Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/QrLxpXcKKlTKVqNWJjfnZ5zQego.roa
File: QrLxpXcKKlTKVqNWJjfnZ5zQego.roa (raw, json)
Hash identifier: JlU34SAKSUABE+VJCPnsQJhW9HL/rg4ccciJ5TxRUSY=
Subject key identifier: 42:B2:F1:A5:77:0A:2A:54:CA:56:A3:56:26:37:E7:67:9C:D0:7A:0A
Certificate issuer: /CN=523881993cf0db674e89db5815e6f189a6c60d1f
Certificate serial: 019423D6A6A21BCE2E1A82F5A359EBFF438A
Authority key identifier: 52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/QrLxpXcKKlTKVqNWJjfnZ5zQego.roa
Signing time: Wed 01 Jan 2025 21:47:37 +0000
ROA not before: Wed 01 Jan 2025 21:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206234
IP address blocks: 185.192.120.0/24 maxlen: 24
185.192.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a6:a2:1b:ce:2e:1a:82:f5:a3:59:eb:ff:43:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=523881993cf0db674e89db5815e6f189a6c60d1f
Validity
Not Before: Jan 1 21:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42b2f1a5770a2a54ca56a3562637e7679cd07a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7a:20:bc:5e:fd:b7:96:7d:44:2b:2e:78:22:
fa:78:02:87:a7:7d:28:e2:38:6b:4a:e3:53:d2:0f:
aa:e7:da:51:68:70:b2:b0:ec:1b:62:44:5f:1a:0f:
94:d7:52:d1:a8:e1:f9:00:05:f7:24:36:3b:df:75:
65:87:21:f1:61:3d:d2:75:bf:7d:f6:5c:91:31:95:
17:2e:89:0b:ab:f3:c6:44:22:73:2d:79:ab:cb:4b:
e3:30:8f:83:a5:29:8d:c6:71:47:50:bb:f3:3b:cc:
b0:e8:18:59:96:67:fc:b0:28:f9:98:10:97:20:4d:
01:77:f8:fa:a5:3a:ce:4d:f6:ef:68:0c:7b:45:6f:
19:8e:0f:59:c3:2b:a0:b7:1b:1a:58:23:e5:c5:2c:
69:a8:6c:92:13:a5:4f:9a:14:a0:70:ce:8b:ca:d9:
6e:6a:64:2c:66:06:39:87:64:f2:d8:4c:b8:92:a6:
aa:9c:dc:30:2e:8c:46:7e:87:4d:ab:f8:8f:6a:61:
b2:b4:e4:3b:d2:97:e1:af:30:41:0d:dd:c2:1e:57:
a9:ef:82:9c:5c:58:3f:67:53:47:f3:9d:88:42:6c:
aa:5a:56:5d:20:dc:67:3f:d4:72:3d:8c:9c:7f:48:
6d:31:1c:b0:5d:f1:7d:4c:f2:d5:e7:ac:1b:9b:7a:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B2:F1:A5:77:0A:2A:54:CA:56:A3:56:26:37:E7:67:9C:D0:7A:0A
X509v3 Authority Key Identifier:
keyid:52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/QrLxpXcKKlTKVqNWJjfnZ5zQego.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.120.0/23
Signature Algorithm: sha256WithRSAEncryption
88:cd:9c:24:ba:fd:4b:eb:66:69:ba:bb:65:b1:27:44:77:70:
e5:16:41:7a:98:dd:d8:2c:d2:57:f5:ae:12:03:13:1e:2e:b0:
fa:cb:50:8c:f4:a0:89:76:0a:55:c3:d1:73:d9:17:ad:80:86:
4b:7c:cf:a8:5e:05:6c:13:b0:d9:09:74:a9:1c:cf:4f:53:78:
58:4a:43:7a:e4:15:c5:5b:04:11:4c:21:c0:cb:06:79:fd:64:
88:63:01:ba:7b:d3:2d:e4:65:89:3e:fd:08:01:d0:99:4e:82:
d6:97:e0:6a:a7:cf:31:be:ec:f1:2b:0d:c8:a9:72:24:30:20:
d7:57:31:1b:33:11:20:46:4a:aa:58:cc:9c:d0:7d:de:7f:1d:
ec:2b:be:20:f9:3a:7c:da:46:45:20:0d:33:81:9d:52:bd:10:
0b:07:f3:01:02:f2:c6:af:43:36:14:c2:97:48:c1:bb:d8:0e:
e0:51:5b:8a:75:6d:2f:08:42:dd:7a:6a:91:ce:6c:82:de:7f:
00:dd:19:6e:5a:56:24:65:16:26:22:09:ad:99:4f:31:33:ae:
e4:91:08:fa:c0:85:b9:4d:6a:de:e3:f9:b8:17:63:62:82:eb:
50:af:ba:9c:66:ad:5f:8f:fa:f5:7a:93:b0:02:35:a5:6c:4c:
dd:a1:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:38:01 2025 by rpki-client