Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/qQBsyu_cVKZnC2YtWnBhQBpOfUQ.roa
File: qQBsyu_cVKZnC2YtWnBhQBpOfUQ.roa (raw, json)
Hash identifier: TjgATufRss8r1iBf8Y/PyScO/pIDEQWkrsAtyOXWrVM=
Subject key identifier: A9:00:6C:CA:EF:DC:54:A6:67:0B:66:2D:5A:70:61:40:1A:4E:7D:44
Certificate issuer: /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial: 019421B1D005111D665989999289BE6F4CA9
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/qQBsyu_cVKZnC2YtWnBhQBpOfUQ.roa
Signing time: Wed 01 Jan 2025 11:48:08 +0000
ROA not before: Wed 01 Jan 2025 11:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197058
IP address blocks: 194.28.144.0/22 maxlen: 22
194.28.144.0/24 maxlen: 24
194.28.145.0/24 maxlen: 24
194.28.146.0/24 maxlen: 24
194.28.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d0:05:11:1d:66:59:89:99:92:89:be:6f:4c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
Validity
Not Before: Jan 1 11:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9006ccaefdc54a6670b662d5a7061401a4e7d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:15:7c:f9:6f:6d:f8:ef:02:5d:2c:d1:3c:
aa:7b:6e:08:89:dc:a9:c2:96:d8:6e:bd:d5:f4:9b:
8c:47:06:47:d6:36:25:7e:39:1b:2b:27:24:49:a3:
f9:47:e9:ef:2e:55:53:76:d2:95:57:13:bf:8b:3d:
60:5d:8d:99:df:65:8c:4e:0a:5a:85:49:2f:13:41:
dd:a0:7d:42:e4:e8:55:0d:0e:b3:be:c9:fc:30:d9:
b5:03:e6:63:dd:d5:0c:e1:7a:11:1f:6a:f2:0e:17:
66:27:43:91:b2:5f:54:62:40:71:66:8c:d5:64:17:
56:4d:ef:94:35:26:f6:fb:86:5f:30:b2:43:1c:4c:
cc:83:3c:0f:c9:c8:d2:ca:ba:6b:f0:20:01:7a:08:
36:b7:eb:77:89:09:5c:b6:48:8a:45:4d:02:8b:72:
b6:87:bf:77:34:e3:1b:9d:ab:a6:e2:ef:a0:68:d8:
a6:f6:8b:35:44:f4:91:2c:7d:47:ff:b8:f6:27:7b:
60:19:46:2d:ff:be:6e:39:57:11:32:40:05:5c:ee:
5f:c1:87:0a:3e:a6:ae:ca:d3:7b:be:f1:ca:19:c2:
ad:26:78:aa:79:af:79:ff:18:55:10:da:60:07:32:
6d:cd:cb:58:75:08:48:83:b2:cc:32:e3:c7:d2:36:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:00:6C:CA:EF:DC:54:A6:67:0B:66:2D:5A:70:61:40:1A:4E:7D:44
X509v3 Authority Key Identifier:
keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/qQBsyu_cVKZnC2YtWnBhQBpOfUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.144.0/22
Signature Algorithm: sha256WithRSAEncryption
63:be:cf:04:c5:88:9f:bd:d3:27:88:72:01:68:bf:f0:c2:ee:
23:64:13:fd:c4:77:24:2d:a7:f8:5a:e2:95:73:7c:3e:d3:3d:
37:5b:3b:db:a5:a7:0f:52:5a:d9:57:9f:21:36:1f:0f:db:fc:
b1:e3:a8:8c:e8:22:fb:bb:b5:80:26:58:b3:43:6b:88:bb:03:
5a:20:e6:03:b4:53:e2:7f:7e:87:96:b0:c7:f9:d5:cf:2c:ca:
85:a6:41:79:51:43:d1:37:f5:a4:30:27:39:f4:49:1b:35:35:
a5:70:ef:0b:44:43:69:5b:7b:65:4e:6d:a2:eb:0c:f5:c8:3c:
08:1b:1e:a8:32:5a:0a:5f:da:52:af:78:12:d8:1d:75:0d:9b:
97:05:a8:be:57:66:3f:5c:7d:c8:a8:d4:33:d4:01:b0:b4:e3:
d2:17:fd:4c:8a:37:a3:09:9d:b2:a9:24:26:63:cf:b4:ad:f2:
b4:c0:47:a8:ca:18:2e:b4:31:66:f3:4b:b8:48:0e:20:3b:4e:
a8:64:19:54:4e:8c:0d:65:1a:5e:b0:4c:46:b3:0e:31:55:8a:
f3:7d:f2:3b:d2:3a:e3:5f:76:7d:c0:dd:19:3b:64:47:a4:82:
e7:87:64:dc:d6:26:9b:be:e2:40:bc:b4:32:aa:f0:ab:cf:9a:
de:e2:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:14 2025 by rpki-client