Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/qhRts2cf4P5t7bHqjMHL0FdipSw.roa
File: qhRts2cf4P5t7bHqjMHL0FdipSw.roa (raw, json)
Hash identifier: eN2E4ioyfVg0a1c+Sdpb0/GA9hP7MUujM4zMFqNQiyw=
Subject key identifier: AA:14:6D:B3:67:1F:E0:FE:6D:ED:B1:EA:8C:C1:CB:D0:57:62:A5:2C
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019502F14AEBE0757EF05D5542AEDC8D6554
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/qhRts2cf4P5t7bHqjMHL0FdipSw.roa
Signing time: Fri 14 Feb 2025 05:32:02 +0000
ROA not before: Fri 14 Feb 2025 05:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214794
IP address blocks: 103.146.118.0/24 maxlen: 24
195.226.88.0/24 maxlen: 24
195.226.89.0/24 maxlen: 24
195.226.90.0/24 maxlen: 24
195.226.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 20:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:02:f1:4a:eb:e0:75:7e:f0:5d:55:42:ae:dc:8d:65:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Feb 14 05:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa146db3671fe0fe6dedb1ea8cc1cbd05762a52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:40:d1:ce:30:55:28:7e:f9:c0:a1:73:09:
7c:a3:aa:88:40:1a:a5:00:43:84:05:06:4a:44:a9:
f6:4f:ae:cc:2e:20:25:fd:5d:fa:27:0b:8a:0b:ea:
58:bd:28:2b:da:9a:39:20:72:d1:10:c5:a3:66:a8:
d4:47:5a:6b:11:42:79:4e:ed:03:28:52:a8:bc:6f:
39:90:ec:41:c4:7b:bd:64:87:e1:40:85:23:d0:66:
5d:91:8c:63:40:48:2e:4c:03:2a:d4:b7:2f:82:73:
bf:b3:cd:43:3a:19:a1:27:f4:1a:eb:0c:77:b8:21:
b0:ce:7c:18:b9:48:f1:37:82:ec:7b:de:f4:d0:b4:
c8:07:0a:c7:13:c2:33:4f:d8:90:d3:46:51:a0:9c:
a1:eb:9f:01:f8:68:fa:35:77:9c:8b:e6:d1:48:39:
6c:7d:9b:22:6a:92:c6:28:74:7e:b1:0a:05:19:96:
21:c9:bb:5e:f9:87:d7:5a:71:4f:a8:5f:c2:0f:11:
4f:73:ec:fe:d0:52:18:d6:f8:15:90:e0:d6:1e:93:
d7:3a:db:62:11:16:2a:39:f3:00:09:19:87:89:2c:
1c:77:6f:6d:af:ec:8a:d8:3d:d2:06:2f:cb:62:32:
f8:7b:21:15:26:d9:d6:0d:6f:e0:c5:a9:b9:1f:73:
d6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:14:6D:B3:67:1F:E0:FE:6D:ED:B1:EA:8C:C1:CB:D0:57:62:A5:2C
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/qhRts2cf4P5t7bHqjMHL0FdipSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.118.0/24
195.226.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:ec:3e:50:f3:10:a7:0f:4c:37:21:5a:81:ad:92:58:85:3a:
29:55:b0:8b:95:46:dc:c5:1a:8a:62:d1:2e:dd:d9:58:86:5a:
88:b0:77:36:ca:5f:35:89:e6:18:5a:ec:c7:98:21:d8:eb:8e:
af:1d:4e:65:a2:89:4b:06:58:46:b8:99:6b:f4:62:93:9d:87:
8d:33:4e:0f:d5:9e:04:7d:79:15:6a:95:dd:93:88:ad:1f:71:
69:47:30:7d:d1:a7:fe:ab:f0:78:6c:4a:b5:49:28:4a:81:81:
6c:a1:b3:8e:01:9b:82:4c:7c:54:24:09:22:c4:0a:96:7e:8d:
f8:66:d6:ad:dc:61:74:60:57:75:43:1f:12:11:91:78:dc:cd:
43:7f:84:43:7e:08:24:0d:0f:f8:2d:8e:4a:31:03:21:d3:62:
f0:57:21:0c:4d:bb:1f:f7:9c:50:d2:f3:0c:e1:2a:6a:cb:e7:
35:bf:5d:f1:ea:0b:62:f2:c5:81:98:14:fb:9b:2f:2e:fc:5d:
16:2a:45:8c:b7:76:06:96:7c:22:78:0c:fa:9f:f3:2c:84:43:
63:37:ab:06:fb:e7:31:d3:39:9d:0e:4e:1c:9a:4e:b0:f8:40:
34:2e:51:4e:56:76:90:0d:a4:f1:da:c0:ff:50:a0:2b:de:62:
26:78:4f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:26:23 2025 by rpki-client