Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/kQQa0mamuh90FEUAVAxhJYFOHI0.roa
File: kQQa0mamuh90FEUAVAxhJYFOHI0.roa (raw, json)
Hash identifier: Z511KPbIb0VhOnQEOV24rEWe55WTQHx2vcM/1suAk/w=
Subject key identifier: 91:04:1A:D2:66:A6:BA:1F:74:14:45:00:54:0C:61:25:81:4E:1C:8D
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369900E383FAFB8B998B562921F949B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/kQQa0mamuh90FEUAVAxhJYFOHI0.roa
Signing time: Wed 01 Jan 2025 19:48:28 +0000
ROA not before: Wed 01 Jan 2025 19:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39105
IP address blocks: 31.14.161.0/24 maxlen: 24
86.107.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:90:0e:38:3f:af:b8:b9:98:b5:62:92:1f:94:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91041ad266a6ba1f74144500540c6125814e1c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:31:d0:3e:96:0a:6e:8c:5b:14:6a:4f:28:
d6:0a:e5:ff:c4:7c:15:dc:28:85:2f:6e:3d:56:11:
1c:3e:d0:55:29:b7:a1:09:d1:d5:dc:6d:0e:df:f7:
a1:84:40:0c:ad:bb:5e:bb:76:9a:37:c8:1e:78:cd:
65:24:51:18:92:77:1b:fb:10:15:f8:e4:60:9a:bd:
72:9f:18:c0:4f:63:16:20:f8:da:1d:6d:fd:bb:fb:
30:4e:38:b5:a5:fa:e0:8f:46:d3:87:a8:b7:e3:85:
df:03:da:cf:5e:c0:be:64:f3:ac:8c:2c:3c:17:66:
a7:31:88:30:7f:94:92:49:48:dc:04:3f:ad:12:70:
40:af:e2:de:1a:a8:b8:f1:dc:70:b5:98:4f:a3:b9:
07:82:48:c5:6b:9f:c5:61:fc:62:58:f7:ae:bf:03:
c2:82:60:7b:ef:98:47:e1:b2:10:17:03:db:76:79:
8c:83:24:89:ee:98:31:d1:29:25:8f:ff:54:5c:ee:
63:ec:73:b1:05:28:8b:05:f9:ac:60:50:5e:9e:fc:
a2:b4:f6:81:60:45:bf:9d:f8:6a:8c:61:93:08:1c:
a6:80:b8:be:cb:91:5c:82:43:72:1f:97:94:76:ee:
ea:9d:98:4e:54:af:f8:20:92:4f:75:39:f9:53:5a:
25:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:04:1A:D2:66:A6:BA:1F:74:14:45:00:54:0C:61:25:81:4E:1C:8D
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/kQQa0mamuh90FEUAVAxhJYFOHI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.161.0/24
86.107.176.0/24
Signature Algorithm: sha256WithRSAEncryption
12:93:6e:45:30:a2:12:f3:6f:40:60:d6:ef:1f:40:27:27:bf:
a4:44:c6:22:66:dc:c3:b5:45:8e:70:87:6c:7e:29:36:51:10:
7f:0a:c9:6f:ca:65:d2:b6:1f:dd:bb:82:02:cb:e3:34:ce:1b:
19:3c:82:de:57:dd:14:05:64:da:72:4d:e4:0e:22:af:64:a1:
57:63:ec:75:43:56:36:d1:87:53:66:fe:0a:0d:9f:a0:32:7b:
db:ad:10:4c:1f:1f:25:d1:54:ec:a8:50:ab:de:07:cb:8d:52:
16:4f:c5:8a:4e:10:05:82:0d:a1:12:2e:50:bb:64:7d:4b:05:
6f:1c:c3:13:74:a6:ac:10:77:c7:07:e9:a1:70:78:1f:8f:67:
66:15:20:d3:07:c5:c5:e1:61:50:a8:37:90:1a:fa:19:2b:df:
ea:b9:e2:22:c5:1e:a0:44:ac:42:37:f5:b7:0d:f4:2c:7d:e5:
61:ac:e1:b4:0e:81:0c:07:f0:f1:90:39:8a:3c:1e:be:ac:84:
61:55:08:98:f6:b1:97:e2:29:89:5c:cb:d2:82:01:27:2b:2b:
b3:ef:ce:ea:28:8e:d6:8f:df:f9:dc:5c:a6:86:7c:e5:17:29:
ce:dc:bc:88:98:1e:bb:27:5e:28:0d:c0:76:07:73:81:a2:c4:
9a:ce:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:25 2025 by rpki-client