Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/Q_EK-erWHPnTXBrHVmcWbytpcis.roa
File: Q_EK-erWHPnTXBrHVmcWbytpcis.roa (raw, json)
Hash identifier: mtRhYkTuoZWGkXxI5IGoHrOZ3J63Idzep2wBOshAzrk=
Subject key identifier: 43:F1:0A:F9:EA:D6:1C:F9:D3:5C:1A:C7:56:67:16:6F:2B:69:72:2B
Certificate issuer: /CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Certificate serial: 01954D69949BBF64768BC74D12D7134D5979
Authority key identifier: 0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/Q_EK-erWHPnTXBrHVmcWbytpcis.roa
Signing time: Fri 28 Feb 2025 16:35:19 +0000
ROA not before: Fri 28 Feb 2025 16:35:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215120
IP address blocks: 91.227.33.0/24 maxlen: 24
91.244.70.0/24 maxlen: 24
91.244.71.0/24 maxlen: 24
93.157.138.0/24 maxlen: 24
93.157.139.0/24 maxlen: 24
193.178.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:69:94:9b:bf:64:76:8b:c7:4d:12:d7:13:4d:59:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Validity
Not Before: Feb 28 16:35:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43f10af9ead61cf9d35c1ac75667166f2b69722b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:09:5e:23:ce:8f:58:ae:3c:9c:1c:07:d9:
fc:51:46:be:43:4e:f4:56:ee:95:4b:ce:0a:e8:da:
6b:a9:19:87:6f:60:27:5a:77:21:95:75:fb:a3:63:
f9:e3:fd:8f:9a:44:a6:6f:db:a1:61:dd:68:f5:c2:
dd:86:97:41:60:09:4f:3e:a4:b7:31:6e:09:67:87:
2d:59:ba:be:79:a4:85:66:a7:b4:6e:03:83:1f:6d:
fd:71:c2:fb:26:13:2c:d2:b4:50:de:7a:fc:0c:a2:
5c:40:c9:e8:d3:b2:5e:7c:07:ec:6b:5f:d8:3b:ed:
bc:db:fc:c4:c0:a9:92:82:19:37:e6:32:d3:87:cc:
cd:f1:66:dc:f9:7d:53:b3:e4:c1:ca:b3:41:53:16:
35:02:9e:6e:24:d2:5c:d6:a3:7d:7b:19:5b:91:84:
0e:4c:78:82:8a:ae:76:c9:d0:7c:cd:37:c4:9f:4e:
62:c3:c9:75:dd:13:bd:3f:7f:b8:c9:dc:47:9f:62:
80:04:98:50:a4:c9:c6:47:53:9f:78:3f:41:ff:24:
69:fd:1c:8e:82:0d:5c:65:c3:09:52:39:7b:8f:8e:
c7:4b:3a:7d:f0:c7:b1:00:d2:f1:e1:3d:ef:e9:e3:
60:c7:1f:ee:d5:3a:da:9a:fc:ec:54:15:7d:3c:c2:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F1:0A:F9:EA:D6:1C:F9:D3:5C:1A:C7:56:67:16:6F:2B:69:72:2B
X509v3 Authority Key Identifier:
keyid:0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/Q_EK-erWHPnTXBrHVmcWbytpcis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.33.0/24
91.244.70.0/23
93.157.138.0/23
193.178.186.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a7:50:51:bc:e4:ae:50:48:a0:8b:d5:81:12:d6:1a:1a:c5:
64:f2:9f:56:47:ef:98:71:87:43:d4:81:4c:50:09:6a:d1:85:
92:5d:38:bb:25:e6:c0:3d:3e:05:c1:f4:bf:3e:fd:b3:91:8c:
91:7a:19:29:52:95:b8:d4:18:69:e7:df:c3:3f:7b:eb:01:f9:
ca:29:22:d9:05:37:fc:61:b2:82:ff:c2:f4:7e:fa:46:1f:3a:
82:bb:fb:1d:d7:d9:c3:be:3b:25:a3:60:5c:86:71:34:9b:28:
59:d7:7a:c8:3a:3c:18:3c:25:08:5d:8a:6d:0e:96:8e:57:b6:
74:bc:22:17:c2:ea:cd:a7:72:03:b6:c1:ec:cd:79:7d:e5:34:
bc:69:4d:54:41:3b:14:20:8e:b4:f1:3c:8e:17:a5:37:26:eb:
b7:92:d7:b9:f9:9a:d1:4e:c5:9e:b2:42:af:54:7b:a0:66:c9:
7e:16:8d:5e:8b:d0:42:c9:2f:d4:f0:3f:a8:34:a8:b8:fe:ed:
18:e7:ba:a5:64:d1:86:eb:ef:e6:34:dc:36:c1:ba:ef:ac:d6:
86:5e:67:67:c2:3e:6e:f6:61:f5:1b:41:49:db:b7:b0:d5:cd:
7a:7c:fd:47:4c:7b:6b:e4:9b:3e:aa:13:ce:8b:65:ef:d2:4c:
fa:7d:e0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:26 2025 by rpki-client