Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/5_qbUTNJTKmDx-VPoCyg5GiF_44.roa
File: 5_qbUTNJTKmDx-VPoCyg5GiF_44.roa (raw, json)
Hash identifier: upLH1FeLhYFLc3B1AG7zDO/VAd2waobao5HIF19Yrvo=
Subject key identifier: E7:FA:9B:51:33:49:4C:A9:83:C7:E5:4F:A0:2C:A0:E4:68:85:FF:8E
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 019424B3F81E77AA07463572BE001CCD39AB
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/5_qbUTNJTKmDx-VPoCyg5GiF_44.roa
Signing time: Thu 02 Jan 2025 01:49:21 +0000
ROA not before: Thu 02 Jan 2025 01:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205659
IP address blocks: 185.218.232.0/23 maxlen: 23
185.218.232.0/24 maxlen: 24
185.218.233.0/24 maxlen: 24
185.218.234.0/24 maxlen: 24
185.229.242.0/24 maxlen: 24
185.235.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f8:1e:77:aa:07:46:35:72:be:00:1c:cd:39:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 01:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7fa9b5133494ca983c7e54fa02ca0e46885ff8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:be:f6:ae:54:cf:f3:00:34:b3:77:da:aa:
8f:4b:a0:7d:a5:40:f8:51:70:5f:37:f5:1f:03:87:
35:74:3f:ca:f5:58:49:ef:e6:3f:b6:7b:f7:02:8c:
bb:e9:a2:e3:3e:f3:a9:bb:c8:c1:bc:73:74:39:76:
90:09:84:7f:58:9c:fe:a0:cb:88:13:47:92:8a:0e:
5e:d9:ad:6c:7c:99:35:34:61:63:f3:e4:53:74:8c:
33:39:6f:bb:5a:22:41:90:63:ca:93:3b:53:d0:95:
09:da:b4:f2:49:84:c0:c8:b1:fb:d8:f3:06:74:81:
43:6a:34:8b:8a:e0:a6:d9:79:89:0d:b7:1c:ef:33:
4d:2b:37:70:35:98:41:40:70:45:5d:25:e4:ff:9b:
87:71:c6:d0:29:7b:40:e6:fa:0d:40:01:82:f6:1a:
ab:30:3e:83:34:07:f9:17:03:29:8a:41:a4:dd:26:
0e:ee:75:ad:c8:b9:70:65:f7:d6:2f:26:cf:4c:bd:
8a:72:fa:d2:ad:3b:ff:11:20:78:ca:c2:8c:fa:d4:
0e:ba:a3:28:6f:eb:63:d1:ab:9f:0a:14:2e:fe:12:
91:bc:e7:c0:de:92:a1:82:03:42:7a:90:c7:e3:64:
42:53:50:92:1e:5f:2c:04:8c:4c:12:8f:76:3b:08:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FA:9B:51:33:49:4C:A9:83:C7:E5:4F:A0:2C:A0:E4:68:85:FF:8E
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/5_qbUTNJTKmDx-VPoCyg5GiF_44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.232.0-185.218.234.255
185.229.242.0/24
185.235.12.0/23
Signature Algorithm: sha256WithRSAEncryption
27:57:0a:6e:2d:67:38:8e:74:02:8d:2d:90:40:42:d9:62:77:
40:dd:8b:d5:60:17:ea:77:0e:b0:f0:50:83:4b:76:3f:0f:89:
47:7d:8a:5b:93:51:cd:46:88:74:ff:6f:40:5b:26:0f:40:74:
04:9c:91:da:bd:69:19:0e:58:05:f9:07:ab:ac:69:7c:bd:e6:
63:ef:20:5d:ac:11:b3:82:dc:b6:47:4b:98:8e:91:94:90:d3:
c1:cf:19:ec:9c:5b:b0:c1:93:a7:81:ea:54:9f:68:03:f7:f8:
23:ce:d5:c9:ef:d0:a1:eb:9b:a5:3d:ad:db:9e:0f:f1:87:82:
8c:08:97:8f:06:92:25:14:bd:f0:54:51:2f:13:a0:cd:24:b6:
0e:d4:a0:1a:ce:4a:73:92:67:f1:2a:dc:9e:6b:83:95:4a:9a:
f3:28:b0:b1:42:29:4c:60:1e:de:2a:d9:6c:ff:97:64:92:7f:
68:b7:12:8a:75:40:4a:97:3f:f2:ad:a9:7b:da:55:fb:26:43:
fd:2b:16:6e:b4:2c:c1:c5:74:2b:c7:12:c8:11:7e:45:65:d6:
7c:e5:6b:d0:20:57:c9:d7:44:aa:0c:1a:1a:21:65:d3:c9:86:
13:46:66:73:6c:1b:ec:b8:62:69:d5:8a:e6:51:00:a1:a3:c3:
89:02:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:32 2025 by rpki-client