Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qHgODJM7GIAavJBQK2Br39EPPu4.roa
File: qHgODJM7GIAavJBQK2Br39EPPu4.roa (raw, json)
Hash identifier: /KqYoGCM/l/7wno26B5/q/zKeLiBn4D9rNVn+l+8mDQ=
Subject key identifier: A8:78:0E:0C:93:3B:18:80:1A:BC:90:50:2B:60:6B:DF:D1:0F:3E:EE
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0195D23394B9E44CC9CD58FD1D36B4AE66B8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qHgODJM7GIAavJBQK2Br39EPPu4.roa
Signing time: Wed 26 Mar 2025 11:25:50 +0000
ROA not before: Wed 26 Mar 2025 11:25:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49408
IP address blocks: 193.235.60.0/24 maxlen: 24
194.103.23.0/24 maxlen: 24
194.103.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:33:94:b9:e4:4c:c9:cd:58:fd:1d:36:b4:ae:66:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 26 11:25:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8780e0c933b18801abc90502b606bdfd10f3eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:e6:f6:80:dd:e9:db:91:95:c5:94:bb:e9:
ef:de:7c:3f:65:d3:1e:55:34:55:95:65:16:45:76:
47:53:67:11:dd:73:52:93:84:bf:fb:9f:84:7f:83:
c0:5e:af:70:88:32:e0:5e:85:5b:1c:af:3b:69:b4:
4b:ab:08:12:ca:0e:a8:3a:1c:b4:08:b5:b8:6c:ed:
7c:48:03:4a:49:35:7d:10:b5:17:77:d6:c2:22:f3:
42:45:1a:f5:57:7a:34:61:d3:04:1b:d2:9c:49:80:
2f:c5:c2:33:0d:03:bf:3c:ca:8d:3f:f6:96:90:54:
33:10:ff:92:a2:85:7d:aa:a6:82:f4:f9:49:42:18:
64:b4:0f:e0:94:02:ce:d4:60:be:91:72:ea:c8:b1:
55:db:e7:ee:10:2b:33:a7:f3:97:2f:32:e7:af:dc:
7d:aa:de:4f:54:35:7e:b7:ae:ac:dc:26:52:a3:52:
9a:43:2f:a4:62:51:59:d2:46:d0:60:e1:ce:c1:14:
af:dc:10:f5:f0:0c:5b:3b:7e:5a:11:de:32:76:1c:
67:ab:0b:15:03:8a:ad:ff:45:d9:79:aa:84:6d:b4:
36:ea:19:7b:01:0b:b5:af:39:7b:4c:06:41:38:c6:
37:1c:91:70:13:f4:fe:35:8e:19:dd:1b:f6:e7:9f:
6d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:78:0E:0C:93:3B:18:80:1A:BC:90:50:2B:60:6B:DF:D1:0F:3E:EE
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qHgODJM7GIAavJBQK2Br39EPPu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.60.0/24
194.103.23.0/24
194.103.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:4c:6b:58:d5:98:32:ad:de:74:27:ae:74:c3:a8:f1:b5:29:
2d:bb:b8:c4:81:44:93:dc:4f:74:d8:b5:8b:36:c9:9d:c7:be:
be:c7:8e:9f:42:f2:dd:2d:32:2b:df:06:cd:2a:60:85:ee:6c:
b7:87:5f:f4:bb:77:5e:b8:a1:af:48:eb:81:20:d4:d8:7e:52:
99:66:12:e3:ce:b2:84:ad:b2:f5:c3:1a:28:ba:48:6a:46:16:
f7:e1:12:f3:da:ae:b9:41:97:6b:51:8f:d9:7a:9e:41:41:39:
7f:b5:fe:37:34:cf:b2:eb:a9:69:5e:b1:ac:5c:7b:26:4e:5f:
71:8a:db:0c:d1:b2:ac:f1:61:51:d3:48:a8:45:ea:04:2c:48:
f1:9e:06:f3:a8:9c:78:df:0b:e3:25:e2:67:ce:06:3d:eb:7b:
08:34:c8:49:53:8d:87:84:a3:be:e1:fb:66:a1:a3:19:67:31:
21:af:74:a6:94:54:63:79:a2:1c:0f:4c:ef:a1:d3:e9:6c:48:
f3:3b:fe:10:a5:21:1c:ca:ed:d9:26:f6:34:4b:02:bb:60:fb:
2c:ae:2a:c8:a0:24:4a:36:48:ec:fc:1f:9a:c0:5b:d3:c4:44:
bf:1c:19:1a:64:d5:07:c1:7d:98:7e:53:29:f5:ca:e7:4e:56:
aa:67:81:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:50:51 2025 by rpki-client