Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Q4-WTo5cCXeD-w1sheBv_gjD51g.roa
File: Q4-WTo5cCXeD-w1sheBv_gjD51g.roa (raw, json)
Hash identifier: YXa3b/p8YeGWH77UlVMEIh9uzLUPpaYfJzmKNDjEbns=
Subject key identifier: 43:8F:96:4E:8E:5C:09:77:83:FB:0D:6C:85:E0:6F:FE:08:C3:E7:58
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 01942444AD0E36E09047371F57460C642235
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Q4-WTo5cCXeD-w1sheBv_gjD51g.roa
Signing time: Wed 01 Jan 2025 23:47:48 +0000
ROA not before: Wed 01 Jan 2025 23:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207810
IP address blocks: 185.167.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ad:0e:36:e0:90:47:37:1f:57:46:0c:64:22:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=438f964e8e5c097783fb0d6c85e06ffe08c3e758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:df:23:2a:7c:3c:a9:17:fc:18:d2:d8:9c:
e9:8b:d1:3c:96:64:69:81:5b:08:29:6a:af:1d:1d:
f7:ca:58:ac:cc:df:b8:59:ea:78:01:3e:70:96:85:
36:63:78:46:7f:07:a5:fa:71:05:25:60:43:50:d2:
29:63:5a:47:3c:22:17:b2:98:40:e1:02:47:f4:0e:
3c:38:3e:97:b8:51:67:ff:d4:b2:3b:b7:26:1e:48:
7d:6b:18:82:ce:08:96:88:b9:e7:cd:1e:f4:79:45:
2f:08:32:c4:93:74:ab:e8:f6:82:50:bd:48:69:6f:
42:57:65:98:d5:7b:ae:a3:cc:5e:30:7c:a0:c6:8c:
db:d7:32:53:6c:fa:68:fa:f6:24:b8:d6:3b:5c:28:
a9:df:fe:e1:93:14:61:53:22:0c:66:12:94:1f:0b:
24:6d:bd:f2:f3:b7:ed:26:ab:2c:c3:f6:93:5b:5c:
78:e1:ae:1e:34:4f:be:dc:a4:a8:f0:9a:f4:ed:63:
21:1f:01:95:75:b1:7f:51:b8:4b:48:00:ef:03:96:
d5:60:af:44:78:b2:d6:f0:1f:98:ac:ff:76:74:a4:
64:3d:12:59:f1:19:4b:48:c9:60:ad:b9:0c:e1:d1:
6e:5c:82:f4:3f:04:15:18:80:e8:3b:ce:86:54:2f:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8F:96:4E:8E:5C:09:77:83:FB:0D:6C:85:E0:6F:FE:08:C3:E7:58
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Q4-WTo5cCXeD-w1sheBv_gjD51g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.217.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d4:57:4f:fc:5f:b9:79:cb:f2:18:2f:87:df:e4:96:fe:e0:
2c:d5:cf:62:ae:99:89:ef:cd:f3:92:18:fb:04:1e:99:cc:dd:
7f:9f:c2:88:3c:e0:09:4d:ba:6b:95:18:3d:df:00:f5:1d:bc:
40:99:42:99:77:4e:77:5e:e0:fa:b9:59:15:46:85:a9:cb:40:
8c:30:bc:d4:77:b5:cd:a5:72:57:ce:15:44:2e:50:9e:78:6f:
bc:9c:cf:01:df:58:60:d9:2a:4a:a9:a9:87:ca:ac:97:ea:ff:
47:ec:bd:8b:b3:48:18:5a:33:b4:d0:3f:a1:05:42:18:ce:dd:
a3:2a:65:ac:78:94:c3:35:11:50:34:28:f7:84:9e:a6:16:11:
59:52:03:8b:cb:9c:65:2f:73:da:90:0e:65:e2:8d:40:cb:6f:
5d:dc:0a:02:e8:87:36:00:58:29:f3:8a:b5:bb:c6:64:b4:fc:
4e:72:db:91:ee:e3:7f:ef:8f:5d:cb:6a:15:fc:46:41:da:8e:
ef:47:11:80:ff:01:5a:e7:3d:15:b8:10:a7:b1:16:dd:16:48:
38:17:71:3d:92:ff:bb:cc:44:7f:e3:b4:f5:02:60:15:a5:81:
5d:23:c9:93:62:e6:f2:36:3d:d3:51:5c:cd:c2:8a:9d:6d:58:
15:8c:fb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:35 2025 by rpki-client