Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/qSRUcx1mNfKDgalh8O503kQbSt8.roa
File: qSRUcx1mNfKDgalh8O503kQbSt8.roa (raw, json)
Hash identifier: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=
Subject key identifier: A9:24:54:73:1D:66:35:F2:83:81:A9:61:F0:EE:74:DE:44:1B:4A:DF
Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Certificate serial: 0195BA328C73AA616417DFAB8A0B50877166
Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/qSRUcx1mNfKDgalh8O503kQbSt8.roa
Signing time: Fri 21 Mar 2025 19:33:49 +0000
ROA not before: Fri 21 Mar 2025 19:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41869
IP address blocks: 185.12.58.0/24 maxlen: 24
193.28.7.0/24 maxlen: 24
194.127.198.0/24 maxlen: 24
217.197.164.0/22 maxlen: 24
217.197.165.0/24 maxlen: 24
217.197.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ba:32:8c:73:aa:61:64:17:df:ab:8a:0b:50:87:71:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Validity
Not Before: Mar 21 19:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a92454731d6635f28381a961f0ee74de441b4adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:d3:44:ae:24:12:aa:66:b8:ab:cd:90:b6:
9e:f1:38:63:9b:dd:10:1a:cd:7c:45:64:40:15:42:
98:5b:82:23:06:93:40:0f:45:40:b5:14:c4:c3:9e:
0d:1b:3d:1d:ab:f8:c6:ec:ae:2a:b7:5f:9f:87:24:
e6:da:d9:f1:8a:0f:ca:06:d7:51:96:b4:7d:df:e8:
c5:eb:28:89:f8:e3:5d:f3:2c:7b:15:46:de:01:c5:
cd:eb:b8:2e:e2:60:f4:45:57:24:d9:8f:c1:94:cd:
8b:a7:d0:e9:33:26:2a:22:35:1f:91:9b:bc:c8:68:
dc:c1:9e:33:15:81:c4:ad:f3:93:4b:0e:7e:22:1c:
b0:53:0a:93:87:22:49:33:95:53:26:ac:74:f2:aa:
0f:8d:da:a3:da:78:6f:52:bf:2c:05:d0:80:53:b3:
4e:a1:07:88:a4:9c:d6:96:1c:cf:f3:3a:4e:25:b4:
06:1f:eb:1f:48:65:35:dc:8e:ac:a9:a2:16:fb:94:
f0:0c:bb:38:93:18:7e:0b:60:ad:25:99:3c:70:3e:
26:dc:6d:1f:b4:d9:71:71:a8:f7:96:da:5b:88:22:
5e:0d:a2:07:ff:71:dc:50:1b:ab:06:6b:b2:33:62:
d1:49:d6:ef:f6:64:de:c0:3c:48:ee:6e:75:5c:fe:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:24:54:73:1D:66:35:F2:83:81:A9:61:F0:EE:74:DE:44:1B:4A:DF
X509v3 Authority Key Identifier:
keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/qSRUcx1mNfKDgalh8O503kQbSt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.58.0/24
193.28.7.0/24
194.127.198.0/24
217.197.164.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:e9:f9:e6:fb:8d:9a:d4:b5:8b:80:65:42:8f:27:42:c8:2d:
73:86:12:bc:33:c5:d3:da:f8:29:a2:01:52:9f:ad:0c:21:c3:
f8:16:45:ad:14:a0:d8:45:19:08:e9:7d:ea:9d:7d:72:a4:6f:
6f:ca:a5:e8:8d:ae:89:69:cd:e5:76:38:51:24:f3:d0:b7:0e:
af:1a:5d:b8:4e:d9:e1:51:18:44:aa:75:2b:c0:09:b7:94:94:
90:91:d2:53:c9:f9:4d:14:3b:99:fc:5a:81:7a:a8:17:d4:bf:
4d:eb:77:21:32:82:f3:80:6e:e3:c2:3d:e3:f0:99:73:05:d5:
fb:71:65:00:f5:b4:c5:55:c1:44:d9:3a:3b:fb:0f:c5:4d:11:
76:f4:d8:ef:d5:9a:2b:a7:38:7f:49:38:9b:e8:2a:ec:b7:4e:
e0:84:4b:cf:46:a0:5e:91:18:7f:7e:e3:e9:71:e6:af:7c:5a:
bc:9f:2b:b0:c9:4e:5f:4f:bd:e6:70:12:60:cc:5c:36:cf:26:
44:ed:3e:be:8f:5a:fa:30:35:db:68:fc:11:08:62:e0:d4:0b:
3c:12:d0:ae:fe:7f:52:b2:cc:0a:f3:e3:62:16:4b:bb:95:e1:
2f:a4:a1:3a:44:13:54:f2:76:05:6d:f6:e4:aa:c5:e5:db:c4:
ff:c3:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:46:00 2025 by rpki-client