Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/qs4pJOexn1Zfkfzcd1TjFYHIVOs.roa
File: qs4pJOexn1Zfkfzcd1TjFYHIVOs.roa (raw, json)
Hash identifier: FgzvVUL28rYxcaIK8c4YP+ZNrmGFqrNKlv9zOeTK/II=
Subject key identifier: AA:CE:29:24:E7:B1:9F:56:5F:91:FC:DC:77:54:E3:15:81:C8:54:EB
Certificate issuer: /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial: 01941F8C1DB4F0F48AEC36862985DE3E558C
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/qs4pJOexn1Zfkfzcd1TjFYHIVOs.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 80.89.160.0/20 maxlen: 20
80.94.208.0/20 maxlen: 20
88.83.128.0/19 maxlen: 19
2a00:6e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1d:b4:f0:f4:8a:ec:36:86:29:85:de:3e:55:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aace2924e7b19f565f91fcdc7754e31581c854eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:5e:c6:63:1f:e5:97:7e:22:50:b3:14:2c:
0a:5a:5e:03:92:91:36:bd:a5:fd:cf:34:f5:c9:c9:
e9:22:2c:aa:69:9a:ef:49:09:a8:60:9b:71:18:fb:
eb:7d:fe:0b:10:7c:f1:9d:e3:2a:ee:1c:77:5d:04:
bd:03:19:07:00:bd:bc:10:01:b7:98:bf:e5:2a:f3:
c7:d8:0b:e0:36:02:5c:5d:31:c3:13:97:2e:f3:1b:
6f:9e:a9:be:60:b1:fb:72:a3:de:a1:d8:db:f5:30:
5b:c1:ae:02:56:67:c7:d8:a5:59:e1:57:0d:d7:28:
8f:b7:c1:6b:39:8e:3d:6f:2a:c3:10:50:d0:2f:b6:
10:5c:41:f7:78:a2:d3:80:c0:91:05:df:d0:8a:c3:
10:13:65:bd:bd:98:c3:5b:9e:b6:77:12:14:b9:74:
18:45:ec:d3:0a:8a:b8:1b:72:ad:ed:92:05:3b:c6:
0d:83:e8:10:26:ac:76:e6:22:11:29:35:16:fb:84:
e7:c2:d1:59:84:be:a5:cd:9e:63:16:b6:37:ba:b8:
4b:22:51:97:4f:c3:ba:6e:98:5a:55:b3:21:e7:1a:
d5:c1:3b:66:b2:19:d6:c5:64:d3:4c:b9:4d:da:00:
19:d9:5e:e1:9d:a9:5e:18:1c:73:b6:a5:52:8e:6f:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CE:29:24:E7:B1:9F:56:5F:91:FC:DC:77:54:E3:15:81:C8:54:EB
X509v3 Authority Key Identifier:
keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/qs4pJOexn1Zfkfzcd1TjFYHIVOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.160.0/20
80.94.208.0/20
88.83.128.0/19
IPv6:
2a00:6e80::/32
Signature Algorithm: sha256WithRSAEncryption
63:3c:bc:a7:ce:cb:68:f3:9e:5f:0a:92:72:e2:e4:bd:0e:d4:
6b:80:53:27:b9:8b:91:99:8a:60:89:fe:77:2c:da:a7:68:fb:
7b:ea:81:4f:39:04:f3:ff:51:66:0c:e6:7f:f7:ab:c2:10:da:
c8:a4:a0:01:0b:6e:40:1d:a0:2a:f2:30:5b:ba:5b:7a:1e:0e:
11:bb:2d:ae:2b:9c:26:d0:8c:bd:31:82:39:0f:f9:2b:5d:ba:
39:d2:4b:4f:86:11:14:fe:a9:6d:9c:8a:1f:d7:cd:85:76:99:
53:bd:fe:7e:09:fe:9f:4d:83:ac:81:b8:f8:14:91:d5:9a:70:
61:a9:9a:19:df:95:91:24:9f:8b:bf:fd:19:41:ee:0a:d8:25:
98:01:46:bd:67:33:50:b7:eb:2d:bd:94:5f:87:b1:f9:62:d1:
b3:1e:0d:8f:a1:86:78:9d:ad:13:9c:67:8b:16:9d:dc:45:76:
0f:d2:90:50:c9:02:1b:b1:1c:05:34:86:70:11:b2:7a:40:2a:
32:17:bc:42:70:9e:e5:8a:d8:7c:3c:1e:b6:9d:5b:9e:6d:dd:
8c:a6:ab:ce:c1:8b:d6:e8:68:32:56:3a:3c:e3:b1:23:9b:51:
6d:fd:6c:6e:77:dd:51:1b:ea:5f:0c:b7:b3:fc:f3:db:07:4e:
4c:62:f1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:14:02 2025 by rpki-client