Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/jqtV_uax1l_jcMRVSpaIyiZ162M.roa
File: jqtV_uax1l_jcMRVSpaIyiZ162M.roa (raw, json)
Hash identifier: Y4HN1NVU+4Ighjr+8NWHfgFsJcgMLxBPTCdLXtE0n+Q=
Subject key identifier: 8E:AB:55:FE:E6:B1:D6:5F:E3:70:C4:55:4A:96:88:CA:26:75:EB:63
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01942824183B8E5011975615A1AFE9E74A81
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/jqtV_uax1l_jcMRVSpaIyiZ162M.roa
Signing time: Thu 02 Jan 2025 17:50:41 +0000
ROA not before: Thu 02 Jan 2025 17:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 185.106.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:18:3b:8e:50:11:97:56:15:a1:af:e9:e7:4a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eab55fee6b1d65fe370c4554a9688ca2675eb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:eb:b4:a2:57:4a:fc:62:f1:bb:d3:65:40:8d:
c6:58:6c:b3:9d:11:02:31:b7:a5:3b:65:6a:28:eb:
14:14:d2:8f:28:87:31:e3:39:05:8e:d6:28:a2:59:
56:29:19:13:38:42:68:52:aa:84:93:5e:2f:89:b9:
a6:a8:d2:21:23:37:e0:56:b8:df:b1:50:a6:77:92:
5f:38:18:a3:f2:3d:39:40:34:29:6e:24:45:53:3a:
c8:c7:0c:7c:03:cd:54:14:02:61:b3:c7:a7:df:ae:
38:eb:10:73:2a:19:6b:47:0a:63:ff:26:63:79:42:
ac:dc:36:3c:62:97:b8:b0:a7:6b:8d:9e:e4:b6:aa:
14:1c:73:08:17:ab:0a:a7:86:15:a8:76:4c:48:07:
1e:98:64:24:8a:ec:70:05:bd:a1:22:a7:13:f1:70:
4c:9e:21:e0:11:78:13:a8:6a:9f:dd:50:47:d5:03:
70:fd:76:ec:c8:1e:d6:79:38:8b:5c:2a:94:c7:63:
f8:ef:b3:ca:4f:ea:c6:97:e7:dc:69:f1:cd:9e:a0:
8d:f3:8e:cc:63:98:d3:5d:7c:31:d4:17:af:6e:2c:
f4:e5:ba:27:2c:4e:99:07:b2:8e:58:f0:07:73:ca:
82:94:9e:c9:17:2f:b3:a8:06:d1:47:7e:fd:a6:5b:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AB:55:FE:E6:B1:D6:5F:E3:70:C4:55:4A:96:88:CA:26:75:EB:63
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/jqtV_uax1l_jcMRVSpaIyiZ162M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.194.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:31:01:10:78:dc:89:9d:88:ce:f1:79:e3:cd:65:e7:c6:72:
b4:d4:16:b4:7d:ba:65:b1:1b:7b:8a:9d:93:2a:83:f4:9a:1f:
49:5a:f3:9d:65:c8:4a:f8:a4:af:84:e3:03:d9:aa:1c:28:ac:
ba:12:53:f2:6d:9b:81:77:f1:79:95:0f:9b:48:cf:d1:8e:91:
4d:5a:aa:a9:a6:b4:3f:66:59:b6:2f:c7:9c:64:09:ee:88:3d:
58:98:6a:42:35:f7:71:ff:bb:d2:0d:a4:ab:08:d5:c6:df:a4:
85:ac:50:c8:2a:f7:c5:c6:2f:75:9b:21:e5:ab:70:5a:a5:b1:
59:9b:95:c1:cf:5f:cf:be:80:83:df:83:d7:dc:40:f1:e2:93:
c7:10:11:6c:60:46:dc:c6:9b:95:1a:cc:9e:db:d6:3b:4d:43:
a5:a3:36:8e:df:3e:25:64:bf:5c:88:5c:87:9b:85:66:bc:cd:
ab:eb:e2:24:35:76:ff:7b:f9:f7:46:9d:25:cf:63:6c:b4:44:
e3:42:7b:ad:e6:fe:0a:f1:ad:33:a7:0b:65:f4:06:86:23:22:
e0:17:1e:77:c1:11:af:40:ee:57:32:db:8d:fd:74:ce:cd:dc:
91:03:21:b6:04:8f:bb:7a:6e:87:3a:ec:fa:52:84:60:c9:c9:
ae:d2:2c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:33 2025 by rpki-client