Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/0moQdaHf0K44uNdLnoszN_NLZl4.roa
File: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (raw, json)
Hash identifier: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=
Subject key identifier: D2:6A:10:75:A1:DF:D0:AE:38:B8:D7:4B:9E:8B:33:37:F3:4B:66:5E
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 019422FBEFE092D02BD56AF373FFFA100346
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/0moQdaHf0K44uNdLnoszN_NLZl4.roa
Signing time: Wed 01 Jan 2025 17:48:43 +0000
ROA not before: Wed 01 Jan 2025 17:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34309
IP address blocks: 37.156.68.0/24 maxlen: 24
185.146.234.0/24 maxlen: 24
185.165.170.0/24 maxlen: 24
185.247.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ef:e0:92:d0:2b:d5:6a:f3:73:ff:fa:10:03:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Jan 1 17:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d26a1075a1dfd0ae38b8d74b9e8b3337f34b665e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:28:74:8f:04:3f:f4:bb:44:bf:73:28:78:84:
a7:82:b6:25:45:60:b1:c5:7a:89:ec:d8:ff:5c:3c:
21:58:6f:9e:fb:ec:90:c1:2b:f0:07:b5:6d:fb:67:
8e:c8:23:09:5b:73:8a:32:f3:9f:26:91:d9:10:56:
19:6e:73:3c:e2:4d:f6:d4:44:45:50:c6:4b:87:9f:
a1:fa:7d:ba:99:99:5b:c3:a7:e4:e5:3a:a9:ba:a0:
15:bd:2c:f5:8f:9a:6c:6e:c0:d5:ad:51:15:ec:89:
13:22:6d:26:f2:2f:d8:d9:3b:cd:3c:bb:31:a7:8c:
51:a8:9d:3b:f2:11:a6:40:db:27:fa:5e:d5:4e:76:
71:96:ae:f9:b8:ed:d4:6b:9b:e2:f8:c1:24:d8:d4:
15:45:e5:c7:b6:11:8f:4a:f5:14:db:05:a4:ce:41:
3c:6f:c0:fa:9b:d9:b6:e9:a3:5b:26:ef:2b:d5:96:
2e:79:6a:a2:37:1a:10:2f:ca:76:7d:3b:26:00:d0:
be:87:30:c8:f5:c9:de:79:b6:8f:36:1b:df:45:cc:
4e:61:36:c5:87:7f:e5:85:06:50:86:97:3c:60:5e:
33:57:7a:fc:af:96:99:65:90:97:c7:fc:6c:d4:ad:
cf:40:18:7a:fb:4f:e8:f9:47:2a:92:e4:82:1a:9e:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6A:10:75:A1:DF:D0:AE:38:B8:D7:4B:9E:8B:33:37:F3:4B:66:5E
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/0moQdaHf0K44uNdLnoszN_NLZl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.68.0/24
185.146.234.0/24
185.165.170.0/24
185.247.226.0/24
Signature Algorithm: sha256WithRSAEncryption
24:93:20:b7:42:bc:6a:f1:34:3d:fb:b5:95:0b:0f:3b:e5:5a:
58:5c:39:75:3f:73:69:6d:b5:53:bf:64:47:b4:10:f2:33:5d:
79:c8:5b:34:bf:61:eb:45:d0:62:3d:2d:72:ab:93:9f:f8:d4:
50:63:88:15:ba:af:19:c5:b4:86:69:22:4f:19:af:12:37:7f:
4b:da:14:ad:d1:ed:d2:62:d4:c3:3a:fc:d5:42:04:70:17:07:
10:40:30:a3:dd:93:de:48:30:c5:34:f7:34:0e:a8:98:d5:4a:
22:ec:54:0c:be:bd:64:42:fd:73:c2:ed:3d:b4:db:88:d9:42:
a3:d1:69:da:41:85:76:1d:75:d3:3c:e0:47:47:31:a4:ef:ca:
0d:63:bd:c4:55:d2:eb:17:79:22:29:97:d1:90:83:e5:ce:72:
0b:b8:90:02:6c:51:90:11:9e:de:53:e5:c5:d8:00:1b:06:e6:
3c:02:23:af:63:e0:c5:ac:b3:10:0c:af:11:b0:dd:2c:42:b2:
be:33:8d:c4:b2:66:fc:f8:90:46:66:fd:03:a2:44:c3:a3:46:
4d:cc:a4:a9:ed:40:fc:01:40:cb:17:d1:2c:86:42:75:3f:9d:
da:6a:0c:d1:29:12:49:31:36:df:5d:20:07:02:af:cf:d2:ff:
8f:b1:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:40:50 2025 by rpki-client