Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa
File: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (raw, json)
Hash identifier: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=
Subject key identifier: AA:03:E3:9D:BC:4D:A5:B0:EA:BF:07:FF:77:85:52:12:1C:23:A5:55
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0194221F69DD8D83695DCB461A1C3A492CFC
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa
Signing time: Wed 01 Jan 2025 13:47:51 +0000
ROA not before: Wed 01 Jan 2025 13:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 148.222.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:69:dd:8d:83:69:5d:cb:46:1a:1c:3a:49:2c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 13:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa03e39dbc4da5b0eabf07ff778552121c23a555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:98:b1:5d:0b:a5:b8:f7:a6:34:a9:dc:c1:
97:37:bf:90:66:ee:83:fc:9e:3d:93:31:a9:53:1e:
0c:c1:38:7b:e8:76:33:d0:2f:d9:f8:bd:56:08:e1:
c8:53:b1:82:4d:27:c0:6f:13:e4:30:f1:bd:42:30:
08:a9:cd:fd:f8:9f:be:ce:b4:3a:2b:8d:ca:d9:7f:
36:c2:05:19:0a:7d:58:bf:d2:19:3c:37:ef:16:79:
70:a9:10:ba:7b:b2:a0:0f:17:e0:d8:84:55:98:33:
bd:18:61:7e:da:ef:f9:f5:cc:ae:ff:d8:15:67:cf:
9b:8f:dd:11:d3:9c:54:49:8e:ec:07:fc:bd:94:5a:
6d:ee:5e:e9:26:19:ca:68:56:51:78:15:97:c2:57:
44:43:d0:b2:cf:99:ca:73:12:d0:f2:3f:5b:fb:77:
b1:56:af:c7:8b:86:64:75:63:e7:aa:36:f7:cb:40:
3f:e6:f6:5a:2e:ee:d5:a9:d8:59:26:f8:12:8e:3f:
ab:06:a1:c4:f8:07:aa:90:3c:38:46:7e:14:4c:7c:
da:96:90:6e:83:da:57:67:35:0f:1d:5c:70:33:dd:
2a:cb:df:84:ad:af:67:6d:4f:b7:bf:68:08:b9:d5:
6a:80:5b:58:e8:b7:c3:26:c6:44:16:b4:57:f7:0f:
05:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:03:E3:9D:BC:4D:A5:B0:EA:BF:07:FF:77:85:52:12:1C:23:A5:55
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.244.0/22
Signature Algorithm: sha256WithRSAEncryption
07:f6:ef:b8:b3:bd:e3:c1:fe:d5:4b:23:38:3d:62:4d:a5:9d:
08:73:0b:3d:2c:d8:99:bc:82:4b:49:cb:6d:44:75:f6:86:cf:
a6:a5:1c:6a:47:1a:4b:a8:6c:c0:63:71:b5:e7:60:67:77:46:
d3:c3:f4:5c:e6:ca:97:c4:d8:4f:7d:14:74:7b:b7:b4:04:6e:
58:3e:6d:d0:bc:ab:04:b2:90:10:e1:83:89:da:4c:1a:3d:ca:
2d:7e:a0:c7:43:f6:b7:45:5b:a3:f7:a9:77:67:a6:b5:ba:fe:
da:09:03:2f:14:ad:9f:b4:e6:52:c3:78:c2:0e:67:24:09:dc:
d4:c3:ed:cc:a4:ab:8a:3f:1c:ec:4a:04:51:cf:f5:90:e4:1f:
8d:c8:95:30:04:8f:d6:a9:ba:bf:be:4d:5e:ab:6c:f0:94:fd:
72:74:d9:20:4d:49:33:73:72:61:08:22:b3:cd:47:84:cf:68:
5d:37:e1:f8:2a:72:15:b2:82:bb:bd:b2:5b:3f:f5:3d:87:51:
f8:d7:89:6c:b2:53:f1:22:72:38:81:1f:a7:fa:2f:47:be:de:
97:6c:53:9f:d7:87:c8:28:a3:f7:3d:67:eb:79:20:55:b0:08:
fa:1a:b8:9c:2c:dd:96:f7:cd:dc:e9:5b:5d:ed:32:46:81:4b:
b6:6c:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:09:04 2025 by rpki-client