Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/Q_ZP2vofzPczALgXLi87Ewl-QYw.roa
File: Q_ZP2vofzPczALgXLi87Ewl-QYw.roa (raw, json)
Hash identifier: L4KrlBgHzgT5N8Y6ICGM0vsH5QclmvNH7VTwBVn5LIU=
Subject key identifier: 43:F6:4F:DA:FA:1F:CC:F7:33:00:B8:17:2E:2F:3B:13:09:7E:41:8C
Certificate issuer: /CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Certificate serial: 019427B6890E47B64EC7F68C0FDE9BBC9992
Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/Q_ZP2vofzPczALgXLi87Ewl-QYw.roa
Signing time: Thu 02 Jan 2025 15:51:01 +0000
ROA not before: Thu 02 Jan 2025 15:51:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210402
IP address blocks: 91.106.36.0/22 maxlen: 22
91.106.36.0/23 maxlen: 23
91.106.36.0/24 maxlen: 24
91.106.37.0/24 maxlen: 24
91.106.38.0/23 maxlen: 23
91.106.38.0/24 maxlen: 24
91.106.39.0/24 maxlen: 24
91.106.44.0/22 maxlen: 22
91.106.44.0/23 maxlen: 23
91.106.44.0/24 maxlen: 24
91.106.45.0/24 maxlen: 24
91.106.46.0/23 maxlen: 23
91.106.46.0/24 maxlen: 24
91.106.47.0/24 maxlen: 24
91.106.48.0/22 maxlen: 22
91.106.48.0/23 maxlen: 23
91.106.48.0/24 maxlen: 24
91.106.49.0/24 maxlen: 24
91.106.50.0/23 maxlen: 23
91.106.50.0/24 maxlen: 24
91.106.51.0/24 maxlen: 24
91.106.52.0/22 maxlen: 22
91.106.52.0/23 maxlen: 23
91.106.52.0/24 maxlen: 24
91.106.53.0/24 maxlen: 24
91.106.54.0/23 maxlen: 23
91.106.54.0/24 maxlen: 24
91.106.55.0/24 maxlen: 24
91.106.56.0/22 maxlen: 22
91.106.56.0/23 maxlen: 23
91.106.56.0/24 maxlen: 24
91.106.57.0/24 maxlen: 24
91.106.58.0/23 maxlen: 23
91.106.58.0/24 maxlen: 24
91.106.59.0/24 maxlen: 24
91.106.60.0/22 maxlen: 22
91.106.60.0/23 maxlen: 23
91.106.60.0/24 maxlen: 24
91.106.61.0/24 maxlen: 24
91.106.62.0/23 maxlen: 23
91.106.62.0/24 maxlen: 24
91.106.63.0/24 maxlen: 24
109.61.4.0/22 maxlen: 22
109.61.4.0/23 maxlen: 23
109.61.4.0/24 maxlen: 24
109.61.5.0/24 maxlen: 24
109.61.6.0/23 maxlen: 23
109.61.6.0/24 maxlen: 24
109.61.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:89:0e:47:b6:4e:c7:f6:8c:0f:de:9b:bc:99:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Validity
Not Before: Jan 2 15:51:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43f64fdafa1fccf73300b8172e2f3b13097e418c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:dd:45:5e:55:b9:97:8d:97:11:22:5e:11:
9a:46:6d:5d:ba:3d:1a:c1:bd:09:7c:e6:bd:ce:c5:
18:71:d3:90:9d:5a:df:c3:77:c7:a5:f8:2f:a3:c3:
50:0a:69:06:a3:80:9e:8b:32:21:c3:14:99:2a:a5:
a7:00:be:54:f7:96:3e:55:8b:9e:e4:e7:11:de:4b:
1b:34:9f:ba:55:4b:ea:46:50:ef:17:b7:20:f9:b1:
17:e5:9d:ca:1b:ca:11:0a:25:1e:2e:f4:bb:63:77:
b5:fe:bd:ec:a5:ea:4a:90:d0:6b:9f:6b:28:1f:df:
86:79:36:d1:00:38:97:88:de:f3:10:59:ac:0e:b1:
88:b2:be:ec:59:68:42:bc:d8:3f:a9:d1:74:a9:ac:
4b:5c:e1:84:75:4b:3b:38:41:3a:ad:8e:8f:a6:72:
49:46:10:09:0c:fd:ae:3d:fb:13:ee:5d:a1:79:89:
c6:dd:a3:5b:a8:bc:12:b9:1c:4b:0e:f8:af:52:2d:
44:27:e1:fc:54:83:62:f4:63:8b:ae:95:23:b4:85:
db:f5:87:57:b0:eb:a2:49:02:27:fb:e3:fb:3d:f7:
a8:46:51:5e:90:f4:11:09:07:38:5d:82:9d:99:e6:
e6:b6:05:06:30:ff:a5:d8:1a:8c:20:8f:04:1a:1d:
30:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F6:4F:DA:FA:1F:CC:F7:33:00:B8:17:2E:2F:3B:13:09:7E:41:8C
X509v3 Authority Key Identifier:
keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/Q_ZP2vofzPczALgXLi87Ewl-QYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.36.0/22
91.106.44.0-91.106.63.255
109.61.4.0/22
Signature Algorithm: sha256WithRSAEncryption
88:95:63:d6:87:b6:8d:27:b5:4b:7c:66:e1:e9:f3:1a:82:99:
d5:e3:ff:4d:a1:12:59:58:6e:dd:be:5f:17:75:11:2c:21:40:
59:84:37:b0:c0:a6:17:5f:8e:1a:c6:86:b2:8c:94:7c:83:d7:
fd:c9:1d:5c:bf:9e:79:3f:bd:35:de:8d:ef:5d:d1:12:42:51:
7c:e3:d1:1f:28:f1:b3:55:55:e3:27:5b:2f:55:88:1e:75:01:
56:98:de:70:c0:d3:e0:39:93:3e:6a:31:7a:ec:24:a1:bf:2e:
61:e7:81:30:a9:02:60:a5:9a:fe:24:14:ee:8e:41:66:8d:9c:
50:ab:82:aa:7d:55:85:71:e2:58:fb:01:75:dd:62:55:1e:87:
e8:c3:49:78:d9:b4:5b:a2:10:25:89:c5:68:fe:fb:bc:9e:31:
38:d1:38:2a:3d:96:24:04:5e:67:5f:5c:e2:76:3b:57:71:8a:
19:0e:54:27:72:65:53:a0:0d:60:fd:57:43:f3:90:97:3f:12:
c5:aa:6a:1e:05:d8:48:5a:d7:c1:bc:db:4a:6c:75:81:9c:10:
2d:05:f9:a2:6b:1b:45:e2:dc:b0:06:ad:97:2f:33:ca:4e:9d:
cb:8d:23:2a:11:ed:1a:9e:7f:21:5c:fa:b6:6c:dc:70:02:5d:
94:d1:85:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:30:04 2025 by rpki-client