Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/Qd9wy5ftMyh8sTeaWrLO_wpaFTE.roa
File: Qd9wy5ftMyh8sTeaWrLO_wpaFTE.roa (raw, json)
Hash identifier: oY8TR8QpN82rkBsByfJvFbSYDVr2vD7taUzMtyjJcBc=
Subject key identifier: 41:DF:70:CB:97:ED:33:28:7C:B1:37:9A:5A:B2:CE:FF:0A:5A:15:31
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019426D94E8D2D8BA6A1876BED1AFDCBDA00
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/Qd9wy5ftMyh8sTeaWrLO_wpaFTE.roa
Signing time: Thu 02 Jan 2025 11:49:23 +0000
ROA not before: Thu 02 Jan 2025 11:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49720
IP address blocks: 94.131.240.0/24 maxlen: 24
94.131.241.0/24 maxlen: 24
94.131.242.0/24 maxlen: 24
94.131.243.0/24 maxlen: 24
94.131.246.0/24 maxlen: 24
94.131.247.0/24 maxlen: 24
185.241.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4e:8d:2d:8b:a6:a1:87:6b:ed:1a:fd:cb:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Jan 2 11:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41df70cb97ed33287cb1379a5ab2ceff0a5a1531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:d1:d9:01:8e:aa:fe:29:d2:1b:25:02:b8:
26:a6:e6:2d:3b:62:77:98:fe:b7:e9:df:60:bc:0a:
73:a6:eb:70:8c:4b:b8:5c:9f:3c:a6:da:f5:44:f9:
9f:78:f9:70:07:0e:14:2b:90:fa:4b:3f:e5:73:c4:
28:63:1c:12:b5:c7:98:1a:8c:23:08:72:16:58:50:
8d:d6:fc:cf:90:b3:87:5d:e9:a9:48:01:b8:7f:07:
be:d6:a9:89:d6:ae:a1:1a:13:60:1a:fc:fd:dc:c4:
df:34:d4:db:f7:86:ae:9a:45:58:69:66:38:42:18:
7e:a1:3b:b8:38:1a:5a:ab:a8:96:87:49:d0:7b:0b:
dc:f4:4c:ba:03:13:66:68:c7:84:43:36:f2:13:6d:
da:5b:b0:00:7c:03:b1:4b:4e:3e:25:7e:f7:21:9b:
c9:92:1c:72:6e:a9:b6:39:04:6f:06:c1:db:0c:ca:
6f:15:9e:5c:b4:bd:32:80:0b:39:24:e1:f9:ec:84:
28:fa:5f:29:d5:33:e4:49:da:89:fc:c1:c0:27:e7:
00:28:fc:28:49:2a:20:45:7f:09:70:fb:9c:86:2e:
49:3c:09:be:ef:ea:7c:50:07:c6:e4:e4:5d:51:88:
99:9d:94:66:e0:69:68:6e:f7:eb:de:34:55:8d:b2:
9d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DF:70:CB:97:ED:33:28:7C:B1:37:9A:5A:B2:CE:FF:0A:5A:15:31
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/Qd9wy5ftMyh8sTeaWrLO_wpaFTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.240.0/22
94.131.246.0/23
185.241.109.0/24
Signature Algorithm: sha256WithRSAEncryption
37:71:b6:66:f4:a9:02:2d:90:00:e5:43:67:ec:74:4f:27:53:
97:4e:d2:81:f8:ed:35:20:48:07:bd:4d:f8:ce:c0:b2:43:05:
c0:64:32:2b:fe:d4:2b:68:08:35:f3:00:cc:1f:3e:c7:96:ed:
bd:31:a8:d2:c9:b5:1f:c4:35:69:af:15:84:40:0f:a8:18:9a:
b4:35:36:f9:1b:7e:fb:2d:85:4c:89:7c:21:35:5b:f8:e9:7b:
2a:a1:44:c8:64:cf:a5:84:2e:be:9c:84:a3:9f:9f:bc:34:06:
e3:59:f3:63:43:e9:02:e6:ee:8d:ec:dd:8e:2f:bb:6b:3e:9b:
9e:0e:87:1c:8a:56:80:39:65:16:27:16:fa:c6:a1:07:ff:63:
de:72:38:50:c9:f5:c5:03:53:85:58:0b:b7:e6:b1:36:77:41:
74:93:03:a7:8d:32:42:ca:84:07:f9:83:0e:4d:93:90:ce:bd:
10:16:39:87:68:1f:c3:13:d1:06:c9:aa:41:16:c1:ec:2b:54:
3d:c8:0e:b6:64:3b:a3:29:6c:f6:b7:e2:ef:71:9a:94:d7:43:
3e:ef:51:42:cc:ae:8d:fd:f3:c8:65:63:0e:23:df:85:ec:05:
ee:2c:6f:08:9b:91:78:2c:50:d9:71:b5:0c:c3:27:f3:a5:8c:
5c:01:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:58:46 2025 by rpki-client