Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/QnOCtXAVmX13ibu9GQu1nSs9w-k.roa
File: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (raw, json)
Hash identifier: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=
Subject key identifier: 42:73:82:B5:70:15:99:7D:77:89:BB:BD:19:0B:B5:9D:2B:3D:C3:E9
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 0194236A0A2AD4CF347D804619DA58A42F05
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/QnOCtXAVmX13ibu9GQu1nSs9w-k.roa
Signing time: Wed 01 Jan 2025 19:48:59 +0000
ROA not before: Wed 01 Jan 2025 19:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 87.236.148.0/24 maxlen: 24
185.184.219.0/24 maxlen: 24
185.249.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0a:2a:d4:cf:34:7d:80:46:19:da:58:a4:2f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=427382b57015997d7789bbbd190bb59d2b3dc3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:f1:c5:6b:c8:b2:71:3c:20:12:ed:93:d7:
50:a6:35:37:4c:50:61:ac:f1:26:23:98:45:9a:f9:
4b:a2:a5:05:84:28:5b:e7:0d:3d:0b:2e:18:3b:ff:
52:68:87:f6:02:68:cc:16:37:6d:e2:ef:97:d4:66:
f5:d6:b3:e0:e7:f2:fe:67:5a:d2:87:e8:05:59:1e:
7e:85:56:82:fe:6b:af:7d:62:10:79:62:70:66:14:
e7:f4:b4:a0:b7:41:d6:d5:2e:e2:9b:ea:29:44:ac:
39:50:c9:0d:52:2e:9e:15:7a:0a:5b:6f:d7:63:d3:
de:b4:7a:89:5a:b4:f4:46:f6:23:45:d0:1a:d8:cf:
9f:c7:c2:55:a7:21:ec:e3:b9:aa:8e:26:b3:f0:40:
2b:e6:6a:f7:11:58:f2:05:47:6a:2f:7f:2b:9a:7d:
de:5e:c0:21:a4:91:e5:cb:74:10:68:ee:11:66:7b:
93:f8:66:4a:70:df:41:c1:6a:9d:46:a5:69:29:c6:
9c:44:51:c2:7d:3d:38:db:80:18:d9:c3:65:e7:5f:
88:7a:80:70:7c:5a:6e:7e:45:20:4d:4a:c8:8c:d1:
60:69:5d:4a:ac:0f:6a:f1:de:f7:60:91:55:e1:c3:
15:b5:25:3e:f1:fb:42:8c:76:88:9c:7f:05:9b:3d:
9c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:73:82:B5:70:15:99:7D:77:89:BB:BD:19:0B:B5:9D:2B:3D:C3:E9
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/QnOCtXAVmX13ibu9GQu1nSs9w-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.148.0/24
185.184.219.0/24
185.249.53.0/24
Signature Algorithm: sha256WithRSAEncryption
00:44:6e:46:e2:19:a7:02:dd:9c:77:c4:03:2e:00:e2:51:4d:
0a:5b:c4:da:54:dc:1a:e8:00:7d:eb:d6:84:b8:4e:2c:f5:fc:
ce:6a:d9:44:ca:30:f8:e5:de:b1:ef:e1:bf:bb:0f:05:48:7d:
5a:05:a3:be:fd:6a:b9:d3:6f:1e:80:f9:a3:08:45:95:be:17:
0f:06:30:f7:26:cf:a4:64:59:ed:cb:bc:67:8b:3d:f2:a5:d3:
0f:6c:2c:af:f0:ec:e6:d6:5c:ca:59:3c:33:fb:d7:f4:70:c1:
e2:7a:69:a7:af:27:0f:49:53:6a:87:1f:e9:47:30:84:46:f3:
24:71:e0:8e:66:f0:57:07:54:d2:56:95:71:57:49:c5:3e:f8:
06:b2:a4:82:59:11:e3:97:5b:29:ce:70:c8:21:65:81:95:56:
c3:e9:2f:59:09:2b:31:62:da:86:b6:73:64:e1:8f:a1:b5:8b:
16:56:3c:87:0b:9d:0a:80:89:e6:64:90:0d:05:d4:d0:c4:49:
8f:88:4f:7e:67:0b:c5:15:c8:98:ab:39:e6:6d:bd:fa:84:a3:
3d:57:1b:f7:cb:d2:ac:68:0a:44:e3:8c:20:36:c3:d2:3e:ab:
ad:c2:e0:1d:9f:73:c0:57:1f:cc:57:89:3c:f4:e6:68:d2:30:
e1:94:b4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:49 2025 by rpki-client