Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa
File: QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa (raw, json)
Hash identifier: IjUEjsO2mbnzmz7vjeL8ZIzctqSaR82F+Efqt7aXfAU=
Subject key identifier: 41:79:29:AA:52:DE:1F:49:52:61:8D:27:6E:59:07:4B:36:8E:D4:4C
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 01942068549EBC413291525F8A5B2C94BDF1
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1836
IP address blocks: 185.38.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:54:9e:bc:41:32:91:52:5f:8a:5b:2c:94:bd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=417929aa52de1f4952618d276e59074b368ed44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:d4:cb:88:9f:3c:06:1e:2e:bd:dd:6c:e8:
96:e2:f8:12:0a:e7:79:d8:0c:9f:89:2a:7a:c0:c7:
32:20:93:f3:50:25:52:12:20:d1:89:b2:65:0c:1c:
4b:80:f6:7e:ff:56:f1:ca:b3:09:db:70:41:b2:c9:
9b:ba:43:6c:58:4a:71:71:49:8b:52:82:e8:0d:99:
68:11:dc:78:f1:13:17:14:9e:8f:17:29:c9:23:77:
5e:0f:b5:64:aa:78:01:7b:d6:57:1f:df:34:5f:78:
e8:b9:72:f0:5b:1a:08:03:86:9b:e8:a1:3c:1c:24:
8c:48:64:1e:78:8c:ac:4e:a2:7c:02:b4:eb:a3:43:
3f:4b:10:7e:7c:0f:0e:85:6c:15:ee:3d:5a:90:59:
f7:58:1c:30:3a:ae:13:7c:a1:7d:a9:86:a1:c1:7d:
df:70:dc:e1:b5:51:39:94:5a:cf:7b:9f:a4:72:3d:
1f:a1:84:ab:ea:e5:be:0f:21:f9:cf:80:23:01:39:
6c:ac:e5:b1:c8:16:58:83:98:ba:71:8e:67:00:53:
a3:4b:cc:9f:93:45:a2:77:b6:20:20:67:ce:ce:e8:
11:fd:24:af:e0:24:8d:54:a3:f6:26:98:b5:52:35:
6d:a3:53:b6:0a:5a:68:d5:41:92:79:47:1e:29:b3:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:79:29:AA:52:DE:1F:49:52:61:8D:27:6E:59:07:4B:36:8E:D4:4C
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.66.0/24
Signature Algorithm: sha256WithRSAEncryption
48:6d:de:e2:8e:8d:fa:4f:dc:a1:a6:a8:b8:b0:c4:e4:24:06:
07:75:0f:00:2e:26:3e:da:6f:70:d4:ff:64:2c:b5:b0:bd:cb:
39:d8:4c:54:58:4c:f3:5b:2a:ba:ac:3a:f9:8e:f5:31:41:c1:
a5:c4:c4:4b:3c:f0:45:0e:da:07:67:e0:de:d9:bb:4a:5b:fa:
a9:d0:2d:22:5e:24:f1:ce:41:57:0f:50:f4:a1:7c:6d:39:c9:
03:be:e9:55:f0:6f:d0:61:d1:93:b8:ba:63:61:ca:0d:37:b8:
04:94:af:42:83:de:1d:24:b8:9e:c6:bf:f8:0b:aa:a7:83:9f:
95:24:50:b4:96:99:00:e5:2f:e7:0b:b8:6a:3a:b5:0c:d9:f2:
7c:f9:61:12:ff:71:17:b8:e0:82:34:dc:0a:11:b5:a6:ae:a1:
bc:01:d3:44:f0:b1:84:0f:df:29:f5:07:93:33:dc:94:b6:27:
f4:07:5c:7e:a4:48:fc:34:db:36:ae:87:06:4d:60:3e:c6:21:
e8:e4:a2:4d:ba:80:a0:72:44:8a:a2:80:89:a0:f4:44:68:46:
2a:17:2f:8c:30:f3:99:88:de:a7:7b:34:ee:88:f4:68:18:1c:
a6:e3:6c:19:c3:46:b2:15:3a:89:2c:82:b4:98:01:dc:c0:0e:
b7:1c:77:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:08:56 2025 by rpki-client