Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/qzSVGtS_jWsXuo115ysr12jv81o.roa
File: qzSVGtS_jWsXuo115ysr12jv81o.roa (raw, json)
Hash identifier: 6sU/7Xohp1bS1zbTFVnz4YbGVdQCm8u0BmBoUOstkdU=
Subject key identifier: AB:34:95:1A:D4:BF:8D:6B:17:BA:8D:75:E7:2B:2B:D7:68:EF:F3:5A
Certificate issuer: /CN=00bf230044649c06d75e302c5175004dbfc67261
Certificate serial: 019421443049FF0D971A1692CD70EF1FE127
Authority key identifier: 00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/qzSVGtS_jWsXuo115ysr12jv81o.roa
Signing time: Wed 01 Jan 2025 09:48:24 +0000
ROA not before: Wed 01 Jan 2025 09:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25206
IP address blocks: 185.230.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:30:49:ff:0d:97:1a:16:92:cd:70:ef:1f:e1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00bf230044649c06d75e302c5175004dbfc67261
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab34951ad4bf8d6b17ba8d75e72b2bd768eff35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:46:3a:d0:73:d1:7a:30:aa:68:3a:08:80:
29:74:fb:27:a4:31:ae:13:fc:b1:82:11:1e:31:de:
e3:a3:01:5b:f7:70:c4:86:dd:29:bf:d8:62:cf:91:
45:12:99:8a:bb:ca:b5:f6:01:68:e5:d4:56:40:06:
f1:2d:fa:cd:42:b8:28:01:8f:7b:26:ef:75:77:5d:
71:cf:81:02:d7:c7:8a:76:7f:41:1a:1c:ec:8e:92:
4f:f5:05:c4:3a:63:3e:3d:27:3c:e4:4c:f4:e4:de:
d6:21:d2:29:3b:dc:36:f3:24:59:6a:4c:2f:da:e5:
f0:e0:0b:79:b4:fc:b0:3d:15:8b:f0:6d:e9:30:b8:
25:64:33:2c:b1:72:8c:2e:90:ad:dd:43:06:98:fb:
d7:55:57:98:2d:ad:77:3e:23:30:0f:46:cd:48:c5:
6b:b2:0b:b9:4f:5d:a7:58:c8:4e:88:62:dc:dc:39:
86:20:46:42:c6:42:c8:6e:68:c9:c4:f0:e1:40:ff:
f7:3e:fa:87:4e:4c:a0:ef:19:c5:8d:b6:89:56:6d:
fc:83:23:6a:af:26:01:6b:66:20:14:e9:40:d1:08:
ec:3e:ad:02:25:96:27:ff:77:66:57:d2:55:e2:29:
ac:27:b9:ae:90:db:e9:ff:98:80:f0:f5:3e:db:73:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:34:95:1A:D4:BF:8D:6B:17:BA:8D:75:E7:2B:2B:D7:68:EF:F3:5A
X509v3 Authority Key Identifier:
keyid:00:BF:23:00:44:64:9C:06:D7:5E:30:2C:51:75:00:4D:BF:C6:72:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL8jAERknAbXXjAsUXUATb_GcmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/qzSVGtS_jWsXuo115ysr12jv81o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/d88122-deda-4fd0-9a67-6ef1d96813a2/1/AL8jAERknAbXXjAsUXUATb_GcmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.244.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:45:ca:a2:48:07:a8:a6:d1:65:05:75:1e:45:79:91:74:56:
3d:24:92:92:0f:ec:30:40:f8:69:65:5a:09:48:fe:02:b0:46:
b4:f8:19:ce:75:11:fe:73:96:c2:67:cc:df:4a:02:8e:39:0d:
b5:8f:b8:1f:38:77:61:05:8f:e7:0b:68:72:79:63:00:6e:75:
f0:01:06:56:08:be:01:4d:10:d3:25:6b:47:43:08:21:aa:df:
30:c0:9b:c2:f3:8e:8f:91:8b:95:06:e8:b0:38:fc:6a:25:63:
cf:d5:bf:46:6f:ca:98:f5:9f:c3:12:5c:2c:3a:61:b9:be:62:
d5:5c:3d:87:d0:75:06:d8:63:f2:f1:56:b9:af:6d:43:22:de:
15:4d:2d:61:4a:8f:0d:99:07:3b:03:a3:3e:73:76:14:79:1f:
a1:4a:04:ab:5a:40:59:15:9f:83:4e:6d:6d:03:f4:bd:4f:85:
e6:af:e1:3a:9a:02:8f:7e:f9:89:80:7b:9b:76:6a:29:99:05:
19:a5:f6:4d:fc:84:c1:c8:15:9f:e3:37:75:69:ba:1a:bb:58:
87:68:e4:e5:24:fc:50:ea:34:f4:80:26:04:81:98:0a:60:3e:
50:db:7b:a5:35:fa:8d:78:e0:ba:ec:96:a7:cc:1f:b4:56:c0:
d0:1c:c1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:58:45 2025 by rpki-client