Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/Q8etSu2zHMkh6fhsXllq0m85sqg.roa
File: Q8etSu2zHMkh6fhsXllq0m85sqg.roa (raw, json)
Hash identifier: Aasfzwuv8iCEYaBcficgkTOl5p9Jnx6y2dL1fKqUxfY=
Subject key identifier: 43:C7:AD:4A:ED:B3:1C:C9:21:E9:F8:6C:5E:59:6A:D2:6F:39:B2:A8
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 01960A846167B525832785A8D2364DB1F90F
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/Q8etSu2zHMkh6fhsXllq0m85sqg.roa
Signing time: Sun 06 Apr 2025 09:52:49 +0000
ROA not before: Sun 06 Apr 2025 09:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214526
IP address blocks: 217.114.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:84:61:67:b5:25:83:27:85:a8:d2:36:4d:b1:f9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Apr 6 09:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43c7ad4aedb31cc921e9f86c5e596ad26f39b2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:37:2b:5f:3f:e7:81:bc:a7:f8:3b:1c:2a:
2b:fb:2d:f2:18:1e:31:b9:08:be:17:43:61:d1:17:
4b:e1:53:bc:81:63:54:c2:f3:42:90:c6:47:50:e3:
48:39:f1:2e:02:44:45:f6:1c:7b:e9:83:d3:1b:dc:
d0:e0:54:99:2d:3f:cd:ad:c2:45:78:c8:9f:db:55:
b9:73:ca:a8:3f:8b:8d:97:91:20:df:77:5c:e3:c5:
48:9f:33:68:01:36:30:03:ca:60:79:c9:9f:09:76:
c9:c5:91:52:d8:79:25:a3:a4:18:9c:41:cf:7d:f0:
2b:94:45:3d:be:a6:03:e2:2f:73:d3:2a:0d:f6:c6:
aa:45:15:ea:46:1a:e3:ee:04:e2:9c:ab:e9:16:2d:
8d:9d:66:98:62:1c:e1:84:6e:31:d8:66:75:b0:43:
ef:59:06:78:59:c0:b6:65:d8:b4:89:db:d7:09:78:
fc:c3:ae:c1:1f:09:75:a3:17:0a:85:98:fd:b8:9d:
ce:4f:06:78:a1:d4:ec:fd:d2:55:fc:3b:45:79:ae:
b9:6d:df:f4:53:8f:a3:44:33:4f:21:2e:b2:22:58:
f2:60:94:20:99:45:1b:ad:46:7b:70:db:2c:4a:0b:
ce:7f:16:6a:7c:a9:a3:7e:c9:64:a1:bb:7d:9d:88:
f3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C7:AD:4A:ED:B3:1C:C9:21:E9:F8:6C:5E:59:6A:D2:6F:39:B2:A8
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/Q8etSu2zHMkh6fhsXllq0m85sqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e7:90:de:ff:fc:78:15:1c:d1:55:f9:8b:98:db:8d:e6:e7:
c8:c4:c6:12:1c:e3:ee:2d:be:e2:83:ac:cc:b6:af:52:e1:ac:
b8:69:fc:4c:f1:50:6b:47:73:ed:f7:d3:91:35:7b:17:63:75:
a7:fb:a6:55:88:5d:31:db:45:04:ed:4c:cb:bd:03:36:3b:67:
c9:13:b5:8a:3b:8b:67:4d:f1:7c:8c:e8:8d:db:24:2f:d1:17:
79:f8:52:60:ab:04:34:be:63:cc:03:eb:c9:cd:c0:4d:11:f2:
03:27:2b:79:6c:5b:4c:89:db:cc:33:1e:5c:53:db:55:f3:ab:
a9:5f:78:e2:31:6c:a1:98:51:34:ff:c8:a0:8b:5c:e2:c9:3b:
c0:56:d0:92:16:7e:cb:75:6e:e5:20:fd:fd:ec:b1:47:e9:7c:
71:40:31:bf:e3:e6:0a:6c:11:6c:cc:ff:b2:54:e9:5b:21:66:
81:0d:2c:b9:67:cf:60:e4:05:bc:05:82:a4:22:89:18:43:04:
5d:f0:4d:6a:d9:4b:ee:ae:5b:77:4b:3c:b0:90:9a:6f:59:02:
54:97:03:22:bf:d6:f9:7a:08:7d:e6:99:4a:cc:07:8a:df:e9:
88:fc:6c:48:fa:c0:38:b4:7c:7e:a4:74:29:d2:51:a2:41:cc:
0d:f5:ce:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:05:43 2025 by rpki-client