Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa
File: Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa (raw, json)
Hash identifier: w4dI7huh81K1h/L8FZLaE05OH1acBhhl3bfSdimUZDw=
Subject key identifier: 43:6F:A2:4F:FD:19:8F:3B:FD:18:7D:36:C9:AF:18:B4:82:E3:F1:A6
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 01942444BD18BBA628847985CC25908C0E77
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209181
IP address blocks: 185.167.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:bd:18:bb:a6:28:84:79:85:cc:25:90:8c:0e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=436fa24ffd198f3bfd187d36c9af18b482e3f1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f4:d2:06:dc:56:4e:13:44:2a:95:37:23:1c:
fd:68:9f:82:66:d1:8d:7a:1c:f4:15:ae:5f:d2:da:
44:55:73:ce:09:f9:b9:12:4a:f0:a5:1d:9f:c5:0b:
3b:33:eb:97:fb:38:89:a1:11:a3:59:45:a2:44:da:
4a:db:76:5a:4c:48:c8:f2:d5:bc:2d:2e:c8:7b:bd:
34:cd:8a:5a:cb:1c:56:b1:56:ce:1c:75:a1:75:e3:
00:9f:49:eb:b4:32:ef:30:5c:b5:65:d1:70:49:e8:
75:85:5a:3f:08:31:88:1d:99:11:ef:03:07:0e:6a:
fd:ce:9d:19:97:ed:ea:33:66:04:db:c0:8a:79:31:
d4:92:23:ed:22:c8:ab:81:2f:a6:ff:82:41:ae:c9:
ac:bb:45:81:cf:ed:8c:69:9c:a6:67:e2:62:46:49:
2f:5c:7c:c6:53:95:39:a8:82:b2:d4:35:2a:46:65:
a7:d9:6d:43:80:64:94:f1:e8:b7:14:76:b8:51:9a:
57:4d:68:15:ea:97:ff:1c:da:e7:c5:80:55:44:ad:
50:90:7b:4a:c3:90:c6:00:d9:92:69:65:81:10:18:
80:da:d3:38:ff:4b:59:3d:12:4b:42:a2:67:3d:ba:
0e:34:dd:e3:b3:56:cd:88:95:32:1a:6e:db:05:d7:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6F:A2:4F:FD:19:8F:3B:FD:18:7D:36:C9:AF:18:B4:82:E3:F1:A6
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.235.0/24
Signature Algorithm: sha256WithRSAEncryption
62:83:82:9b:73:11:e6:26:92:61:41:2d:28:35:09:6a:a6:24:
1c:d9:65:5f:7f:2d:d3:9e:89:08:f7:22:86:62:a4:35:7f:ae:
0c:9a:c7:e7:56:95:dd:0c:e9:3b:35:a6:0b:d9:2b:9a:0f:1b:
67:a1:de:2c:e9:6f:1b:8b:61:72:ae:84:6d:20:82:53:42:5e:
72:01:ba:74:89:b5:41:ca:a2:0a:0f:69:4c:07:58:7e:59:07:
d3:a6:9c:1e:3b:5e:e0:6b:e8:aa:93:4c:98:ae:41:8d:46:d6:
15:b7:5c:8f:b7:3e:b7:1a:28:80:7b:f9:a7:13:ea:06:9a:81:
4d:6b:66:47:64:f1:84:1e:03:70:59:63:83:ef:dd:46:1c:f5:
23:00:0e:03:29:b4:42:65:3c:ac:70:7e:d9:f2:5b:5d:19:2d:
41:ed:c3:3f:b9:7e:4f:89:a2:2c:ef:47:af:f7:f8:bf:91:7f:
d8:8b:27:7b:20:7c:f3:ef:43:a6:18:28:d2:15:f0:01:94:8f:
10:26:83:2d:45:80:16:81:f6:72:08:03:e7:4d:86:6c:0b:9f:
11:4f:6d:92:8f:0f:76:87:e0:b2:87:4e:f2:bb:09:59:d6:6b:
d5:7c:b3:0f:40:15:26:fd:8d:c2:af:1d:94:11:66:45:b4:b4:
0c:c3:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:54:16 2025 by rpki-client