Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/q0U72A-TmAdIiSZqADr7lQ91Uyg.roa
File: q0U72A-TmAdIiSZqADr7lQ91Uyg.roa (raw, json)
Hash identifier: dlLIeL8l0Zobhdp0PRjKZbX7n5ZaS0bGsyUsmEas11M=
Subject key identifier: AB:45:3B:D8:0F:93:98:07:48:89:26:6A:00:3A:FB:95:0F:75:53:28
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421441F7F39BE4679E96AA064AE12E534
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/q0U72A-TmAdIiSZqADr7lQ91Uyg.roa
Signing time: Wed 01 Jan 2025 09:48:20 +0000
ROA not before: Wed 01 Jan 2025 09:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214271
IP address blocks: 82.152.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1f:7f:39:be:46:79:e9:6a:a0:64:ae:12:e5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab453bd80f9398074889266a003afb950f755328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:aa:37:15:1b:bc:e7:68:70:ef:c0:fe:39:41:
dd:e8:16:df:a5:59:76:49:86:ac:83:dc:af:a2:8f:
06:44:83:16:81:ee:e3:0c:2f:cb:db:ba:79:45:ab:
6b:73:65:be:9b:d0:86:ff:52:29:50:50:86:ee:42:
ff:0b:bf:54:cb:28:11:36:5f:84:76:e0:f6:58:35:
b1:32:69:91:81:f9:80:92:00:51:14:e4:d3:76:22:
43:16:de:13:01:98:eb:75:aa:b4:2a:24:cc:d0:23:
79:6f:07:d5:38:80:00:31:c4:35:bd:de:bf:a3:8b:
f1:2d:21:fa:e8:1a:7e:87:3e:e2:6f:57:bc:03:a9:
8e:4f:09:a2:bc:da:b9:fe:13:c3:47:cc:b6:44:10:
0f:f0:64:da:64:4f:b8:db:dc:8c:df:86:38:6a:0b:
04:91:67:37:8d:f5:ad:95:ac:30:a9:38:f7:28:0e:
f5:4e:ce:e2:b3:86:a7:83:cc:55:48:b7:e0:c5:5a:
e6:9c:38:8a:31:75:77:29:f5:ca:92:53:e5:c0:bd:
c0:25:0e:4a:98:cb:4e:85:f7:64:91:8f:88:3c:88:
76:2d:cd:5f:68:01:14:8e:c5:fd:9e:0b:1c:e2:9e:
75:96:22:40:f5:07:01:5f:89:7b:ba:99:50:1a:40:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:45:3B:D8:0F:93:98:07:48:89:26:6A:00:3A:FB:95:0F:75:53:28
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/q0U72A-TmAdIiSZqADr7lQ91Uyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.178.0/24
Signature Algorithm: sha256WithRSAEncryption
40:65:07:59:ea:f3:b1:c7:9f:6e:cd:44:fb:17:ef:20:f5:78:
1b:e4:0a:df:25:cd:08:b9:74:41:46:f3:3e:17:15:2f:53:52:
b1:9d:43:61:58:14:f1:d8:ea:a8:58:12:e7:c6:6a:72:db:f7:
e2:94:26:85:83:d0:12:ce:5f:9b:a5:a5:88:f1:0f:84:13:a7:
01:0b:bc:19:20:2e:c3:0e:5b:3c:bc:4f:a9:f8:76:3a:39:1f:
43:7f:a9:8d:e3:3d:e1:38:aa:07:61:a6:43:e7:8b:a9:4b:79:
9b:32:0f:ed:ef:27:b8:05:28:8e:1d:2f:29:69:8a:e2:29:88:
d1:0e:85:da:3b:6c:c5:bc:e6:34:96:e5:08:b2:04:d2:a6:fb:
a7:67:e8:3d:e1:d9:8e:b5:99:bc:32:4c:87:4e:c3:65:45:3b:
c7:4b:e7:8a:a7:1c:8a:c1:d1:20:e3:e9:55:75:db:ae:f5:8f:
3a:e7:53:b1:a6:a3:f8:2a:c6:58:71:6e:5d:5f:41:55:74:0b:
8f:28:77:42:43:5c:77:36:44:b2:04:d6:a2:9e:bd:1e:c3:3a:
3b:20:eb:4d:19:cd:3e:34:82:ad:52:24:69:69:02:21:33:51:
3b:a5:51:44:ec:e9:49:63:21:8d:c4:64:8b:88:ed:c3:99:f9:
be:fe:fe:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:41:51 2025 by rpki-client