Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/QKwROlQM-_7u8gKJ-Lg37KQ_boU.roa
File: QKwROlQM-_7u8gKJ-Lg37KQ_boU.roa (raw, json)
Hash identifier: Fa0oIDfIQnPmvyxAKLNkB0kAHP+b9oUKAQ9IQ1FgP5k=
Subject key identifier: 40:AC:11:3A:54:0C:FB:FE:EE:F2:02:89:F8:B8:37:EC:A4:3F:6E:85
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 0194274869D42769CE0A0C85CC313795881A
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/QKwROlQM-_7u8gKJ-Lg37KQ_boU.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 206.245.209.0/24 maxlen: 24
206.245.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:69:d4:27:69:ce:0a:0c:85:cc:31:37:95:88:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40ac113a540cfbfeeef20289f8b837eca43f6e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:9c:48:b7:c9:9c:6c:55:d4:77:af:a0:73:
98:c1:9d:ab:88:66:32:10:ba:a5:ff:5c:5f:57:3a:
3e:61:bf:a7:21:8c:d3:5a:f6:34:61:73:ad:48:bb:
fe:0d:55:9f:b6:25:b3:32:3f:e4:af:4f:c7:10:4a:
4d:d3:4d:3f:e5:e0:0f:85:3c:13:3d:f8:eb:6d:14:
0c:fd:aa:0e:10:5f:fb:25:c3:64:ea:b4:c0:97:70:
6f:82:45:1d:69:8c:a1:b6:5c:e2:7c:c3:c4:f0:93:
0c:a1:07:9e:75:c5:fc:64:1e:5d:b6:81:ca:87:ca:
a8:ab:58:95:f1:20:ed:78:64:d2:ef:22:ec:ee:f2:
b3:81:47:4a:b7:f9:d4:77:e6:55:3c:a6:a3:98:ea:
11:5f:ad:ee:a0:b0:4e:27:81:47:d1:69:28:f4:c9:
20:e7:b7:f6:63:85:77:06:8d:84:cb:86:b0:32:e7:
57:39:64:3d:a6:b4:5d:16:f1:d6:aa:4e:cd:ca:af:
c2:6b:06:27:d0:d6:57:a5:a7:fc:04:65:9a:09:80:
01:b8:bf:a5:31:ff:b0:e3:3e:31:31:fb:e1:1c:a6:
8f:ca:85:2b:8f:a0:09:63:11:74:77:24:9b:7a:fe:
28:5d:a0:bd:18:72:5f:2c:7e:ba:02:5a:65:46:c2:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AC:11:3A:54:0C:FB:FE:EE:F2:02:89:F8:B8:37:EC:A4:3F:6E:85
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/QKwROlQM-_7u8gKJ-Lg37KQ_boU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.209.0-206.245.210.255
Signature Algorithm: sha256WithRSAEncryption
4e:11:8d:4c:38:38:07:e5:19:62:ff:c1:02:82:fc:55:2f:8c:
b6:31:ed:eb:4f:f6:3f:18:3b:a1:b5:15:f8:1b:4e:e1:b8:69:
64:8a:b3:30:75:e3:59:17:c2:c5:01:24:54:b2:53:a9:aa:f5:
5f:a4:3d:78:3b:30:bd:5c:41:3a:f8:ed:62:30:7a:6f:6c:ae:
83:ba:b9:3f:c7:d8:55:84:37:f5:41:e8:0f:89:76:b4:38:f8:
e4:08:3e:38:c4:f8:db:22:23:2f:24:e9:c4:9d:ff:3e:d2:c5:
7c:58:cf:0f:3c:42:8b:3d:19:18:81:e1:78:7d:cb:14:7e:b3:
2b:7a:ca:95:84:4f:46:0a:20:a9:96:20:12:48:1c:ba:c6:4c:
3a:21:f2:de:ed:c7:3a:ce:9e:ee:98:ec:d7:ae:f4:93:1b:aa:
27:2a:d9:16:75:af:69:38:4b:86:3a:6b:e5:fc:60:f3:7f:56:
f5:5a:40:5d:00:9e:cc:9d:78:76:23:80:08:bb:ae:c9:72:69:
eb:fd:1c:1e:68:38:5a:15:58:fc:55:c1:97:ef:e0:f7:aa:35:
9b:8a:28:e0:e5:08:c5:ce:11:3e:ea:0c:8f:0f:c2:d6:e2:39:
eb:b2:7a:85:3a:98:a8:ab:6a:cc:9c:c1:60:c2:be:a3:3d:6c:
d1:95:d5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:06 2025 by rpki-client