Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/6QrRaQgEDEW94ibCtl94XG-cNo8.roa
File: 6QrRaQgEDEW94ibCtl94XG-cNo8.roa (raw, json)
Hash identifier: gVo0FFoXqD/aGsK6YPk59eIbOT2OP162DfbC2dzkqj4=
Subject key identifier: E9:0A:D1:69:08:04:0C:45:BD:E2:26:C2:B6:5F:78:5C:6F:9C:36:8F
Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial: 01942747B695B47805B8DA06365C7CF53658
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/6QrRaQgEDEW94ibCtl94XG-cNo8.roa
Signing time: Thu 02 Jan 2025 13:49:58 +0000
ROA not before: Thu 02 Jan 2025 13:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202766
IP address blocks: 185.44.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b6:95:b4:78:05:b8:da:06:36:5c:7c:f5:36:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Validity
Not Before: Jan 2 13:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e90ad16908040c45bde226c2b65f785c6f9c368f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:42:f3:0c:82:8d:ed:83:90:82:75:39:9b:
2c:6f:2e:e1:51:54:88:47:51:01:d9:65:89:d3:27:
0e:bf:c5:ba:9b:e5:7a:da:78:22:9c:45:69:a4:b7:
15:f1:fd:01:bb:ef:1b:4b:6d:2b:0a:ad:f4:2d:6e:
51:75:83:d2:82:6c:d3:a3:b4:de:fd:ef:13:04:fd:
36:e3:0e:db:54:17:b4:17:2c:46:90:c2:16:97:18:
fd:db:87:b8:cf:09:74:2a:b9:f9:30:6d:8f:3e:64:
3d:5e:0a:c4:86:f4:83:40:d6:6d:07:ef:5d:ca:20:
93:08:5e:8e:6d:16:30:2f:d4:e5:4b:52:32:8e:86:
80:44:bf:e8:01:30:a9:0a:88:55:82:b3:07:6e:ea:
38:f1:1f:68:87:89:ce:a8:47:7f:90:04:a3:ff:ed:
9a:33:26:7e:9f:f7:4a:ca:3b:c3:67:3c:a3:6b:8a:
25:e3:fa:63:9c:e4:81:ec:fb:dd:30:ae:78:81:50:
02:57:8f:2c:e0:d3:14:5c:c9:53:a1:b6:a1:c2:38:
5b:fa:00:6a:fe:c8:96:99:85:2c:da:68:f8:d1:9b:
e2:7a:d7:25:5b:c3:f1:eb:77:4e:24:29:bd:51:e3:
fd:fa:cc:55:46:33:05:9f:dd:a7:1e:71:9b:7f:f9:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:D1:69:08:04:0C:45:BD:E2:26:C2:B6:5F:78:5C:6F:9C:36:8F
X509v3 Authority Key Identifier:
keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/6QrRaQgEDEW94ibCtl94XG-cNo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.63.0/24
Signature Algorithm: sha256WithRSAEncryption
92:74:c0:7a:ed:fd:73:b3:9f:25:78:bd:72:2d:9c:09:59:8a:
da:1d:60:a5:11:43:a8:b7:26:82:28:78:66:c8:2e:0a:1c:dd:
62:da:d7:c3:6e:a9:37:4f:05:e9:a5:13:fb:17:d9:0f:b3:a3:
11:0c:50:83:ab:05:d3:75:e3:1c:a2:ff:e4:5b:d9:9a:3a:fa:
ed:15:45:b6:9a:5a:fa:b2:68:5a:7b:1d:1d:8c:c7:2a:d8:b5:
fc:94:18:1e:ed:2c:64:90:21:ce:ae:96:db:cd:6d:5c:c3:c2:
39:a7:7a:66:94:b3:3a:e1:be:1a:80:41:30:6a:10:94:9e:36:
ad:f6:5a:05:e7:f3:63:ca:e2:cf:1f:bd:38:50:7b:48:57:3b:
4f:01:e4:46:4b:7d:21:1e:21:de:66:e5:b6:03:e1:ea:9d:d0:
f8:bd:d7:bd:21:91:b8:76:00:00:15:3d:f7:07:e1:93:a8:91:
d1:58:c0:61:8f:f4:77:ff:7c:44:ff:91:6a:0d:a9:23:9f:f2:
43:e7:ea:98:ac:44:8c:9b:21:9c:76:98:ad:34:6b:83:91:84:
a5:79:8e:58:b5:f4:dd:d8:41:ec:2e:f3:1b:8a:8a:0b:07:55:
3f:d7:ac:6e:3e:85:1e:07:e2:15:19:5c:0a:e0:97:2a:a4:4b:
0f:e7:0f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:42:02 2025 by rpki-client