Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/4KqmJoEVUd9bhY-ntnaMTkNmA44.roa
File: 4KqmJoEVUd9bhY-ntnaMTkNmA44.roa (raw, json)
Hash identifier: LLo6nOWCS1mxlNIUMzouZjN4HwCv7i5lI/hb4nBjcBQ=
Subject key identifier: E0:AA:A6:26:81:15:51:DF:5B:85:8F:A7:B6:76:8C:4E:43:66:03:8E
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 0194266B7917C7CC2A44C2810A0F4542ED3C
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/4KqmJoEVUd9bhY-ntnaMTkNmA44.roa
Signing time: Thu 02 Jan 2025 09:49:25 +0000
ROA not before: Thu 02 Jan 2025 09:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59441
IP address blocks: 185.165.41.0/24 maxlen: 24
185.165.42.0/24 maxlen: 24
185.165.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:79:17:c7:cc:2a:44:c2:81:0a:0f:45:42:ed:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Jan 2 09:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0aaa626811551df5b858fa7b6768c4e4366038e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:b7:0a:f0:f6:40:2f:14:84:d6:d2:5a:b3:
a7:da:07:53:e7:4c:64:0c:20:4d:6d:b5:ba:86:9e:
e2:c6:e3:e8:30:73:42:9f:e7:67:75:ba:9c:6e:a2:
70:4f:57:e0:f2:9b:7f:fb:13:4d:92:d1:08:63:6e:
e4:7b:ea:5c:aa:0c:d5:ff:9f:02:9b:32:5c:7e:d3:
1f:f1:25:86:0d:bb:f8:2d:9a:40:d1:65:d5:c0:9a:
fc:c8:c2:8d:59:f1:b6:59:21:44:aa:01:89:a1:94:
18:65:7c:06:4f:0a:2e:98:df:fb:49:5e:b8:2d:f0:
90:5c:26:c7:e7:eb:0a:11:18:91:6d:3d:e9:86:a1:
3a:ec:00:c0:66:ba:16:c3:b3:52:64:b3:94:e1:45:
e0:53:7f:87:38:c1:4f:de:04:c4:8b:9c:d5:40:0f:
ee:31:eb:43:2f:d3:ef:86:61:c2:bd:3e:8f:ea:73:
ed:35:dc:1f:5c:ab:a4:ce:0f:bf:91:a9:6b:99:a4:
53:3b:d0:1f:65:cc:f2:1a:1c:b8:18:e5:49:0c:ad:
23:4e:d2:3d:19:55:b8:f6:7d:d3:0e:be:4c:aa:4d:
44:a5:62:33:56:03:8e:7c:45:13:3d:aa:38:31:54:
46:93:64:18:26:0d:3e:9f:5e:84:23:b9:66:3b:43:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AA:A6:26:81:15:51:DF:5B:85:8F:A7:B6:76:8C:4E:43:66:03:8E
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/4KqmJoEVUd9bhY-ntnaMTkNmA44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.41.0-185.165.43.255
Signature Algorithm: sha256WithRSAEncryption
05:d9:83:a4:e7:ba:18:c1:90:bb:66:46:85:76:ba:e6:a2:38:
62:a1:6c:bb:37:69:75:87:f0:79:be:3a:48:10:38:a7:72:92:
b2:15:81:d5:94:48:85:78:13:ff:2a:e6:9d:58:47:d0:aa:c0:
73:1f:f4:5e:24:a8:bf:de:54:16:86:a6:90:f1:f2:bb:54:9f:
e6:bc:5e:ad:c7:9d:7a:8a:10:b4:de:fc:ff:9b:71:30:02:2c:
ff:90:8d:ad:3e:62:bc:d3:dd:16:71:5b:e7:7b:1c:5b:de:b1:
76:45:5b:81:a9:5f:3d:58:bd:b8:3b:50:2f:32:2d:75:d5:2d:
63:87:ea:31:29:2f:e2:41:3c:e3:10:fb:fd:4b:1e:7a:db:25:
3c:41:05:6b:5a:ef:ea:42:77:8b:0c:cb:d2:36:d9:aa:30:ef:
3b:07:0d:2b:1c:c3:d7:35:71:d5:7a:92:da:1c:b7:86:b5:5f:
27:88:3c:4a:89:5c:46:0e:56:ad:b5:d5:7f:b8:ad:5c:f3:8a:
85:5f:9d:33:f5:8a:63:86:bb:a5:5d:94:75:11:88:c4:e8:72:
4a:89:b0:59:3e:52:22:6a:1d:53:82:a2:4b:8e:38:14:b3:5b:
26:23:ab:b9:96:d1:7b:6b:95:c5:31:4b:ee:1b:3e:0f:ef:e9:
1b:a3:26:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:48:58 2025 by rpki-client