Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/qjQqwaE98pw-Tsc3qccVON2SJQg.roa
File: qjQqwaE98pw-Tsc3qccVON2SJQg.roa (raw, json)
Hash identifier: y4z4CZUi94ZRWjv9y7p8MUe6n4UJbAQ8c5NqooIEDx8=
Subject key identifier: AA:34:2A:C1:A1:3D:F2:9C:3E:4E:C7:37:A9:C7:15:38:DD:92:25:08
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 019421B18EA4A3C0F84A961F436B98234BDF
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/qjQqwaE98pw-Tsc3qccVON2SJQg.roa
Signing time: Wed 01 Jan 2025 11:47:52 +0000
ROA not before: Wed 01 Jan 2025 11:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56702
IP address blocks: 91.226.222.0/23 maxlen: 23
91.226.222.0/24 maxlen: 24
91.226.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8e:a4:a3:c0:f8:4a:96:1f:43:6b:98:23:4b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Jan 1 11:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa342ac1a13df29c3e4ec737a9c71538dd922508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:df:a2:d4:e3:78:c2:ba:e7:43:f6:1f:43:
ca:eb:46:ab:b5:bf:25:84:4f:f7:60:ca:1f:ef:3b:
86:35:be:0b:0c:a5:79:90:68:70:6f:7c:61:ba:6b:
30:dd:29:57:97:d3:ff:83:11:cd:6d:2a:6c:b4:36:
77:f9:03:0f:d3:b5:12:22:bb:42:1a:4c:9c:99:69:
a6:ca:db:63:f8:25:84:4f:5d:db:dc:aa:22:fa:8a:
e7:e6:0e:6a:49:c4:d9:48:5f:f7:40:88:6f:9e:e5:
90:64:52:91:f8:b6:32:e2:b2:67:e7:dc:92:ab:bf:
48:92:5c:b0:46:53:01:d6:1c:f4:6f:9c:be:36:08:
ae:8d:35:7c:f6:e2:82:ed:32:35:0e:df:a3:c7:cb:
de:9e:49:d5:c4:e5:ec:8f:90:77:d5:d3:c5:82:b5:
ab:0b:77:94:71:0f:b2:ea:09:ab:0f:d7:42:11:af:
fa:d6:90:5a:24:f5:72:62:1f:70:e4:18:80:3e:db:
47:86:7d:c3:53:b6:8a:8d:a4:af:da:43:01:1f:25:
21:6d:c7:ca:c1:db:ec:a4:25:49:7d:b1:d5:71:f5:
26:d0:d3:22:5f:e0:b5:42:a5:88:9a:b8:c9:c7:6e:
a0:d0:69:63:cb:c2:5e:75:74:02:38:ae:08:67:76:
dc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:34:2A:C1:A1:3D:F2:9C:3E:4E:C7:37:A9:C7:15:38:DD:92:25:08
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/qjQqwaE98pw-Tsc3qccVON2SJQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.222.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:7a:52:8c:85:a5:fb:e1:27:a0:bc:74:d1:98:3f:dd:0c:8a:
89:cb:de:f2:95:8c:ca:e1:53:eb:e7:4b:2e:81:94:91:ee:51:
a3:a1:0d:57:92:a8:f1:eb:45:86:e3:41:d8:4d:5b:45:32:8e:
a9:40:a6:26:98:d3:e0:d7:33:c9:4b:22:94:71:3d:84:2b:69:
83:16:55:64:3f:a3:34:1f:31:f2:74:97:d2:25:19:de:fb:f0:
28:2b:af:03:2b:38:b6:f9:b8:18:90:6a:41:7d:02:f8:36:64:
7a:2c:85:fe:65:ba:f8:ef:b6:f4:b0:49:3c:1d:ba:77:9a:70:
53:d6:5c:5b:ff:58:70:75:03:e3:be:95:82:70:71:59:4d:f4:
90:9a:45:c5:d9:64:ff:45:3f:1a:be:2b:e4:75:21:b2:61:96:
b3:6b:f4:ee:75:e3:a1:92:95:51:f3:cd:7e:5e:67:78:fa:ca:
4c:49:30:c9:91:94:5d:b0:78:fd:d4:c6:dc:99:85:59:e5:f6:
32:aa:9e:6a:8e:8a:45:a6:30:db:4e:a6:9b:2c:8a:60:7d:79:
bc:73:c0:84:8c:c7:73:6f:8c:5b:36:d6:85:b1:d1:0a:0a:42:
05:d1:40:fa:07:13:03:02:26:12:1d:e3:4e:dc:fd:be:6c:31:
a1:58:a6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:56:02 2025 by rpki-client