Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Qvclw3p6GBEwfed15US4eMZDssA.roa
File: Qvclw3p6GBEwfed15US4eMZDssA.roa (raw, json)
Hash identifier: UWEN+eEsjGRM3fqsL5cJc7RQBWKq6NxYbqkBONZx9Ds=
Subject key identifier: 42:F7:25:C3:7A:7A:18:11:30:7D:E7:75:E5:44:B8:78:C6:43:B2:C0
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827F4B7BD5AF64AAB687B4B29CF4B0D
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Qvclw3p6GBEwfed15US4eMZDssA.roa
Signing time: Thu 02 Jan 2025 17:54:54 +0000
ROA not before: Thu 02 Jan 2025 17:54:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212669
IP address blocks: 178.239.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:f4:b7:bd:5a:f6:4a:ab:68:7b:4b:29:cf:4b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42f725c37a7a1811307de775e544b878c643b2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:1e:03:7a:ed:3a:54:74:8d:70:33:bc:60:
62:38:0a:28:dd:ba:40:fe:f5:25:ae:85:2b:d7:32:
53:83:42:46:37:00:22:c0:b5:9c:06:a9:df:66:d6:
a7:4f:73:48:65:e6:54:ea:34:9f:08:ee:a7:86:6a:
b8:6a:cb:30:c7:3e:e9:e6:b6:d2:84:bd:da:ae:f3:
37:a4:a2:9a:38:eb:ae:33:1f:62:3a:16:2e:6f:41:
86:06:82:58:60:49:5b:e4:a3:f4:a0:75:bb:f3:c0:
ba:02:c2:fb:65:a6:0b:3b:55:a7:5c:82:3d:fb:21:
cb:48:dd:22:65:25:6c:39:64:71:bd:18:d6:6b:b8:
af:82:f3:e9:4e:6a:64:45:f5:d7:46:50:a8:60:57:
af:1e:2f:8f:16:d6:84:19:ab:3c:6d:9e:a5:19:76:
3e:58:d9:70:19:89:7e:ee:92:8a:e9:a1:18:94:cd:
01:7a:77:25:24:5d:87:51:11:44:b2:58:05:f2:24:
13:df:a3:17:66:01:a0:f3:f6:c1:79:7a:07:e8:be:
9f:89:40:16:a1:78:a4:2f:2d:d3:34:95:00:01:df:
a5:5a:81:4d:c7:df:0a:bd:bc:68:78:11:68:e3:54:
a3:71:68:d3:96:dc:f1:d4:09:b5:bc:c2:75:52:16:
91:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F7:25:C3:7A:7A:18:11:30:7D:E7:75:E5:44:B8:78:C6:43:B2:C0
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Qvclw3p6GBEwfed15US4eMZDssA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.30.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:5f:f3:65:5d:df:6b:fa:a8:c3:62:de:b3:ac:16:86:37:84:
28:c2:6f:f4:68:15:dc:14:11:76:b6:cd:35:ad:f1:e9:74:fe:
69:cc:1e:53:5f:50:aa:31:07:d6:f8:9c:8e:bd:39:e3:fe:ac:
c9:62:ff:5b:7b:22:10:2c:4a:86:34:ec:5a:3c:66:cf:05:93:
12:eb:42:c1:aa:ed:63:5f:6d:f9:b3:51:7c:a9:b2:32:48:c9:
fa:15:8f:16:9e:3a:e1:5c:f2:4e:33:07:36:61:4e:8b:10:1a:
a7:14:9d:17:c2:64:e4:e7:e2:00:ca:72:28:3f:ea:d0:43:59:
e8:11:88:9b:c2:05:25:07:1a:18:2e:98:e8:fc:b0:73:84:48:
26:ca:0f:04:4a:67:28:0c:85:71:e2:d5:cc:b8:b0:87:b6:18:
c2:a2:65:b9:68:65:6b:55:3c:2f:9c:e3:6a:20:b1:4d:7f:84:
bc:96:e6:1c:e0:55:02:ed:c6:c3:86:3b:9a:a8:e1:b6:99:0b:
7f:8c:3c:65:a6:35:27:39:50:07:e8:2f:47:10:0d:90:8b:9a:
2c:a2:2f:1a:2b:d2:a9:3f:2e:9b:ec:df:72:0d:0c:ef:78:5b:
cb:41:48:2c:22:bb:cc:1c:8a:d4:01:b5:da:ce:f4:af:a8:c3:
54:89:92:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:54 2025 by rpki-client