Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/QEHVevEfx97qRJzJKuZ_hmMRmcM.roa
File: QEHVevEfx97qRJzJKuZ_hmMRmcM.roa (raw, json)
Hash identifier: aOeQS/kAS4LIy+SM9GDPJaSv9Th7AJl/ZfLJY/RA0+Q=
Subject key identifier: 40:41:D5:7A:F1:1F:C7:DE:EA:44:9C:C9:2A:E6:7F:86:63:11:99:C3
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01942445A11417DF7EEC2505CB8254283232
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/QEHVevEfx97qRJzJKuZ_hmMRmcM.roa
Signing time: Wed 01 Jan 2025 23:48:50 +0000
ROA not before: Wed 01 Jan 2025 23:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43332
IP address blocks: 185.187.80.0/23 maxlen: 23
185.187.82.0/24 maxlen: 24
185.187.83.0/24 maxlen: 24
185.220.145.0/24 maxlen: 24
2a0b:9b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a1:14:17:df:7e:ec:25:05:cb:82:54:28:32:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 1 23:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4041d57af11fc7deea449cc92ae67f86631199c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:67:57:ce:53:d4:e8:f1:47:05:e7:37:3f:
5e:ed:e2:9a:57:70:11:2e:ec:06:03:13:9d:99:3e:
e2:80:23:8c:39:db:f8:2e:62:d0:b2:64:29:85:84:
1f:b2:28:1b:03:6f:67:cf:c2:dc:00:32:cc:e3:49:
d1:97:0e:e7:18:bb:6e:44:83:a5:c7:22:db:24:63:
ca:d9:35:ab:e6:f7:6a:9e:cd:ad:41:ed:2b:2f:c3:
f7:76:7c:7a:7b:0a:90:d5:9d:da:e0:21:4a:14:e9:
23:06:eb:7a:cb:f4:83:3d:1e:be:95:e5:b8:8a:e4:
82:5f:af:f9:e7:5a:e5:24:17:bc:5a:0f:5c:d3:d5:
b1:87:7f:08:af:8a:48:9a:66:55:0c:da:2d:33:b4:
94:1f:5e:5f:96:d5:aa:59:56:78:e4:ca:44:50:a6:
dc:d4:3e:d0:b4:23:8c:07:85:c3:4d:b9:96:2b:07:
17:31:cd:5a:86:05:76:cc:ba:54:28:1f:f6:6d:63:
b2:a8:22:d3:ec:7e:8d:f6:07:b2:f5:fd:ac:82:2d:
14:f9:89:66:b5:1a:a5:3c:4e:a4:c7:a0:d1:8e:44:
64:6f:b9:b1:d0:f8:3a:ff:f9:3e:a5:1d:be:d4:4b:
1e:85:ff:f5:4e:ba:97:81:1a:a6:84:fb:80:06:22:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:41:D5:7A:F1:1F:C7:DE:EA:44:9C:C9:2A:E6:7F:86:63:11:99:C3
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/QEHVevEfx97qRJzJKuZ_hmMRmcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.80.0/22
185.220.145.0/24
IPv6:
2a0b:9b80::/29
Signature Algorithm: sha256WithRSAEncryption
9e:b5:9c:1d:66:af:f1:06:bd:83:88:a3:37:b0:d1:6b:90:d6:
4f:d4:ee:c1:64:21:48:65:91:6e:3a:c6:db:53:db:3d:c4:d9:
e0:68:db:b5:d5:20:0d:3d:fa:9a:eb:c3:a4:b4:6b:99:ef:4c:
ce:1e:92:2a:c2:49:4a:9c:35:52:54:01:56:18:73:9e:e3:27:
09:05:3c:0f:b8:51:5a:37:bd:47:23:ff:c9:8c:4b:08:b6:d0:
86:65:7b:25:43:d3:0c:3d:57:de:6f:d8:53:8a:04:48:c4:76:
2e:21:67:24:d2:d2:8e:d4:7b:61:b7:20:5e:6f:de:d6:ec:a5:
45:34:df:f3:f7:9b:1f:85:79:94:4a:9f:89:24:c1:b7:e2:e7:
45:af:b8:98:19:42:ac:7d:0e:e5:5a:c7:4c:e1:b7:cc:62:3b:
57:5a:55:ae:57:b9:77:e4:6c:68:e6:8f:03:16:da:b8:5b:40:
6e:6a:60:6c:a4:f4:4d:39:2e:e1:4c:bf:0d:56:e0:13:cf:23:
d2:89:82:ed:fe:f3:0f:d4:67:4e:b4:1b:92:64:51:34:ec:53:
71:ad:b3:52:fa:cc:79:17:4a:ee:f2:9f:7c:b4:ca:b2:eb:33:
a7:b9:cf:e5:df:eb:bc:36:4e:29:38:11:1d:22:cf:6e:1c:82:
62:6d:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:38 2025 by rpki-client