Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/qnW51eXl6iLH1UGdnNVD2RBavLQ.roa
File: qnW51eXl6iLH1UGdnNVD2RBavLQ.roa (raw, json)
Hash identifier: ZOPFQSAJtSvVDnecEeTUqA5xZ9agsklGMdIDxOY18U4=
Subject key identifier: AA:75:B9:D5:E5:E5:EA:22:C7:D5:41:9D:9C:D5:43:D9:10:5A:BC:B4
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 019426D9A41D66AFB54B1FB02C60FA1448AD
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/qnW51eXl6iLH1UGdnNVD2RBavLQ.roa
Signing time: Thu 02 Jan 2025 11:49:45 +0000
ROA not before: Thu 02 Jan 2025 11:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202766
IP address blocks: 185.214.136.0/24 maxlen: 24
185.214.137.0/24 maxlen: 24
185.214.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a4:1d:66:af:b5:4b:1f:b0:2c:60:fa:14:48:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Jan 2 11:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa75b9d5e5e5ea22c7d5419d9cd543d9105abcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:66:2e:ab:45:b7:72:f9:34:58:a7:20:cc:
68:87:c6:7e:24:5b:5c:c4:48:5f:13:cb:74:07:7f:
4d:fe:4e:be:41:62:53:30:c8:eb:49:d7:2d:11:7e:
b7:4c:21:18:9f:2b:5f:d2:f0:bd:69:1c:64:54:6b:
69:91:a4:41:6a:2a:eb:af:72:42:07:ac:95:f7:ef:
89:9b:c3:db:3e:ab:4f:6b:c2:30:62:70:da:5b:2c:
49:51:ac:23:c5:5e:bd:d9:6c:63:c5:7b:f9:2d:5b:
2c:6b:d9:51:53:11:c5:8c:9e:e2:0a:6e:ed:b6:b3:
f9:cf:f8:3e:00:7c:56:3d:a7:c6:ed:dc:a3:e3:e6:
75:b2:86:0d:49:3a:0b:9e:29:01:ac:fb:4b:52:d0:
98:c6:75:75:e1:29:28:1e:c1:3c:67:46:f6:83:5e:
ac:42:45:51:37:de:0d:88:af:98:2a:a6:0e:58:38:
1c:76:14:f4:45:cf:9e:02:43:4e:8a:b2:f5:ba:24:
4e:63:12:c9:77:55:38:75:35:c4:f9:ea:05:31:ec:
c8:ea:65:a2:29:0b:98:1b:14:c9:e5:24:8b:00:1e:
ac:37:22:43:0c:6a:47:54:1a:02:a4:7b:c4:31:42:
43:52:2b:45:9e:ff:2d:69:b5:ac:37:47:94:e0:87:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:75:B9:D5:E5:E5:EA:22:C7:D5:41:9D:9C:D5:43:D9:10:5A:BC:B4
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/qnW51eXl6iLH1UGdnNVD2RBavLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.136.0/23
185.214.139.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f9:64:6e:ba:74:ac:38:6e:74:9c:73:2c:21:67:65:e9:7c:
b1:5e:1e:5f:15:88:91:c6:6d:53:ca:37:98:81:b9:c7:ca:47:
2d:20:5b:9a:2b:0f:7e:f6:03:eb:32:fe:9e:19:d2:00:de:fc:
68:7c:27:da:19:80:a7:7a:82:4d:77:a9:e0:c1:56:9a:19:40:
9b:96:49:1e:8d:6d:fd:d9:94:d9:bc:0c:53:3e:8d:88:f1:19:
9b:af:01:44:aa:41:be:b4:31:07:e9:d7:8f:12:92:71:02:34:
a5:15:2a:7f:a9:02:b7:89:78:ec:51:0a:1e:6e:21:42:c3:b2:
b7:ab:77:bc:d4:fa:a5:e0:d9:8f:80:ac:aa:e1:b3:55:ee:5a:
8e:73:08:f1:78:cd:40:3e:64:91:d5:66:c3:e9:44:a6:77:64:
f1:73:c4:a6:4b:7c:9e:3e:ba:55:4e:7a:76:28:cd:48:54:f2:
4a:23:50:79:04:da:fa:f3:d0:76:bf:73:88:77:8a:c5:2a:5e:
a7:e2:0e:c1:03:01:3c:a6:9b:7c:89:66:6f:8c:8d:b4:a8:45:
c6:1f:30:28:64:c9:27:59:30:d0:56:60:f2:2f:ba:fb:01:1e:
8c:2f:52:60:8c:ef:14:c8:b6:9f:83:3f:a2:42:55:68:fa:c4:
e8:fe:30:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:55 2025 by rpki-client