Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/1QZVcXytUuxqM1PLlTk73xY8pDU.roa
File: 1QZVcXytUuxqM1PLlTk73xY8pDU.roa (raw, json)
Hash identifier: oWmFEOAWi7NkKA3U3ke7LKelHFeRhHAmJaVgP86H32g=
Subject key identifier: D5:06:55:71:7C:AD:52:EC:6A:33:53:CB:95:39:3B:DF:16:3C:A4:35
Certificate issuer: /CN=c82c8001a17642b69562c63ac58920da360f154f
Certificate serial: 019424B3AE49D5401271F2CF83C62A1079D0
Authority key identifier: C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/1QZVcXytUuxqM1PLlTk73xY8pDU.roa
Signing time: Thu 02 Jan 2025 01:49:02 +0000
ROA not before: Thu 02 Jan 2025 01:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49941
IP address blocks: 185.98.248.0/24 maxlen: 24
185.98.249.0/24 maxlen: 24
185.98.250.0/24 maxlen: 24
185.98.251.0/24 maxlen: 24
193.104.52.0/24 maxlen: 24
194.107.127.0/24 maxlen: 24
2a06:cdc0:2006::/48 maxlen: 48
2a06:cdc0:2007::/48 maxlen: 48
2a06:cdc0:2008::/48 maxlen: 48
2a06:cdc0:2009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ae:49:d5:40:12:71:f2:cf:83:c6:2a:10:79:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82c8001a17642b69562c63ac58920da360f154f
Validity
Not Before: Jan 2 01:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d50655717cad52ec6a3353cb95393bdf163ca435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:37:73:58:1a:b1:e7:60:34:7c:9a:fc:93:
3f:01:3e:96:f1:b3:ee:bd:45:ef:db:2e:8e:eb:14:
6d:42:7c:7c:58:35:3f:fd:61:0c:cc:74:c3:54:43:
1c:4f:9f:ac:56:fc:1e:7b:e1:b8:2a:23:82:9a:80:
cc:7e:80:e5:83:e5:38:be:be:5c:37:28:54:52:5e:
bd:a1:64:57:5b:07:61:d5:bd:7e:7f:7c:db:19:a5:
c5:da:ef:7a:d9:67:9d:fa:0d:40:1c:c7:f0:97:df:
b5:f5:b3:15:78:bc:75:c1:7c:00:82:98:37:3d:16:
53:b9:35:c6:c3:25:53:a1:3f:68:6b:01:7b:35:08:
ee:d0:86:0e:15:ed:27:3d:90:96:b8:b3:9d:00:84:
3c:01:3b:d5:c2:52:8b:94:bc:3a:e1:7a:3f:25:cc:
39:27:3e:05:14:d7:43:08:7e:59:bb:78:ab:a5:1e:
00:d4:9b:cb:02:2d:3c:99:51:0c:2d:05:12:cc:ad:
ff:e7:c1:c1:c0:9c:c6:c9:ad:7f:8d:f0:7b:42:31:
2d:1b:8a:13:ac:2e:51:fa:fd:ae:cb:1a:ca:87:fe:
2d:db:ee:13:21:71:a3:97:93:b1:8a:bc:89:b7:8f:
56:24:66:1e:90:65:52:56:9f:fe:3b:a1:4c:52:43:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:06:55:71:7C:AD:52:EC:6A:33:53:CB:95:39:3B:DF:16:3C:A4:35
X509v3 Authority Key Identifier:
keyid:C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/1QZVcXytUuxqM1PLlTk73xY8pDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.248.0/22
193.104.52.0/24
194.107.127.0/24
IPv6:
2a06:cdc0:2006::-2a06:cdc0:2009:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4f:1a:24:b6:4d:c1:16:6c:f3:92:f9:88:de:b5:88:10:ba:c7:
29:d6:7e:8f:30:69:4b:86:89:c6:eb:57:df:0b:05:ec:8d:7b:
7e:aa:96:02:fe:7b:23:33:b0:6f:ba:ab:cc:cf:50:99:76:19:
da:8f:23:40:d5:2c:d9:e6:df:e1:18:c7:c5:6e:fb:8e:d4:d8:
f8:c9:3c:c9:32:75:ba:2e:07:fb:d7:18:65:c4:b3:db:d5:72:
23:cc:26:ef:0a:60:77:f7:ba:7a:4c:dd:f8:34:d7:81:b2:3c:
d3:35:c4:29:d4:91:de:58:ac:0d:ea:98:78:0b:56:d8:79:4c:
b6:aa:61:59:ca:bb:00:96:d5:aa:09:9f:a7:b2:4c:5d:97:ca:
2f:23:aa:b7:9c:e4:46:c6:b3:6c:c8:68:6a:c9:ba:f0:69:95:
da:e7:3b:df:cf:96:3e:89:a3:14:5b:6a:e5:f5:cc:21:75:35:
15:08:90:d3:90:8a:de:d0:b2:d5:d5:dd:e8:89:ba:02:cb:87:
7c:6c:fc:ea:e0:7f:fe:07:22:83:6d:43:c8:6d:41:0e:2b:29:
cc:f3:5c:2c:e6:78:6d:2b:89:73:4c:90:a5:6b:53:bf:3a:b9:
c6:4a:45:a7:b9:8b:7a:22:b4:59:48:ab:34:1c:f8:45:0d:74:
66:8d:6a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:08:30 2025 by rpki-client