Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/DXSMQQoNY6zl2bbt_Qxl4yUZpo0.roa
File: DXSMQQoNY6zl2bbt_Qxl4yUZpo0.roa (raw, json)
Hash identifier: W1Qix1yXYt7eEDSw6BnO5hmas15FwfPB8Nypx8uQBss=
Subject key identifier: 0D:74:8C:41:0A:0D:63:AC:E5:D9:B6:ED:FD:0C:65:E3:25:19:A6:8D
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 019420686D0448F0F5E91DF0B32CE1E5C810
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/DXSMQQoNY6zl2bbt_Qxl4yUZpo0.roa
Signing time: Wed 01 Jan 2025 05:48:22 +0000
ROA not before: Wed 01 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 139.174.0.0/16 maxlen: 16
192.109.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6d:04:48:f0:f5:e9:1d:f0:b3:2c:e1:e5:c8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d748c410a0d63ace5d9b6edfd0c65e32519a68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:4d:e5:e8:70:69:77:16:d2:db:2e:e2:04:
4c:cf:0d:e5:b5:a6:83:ad:f6:4a:13:61:6e:81:02:
ab:6f:57:ac:b2:c9:ff:ea:68:70:e8:e9:67:f8:82:
8a:f7:f0:1e:f8:35:ec:2d:96:13:43:74:29:54:18:
0a:00:3c:e9:ae:6d:8e:a2:46:d7:04:24:9f:6c:51:
eb:97:26:04:a4:e3:da:98:f9:5a:dc:24:01:21:19:
2e:47:d4:36:17:30:35:1d:15:c8:9f:ae:44:46:a3:
73:42:66:94:70:cc:67:6f:3f:6f:0f:0f:8d:e5:ca:
ad:8c:e7:fc:cc:bd:c2:0d:2a:d1:c9:22:9f:c8:da:
4d:1f:c7:e3:6d:b0:ad:ec:4c:4e:11:77:79:65:8a:
fc:d2:e3:ad:e8:9c:6a:7a:ca:d0:6b:22:c8:17:3a:
0f:ec:88:62:1c:ad:f5:9e:84:e9:41:98:64:2e:36:
83:af:68:61:d1:38:e9:58:e7:73:ec:8c:72:64:72:
c5:d0:2f:20:4a:85:dd:a3:f2:b1:10:83:2a:05:9d:
eb:24:8d:35:9b:dd:c4:9a:40:5a:2d:0c:0d:73:e1:
73:28:13:43:7a:01:f4:c1:95:8e:40:74:8a:1f:e2:
31:84:33:ad:40:55:7e:45:42:1a:93:7b:e3:24:8f:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:74:8C:41:0A:0D:63:AC:E5:D9:B6:ED:FD:0C:65:E3:25:19:A6:8D
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/DXSMQQoNY6zl2bbt_Qxl4yUZpo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.174.0.0/16
192.109.175.0/24
Signature Algorithm: sha256WithRSAEncryption
07:32:46:8a:e0:e5:d5:9c:6a:23:cb:93:79:b6:41:d5:8c:39:
63:d9:61:dc:fd:87:75:9c:76:a5:d4:88:66:4a:ee:d1:2c:b3:
93:7f:22:e3:35:ff:bd:ce:c0:b0:5d:f6:82:c1:22:58:26:06:
40:66:32:a4:3b:60:ce:89:84:5a:ef:4a:54:45:78:de:8b:40:
9a:47:8c:92:95:b8:08:03:36:94:ef:08:21:4a:8c:15:a3:56:
7c:00:6c:96:3d:62:03:20:87:ce:7b:06:c0:2c:de:45:b4:03:
35:72:cb:2a:eb:61:c3:70:46:54:87:cc:a1:97:37:b9:39:4e:
ab:af:82:9d:72:8c:e1:e4:1e:4b:a6:89:b1:88:a4:fe:55:69:
76:6f:c7:d8:43:ff:cc:e0:d9:86:ab:9c:62:7f:13:d2:3d:9e:
86:2e:5a:9f:d7:b7:a6:ba:d3:80:8a:ff:6e:f5:12:aa:00:0f:
6c:41:6d:ca:fc:7d:10:f8:94:dd:8e:b3:95:c5:34:02:5a:dc:
c4:e6:eb:63:0a:47:e8:79:88:6b:45:63:70:1f:21:99:65:c0:
dc:73:5b:8d:c6:cb:d2:c2:1e:1c:3f:f9:e6:4b:52:0b:75:21:
6d:1b:6f:ee:10:71:de:4c:6b:aa:29:c1:f9:b8:cf:94:a9:27:
06:e3:b6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:49:49 2025 by rpki-client