f:c1:f0:14:b4:e8:f7:6a:c6:df:6f:76:10:
aa:ae:98:8d:81:09:e7:f8:a1:63:85:1f:ba:c7:66:19:dc:d6:
4b:96:6c:90:6c:31:28:44:da:45:0f:5c:e6:78:67:12:40:24:
53:df:d6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:08:31 2025 by rpki-client