Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/QKjCAOKQJMjqOOmayga7OQ2UBwc.roa
File: QKjCAOKQJMjqOOmayga7OQ2UBwc.roa (raw, json)
Hash identifier: jA/gBvlqnMxkZ4Kz1oiT52kTp3obybgFm8vN9PxrrXM=
Subject key identifier: 40:A8:C2:00:E2:90:24:C8:EA:38:E9:9A:CA:06:BB:39:0D:94:07:07
Certificate issuer: /CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
Certificate serial: 019423D785EB9EF1C808E7A8E46FC480A5F3
Authority key identifier: 49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/QKjCAOKQJMjqOOmayga7OQ2UBwc.roa
Signing time: Wed 01 Jan 2025 21:48:34 +0000
ROA not before: Wed 01 Jan 2025 21:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201259
IP address blocks: 185.60.32.0/22 maxlen: 22
185.60.32.0/23 maxlen: 23
185.60.32.0/24 maxlen: 24
185.60.33.0/24 maxlen: 24
185.60.34.0/23 maxlen: 23
185.60.34.0/24 maxlen: 24
185.60.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:85:eb:9e:f1:c8:08:e7:a8:e4:6f:c4:80:a5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
Validity
Not Before: Jan 1 21:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40a8c200e29024c8ea38e99aca06bb390d940707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:07:42:dc:78:76:19:81:db:ee:68:5c:b5:
4c:f4:11:2a:fe:7b:ab:f4:42:e7:1f:ea:35:bd:72:
8e:a2:6d:a6:4c:2e:62:0e:0c:bd:88:55:aa:1b:54:
a0:7c:49:78:31:9e:b3:1f:28:e7:35:ed:3e:4d:b8:
05:b2:52:a2:9e:d3:36:84:ca:9c:4d:2c:af:20:db:
2b:d2:3c:dd:94:08:1c:e8:8f:28:09:32:1c:dc:1d:
0d:47:19:22:e1:94:b1:b0:52:d7:db:1b:48:f2:8d:
ac:0b:ad:a7:44:19:72:a1:70:26:e8:db:03:f4:c5:
7f:44:d5:f6:1d:37:30:fa:79:fb:9c:f9:58:60:e8:
a7:9a:e2:c5:c0:5d:1e:7c:9d:64:75:84:36:8d:bf:
8a:8f:60:00:d8:2f:a3:56:7c:7f:e1:ed:6e:05:39:
79:10:9b:f3:c4:ec:2f:ef:b2:f4:14:2c:10:54:85:
5b:bf:c5:69:5a:d7:98:e1:8e:0b:f9:6d:90:51:80:
7f:80:11:c0:25:ab:23:29:05:eb:3f:c9:a3:a4:cd:
24:3a:50:ae:8a:8e:44:2e:59:2f:0a:c1:4a:53:d6:
e1:0f:46:ba:69:f0:52:d8:59:fb:cb:4a:3d:49:73:
7e:f0:2e:bf:a2:b8:48:01:18:93:35:ef:fa:a5:06:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A8:C2:00:E2:90:24:C8:EA:38:E9:9A:CA:06:BB:39:0D:94:07:07
X509v3 Authority Key Identifier:
keyid:49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/QKjCAOKQJMjqOOmayga7OQ2UBwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.32.0/22
Signature Algorithm: sha256WithRSAEncryption
52:87:d8:95:e7:49:a5:57:5a:78:cb:27:57:e1:57:fb:b2:79:
6a:f1:a8:86:77:59:89:44:c3:ce:84:c2:8e:88:3b:4f:12:29:
22:53:3b:87:31:b2:da:d7:64:fc:f6:6c:c7:4c:5f:4b:ca:84:
d8:b9:0c:b3:f3:f5:b1:ee:03:10:0e:a2:50:c7:03:70:dd:e4:
02:3b:55:3e:8f:33:56:4f:e0:64:d8:f5:2c:b8:15:34:df:4b:
b0:ec:74:6a:f7:4b:c7:bc:d8:b4:de:78:f7:59:d7:00:e4:92:
1a:49:73:fa:1e:56:aa:a4:f3:7e:30:5c:83:ff:d3:83:9f:3b:
d3:9a:30:c0:4f:7b:e3:84:2b:87:87:1f:a4:a2:ea:9f:f9:83:
cc:3a:96:85:7f:e0:61:22:8b:28:61:8e:11:47:02:65:89:7d:
bd:b0:ae:0d:1d:20:a9:ec:f7:09:9a:60:4c:7c:6e:dd:26:ec:
40:1a:6f:ea:f0:b8:41:86:7d:83:7f:7d:00:e7:34:c0:13:7e:
2b:7e:b9:72:53:c3:ec:d8:0a:af:f8:f8:da:1e:11:49:04:27:
f9:85:c6:21:57:0b:98:3f:bb:20:f2:11:63:7f:64:be:64:1e:
7a:64:0a:5a:e0:8d:9e:4f:c3:22:95:a5:fd:c3:39:0d:3b:cb:
2b:6e:3f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:51:58 2025 by rpki-client