Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/qPThmJkS6FxAgaSTFhSE99KManI.roa
File: qPThmJkS6FxAgaSTFhSE99KManI.roa (raw, json)
Hash identifier: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=
Subject key identifier: A8:F4:E1:98:99:12:E8:5C:40:81:A4:93:16:14:84:F7:D2:8C:6A:72
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 01947E1004F9B39BD3F0BCE961CF0AAE370C
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/qPThmJkS6FxAgaSTFhSE99KManI.roa
Signing time: Sun 19 Jan 2025 10:16:06 +0000
ROA not before: Sun 19 Jan 2025 10:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 45.88.108.0/22 maxlen: 22
45.88.108.0/24 maxlen: 24
45.88.109.0/24 maxlen: 24
45.88.110.0/24 maxlen: 24
45.88.111.0/24 maxlen: 24
45.135.200.0/22 maxlen: 22
91.218.64.0/22 maxlen: 24
2a04:e8c0::/29 maxlen: 29
2a04:e8c0:19::/48 maxlen: 48
2a0c:75c0::/29 maxlen: 48
2a0c:75c0::/48 maxlen: 48
2a0c:75c0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7e:10:04:f9:b3:9b:d3:f0:bc:e9:61:cf:0a:ae:37:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Jan 19 10:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8f4e1989912e85c4081a493161484f7d28c6a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:cc:f5:c6:5a:05:91:3a:e2:d5:24:a2:2c:
f4:a1:dd:c9:ba:ba:96:5d:ed:da:fc:d5:0d:67:2a:
f7:0f:d8:a0:12:e0:1c:04:ba:3b:88:54:cd:8a:ee:
cb:da:ba:96:97:98:2b:e6:a9:ff:f9:c1:8b:e0:2b:
c6:f5:af:93:a9:b7:d3:b0:49:4d:0d:e4:49:61:1f:
ee:5c:e5:d0:69:17:d6:fd:fb:e1:a3:35:70:d7:94:
42:29:40:bd:49:08:18:a3:a5:ed:4d:86:ad:80:68:
85:d5:af:a1:17:e9:d6:77:ff:ee:e2:73:f4:0d:4a:
c6:dd:8a:de:9e:0f:d0:68:0e:26:1f:e4:01:ac:68:
69:9d:1c:36:18:42:0c:d2:d9:6d:85:cf:23:d7:59:
15:95:98:a2:e4:9e:61:f2:ea:3b:95:e9:1a:a8:75:
d6:ec:ce:fd:42:8a:f3:fb:a6:b3:38:e6:08:c5:f8:
97:94:70:a0:d4:b6:05:00:7e:c1:e8:d6:38:d5:a9:
f6:1d:68:b7:2d:b0:28:72:3c:eb:eb:db:a9:72:2a:
e1:90:eb:cd:e8:74:75:5b:92:69:d9:2b:2a:16:38:
90:54:7d:c5:4c:dc:6b:62:1e:19:f5:bc:6c:09:d2:
ea:f7:ec:57:af:63:01:c1:f8:57:50:7f:14:5c:06:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:E1:98:99:12:E8:5C:40:81:A4:93:16:14:84:F7:D2:8C:6A:72
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/qPThmJkS6FxAgaSTFhSE99KManI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.108.0/22
45.135.200.0/22
91.218.64.0/22
IPv6:
2a04:e8c0::/29
2a0c:75c0::/29
Signature Algorithm: sha256WithRSAEncryption
37:d9:67:88:ab:c7:98:35:a6:e9:ee:0e:96:52:84:70:1a:c7:
7e:c3:ab:af:68:fc:16:8c:05:db:72:3b:e6:1c:35:28:28:03:
83:68:7a:29:c8:8c:ff:b1:75:a8:a0:6d:f1:be:79:7d:e5:a3:
27:dc:85:74:64:63:30:f0:ed:88:26:27:63:ac:dc:f1:65:8a:
7f:98:8e:3b:45:95:31:f8:04:a7:0c:4f:d7:6e:0e:38:4d:1b:
cc:19:50:84:c8:8f:86:9b:c4:4d:b3:58:11:76:29:56:f8:c6:
80:67:84:e4:82:c9:45:8c:e4:77:a9:eb:2a:4e:4e:53:ef:ee:
6c:b4:4d:30:d9:37:6c:cb:a8:9b:c8:fb:92:7d:39:d6:99:b2:
59:c9:03:44:47:26:7d:85:2f:cf:d8:15:65:d3:24:94:ff:9a:
ff:9d:74:d3:d6:64:cf:1f:5a:05:49:04:f6:c6:61:9e:0f:8d:
cd:05:69:2c:b5:a9:53:be:3d:60:f7:51:60:68:de:be:1f:df:
cb:fd:a1:5e:53:b8:2b:c8:20:4d:df:1b:eb:08:60:82:e1:e0:
74:15:03:00:c2:5d:5e:2d:ff:d8:c0:41:b4:7d:67:37:b4:5c:
97:04:0e:25:a1:6b:2d:0f:ad:de:1f:82:9e:8d:bd:30:71:e0:
12:c1:72:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:13:10 2025 by rpki-client