Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa
File: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (raw, json)
Hash identifier: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=
Subject key identifier: 0E:45:91:43:A0:05:8C:5B:FB:AC:54:31:82:9F:3D:78:35:B0:67:34
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 0194258F67B3F2CF9E2447626426099AEC81
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa
Signing time: Thu 02 Jan 2025 05:49:02 +0000
ROA not before: Thu 02 Jan 2025 05:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34766
IP address blocks: 194.59.216.0/22 maxlen: 24
194.99.44.0/23 maxlen: 24
194.99.46.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:67:b3:f2:cf:9e:24:47:62:64:26:09:9a:ec:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Jan 2 05:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e459143a0058c5bfbac5431829f3d7835b06734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:5a:72:b0:9a:a7:f9:82:50:ae:9f:2b:98:
88:29:d0:16:2c:6f:e2:0a:77:45:b0:7f:37:4d:f5:
29:d6:63:ef:17:27:42:d7:c6:b6:da:a6:95:9e:58:
2c:f8:00:59:e0:a5:84:47:d6:ac:e1:18:31:1b:be:
d7:a3:48:5f:1e:6e:15:4c:df:e7:86:89:9b:53:2b:
0f:53:ab:8e:5e:00:cc:b4:d1:1a:40:1a:e8:98:14:
a3:d9:8e:af:f8:6f:d3:2f:1d:82:20:e3:67:18:c7:
a1:f8:c3:44:7a:fc:43:f7:6f:a5:11:2c:88:a9:08:
fc:82:ad:68:03:86:d6:21:d0:c3:aa:ca:ca:cc:11:
1e:44:0a:89:6d:e8:e8:92:35:ce:5d:b9:78:40:a1:
42:0d:63:42:b6:3d:f0:d9:aa:30:7f:42:a5:fc:dd:
bb:41:f7:6a:a3:d3:47:0c:0c:e6:c4:5a:64:c6:0c:
25:b8:94:bb:e1:19:e1:f4:62:c2:c6:d1:ab:dc:16:
c3:c2:4a:ae:79:3a:6a:39:a9:0f:b8:a3:fa:23:72:
e2:2b:05:70:be:ed:9f:bf:01:2d:e4:5c:bf:b0:fc:
fb:68:06:2b:6a:ef:ec:3c:08:a7:48:59:6d:5f:dd:
c0:d8:8c:13:83:1e:76:1a:57:f8:3e:0d:c9:d4:da:
89:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:45:91:43:A0:05:8C:5B:FB:AC:54:31:82:9F:3D:78:35:B0:67:34
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.216.0/22
194.99.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:ed:33:89:e6:2e:65:11:2d:d8:06:44:4e:4c:cf:05:9d:9d:
50:28:07:7f:70:75:b1:81:22:0d:c3:ee:62:e4:d2:cc:cd:db:
9c:7f:32:8c:ea:83:73:a8:f5:7f:36:c9:96:25:67:eb:a0:e2:
9c:9f:78:75:fe:1d:86:1a:ac:73:c3:ea:cc:bf:3b:c2:99:eb:
af:60:70:f4:98:1f:96:0d:f6:02:52:2d:61:4f:2c:81:07:e5:
9e:72:48:3e:61:c6:6d:80:c7:61:80:c8:62:6f:39:ff:59:90:
1f:b2:69:11:d3:a4:83:06:6a:7d:81:ff:f1:4b:85:13:19:9b:
62:4b:f7:34:cf:52:1b:60:6e:1b:eb:be:26:5a:6b:09:eb:ab:
c4:37:4b:be:64:df:db:f4:62:eb:64:0e:3e:2b:e8:8a:7a:db:
62:5b:f2:48:95:8d:8c:92:1e:af:8f:47:3d:b9:0e:2d:1d:1d:
79:7f:38:d6:1f:86:95:a2:74:6c:b7:c2:f5:d7:a6:4f:be:a3:
94:3d:e1:91:e6:ac:04:92:3e:41:af:e8:4f:a7:67:c6:e2:ec:
17:aa:fa:e2:b2:36:34:83:12:66:d3:9d:b1:21:55:64:c4:ac:
fe:e9:49:67:4e:a3:3b:ef:45:f0:14:42:38:bb:63:33:03:fe:
59:8e:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:39 2025 by rpki-client