Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/QjtOOOK5pwQKBGSkxklhdFksgp4.roa
File: QjtOOOK5pwQKBGSkxklhdFksgp4.roa (raw, json)
Hash identifier: mBFc78U/Py4iQS+BrsEjELYMOU1hEEh06mY9X8mzPLw=
Subject key identifier: 42:3B:4E:38:E2:B9:A7:04:0A:04:64:A4:C6:49:61:74:59:2C:82:9E
Certificate issuer: /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial: 01942747624CB61B945BBA1BBD2F05BE69C4
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/QjtOOOK5pwQKBGSkxklhdFksgp4.roa
Signing time: Thu 02 Jan 2025 13:49:37 +0000
ROA not before: Thu 02 Jan 2025 13:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213052
IP address blocks: 185.244.162.0/24 maxlen: 24
2a12:4440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:62:4c:b6:1b:94:5b:ba:1b:bd:2f:05:be:69:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Validity
Not Before: Jan 2 13:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=423b4e38e2b9a7040a0464a4c6496174592c829e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:52:e2:2f:a8:12:2f:44:b3:c3:4a:5d:f9:f8:
bd:05:31:4b:c1:07:57:91:5c:88:2a:02:cf:b7:a5:
af:5d:ab:7f:71:63:a8:64:4b:4b:81:9f:be:77:e0:
b1:40:16:86:77:26:49:84:4b:0f:1f:b1:4f:81:1e:
4e:12:80:00:19:06:e8:bd:2c:bc:1f:49:c8:7e:26:
85:a1:99:85:88:03:b0:7e:ce:81:95:f8:96:5a:a5:
b9:be:1d:fe:da:6f:3b:58:bc:e5:23:a7:7a:3c:e6:
5a:27:5f:a9:43:85:d4:d4:c9:08:64:53:a7:b9:ab:
46:a2:59:8b:b5:3b:6c:7d:16:66:4b:18:d1:36:a6:
45:65:61:a6:d8:aa:f5:d4:e2:5f:41:9d:06:75:da:
01:88:de:95:32:91:ea:3c:63:27:10:f7:ad:20:bd:
fa:dc:fb:37:45:ad:8f:a3:d1:75:2a:ca:f5:0e:35:
25:c2:a8:cf:17:a3:3f:b6:5e:0e:6c:47:d8:f7:df:
e4:bb:c1:c1:d7:21:1d:d7:9f:8b:0a:ca:89:2e:20:
1e:03:fa:91:64:c8:50:b7:2c:91:96:40:2b:af:38:
c8:b4:b9:c0:53:a0:45:4c:3b:52:09:b3:bd:5e:5d:
4c:32:2c:30:77:22:83:ba:11:60:b5:90:3b:03:58:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3B:4E:38:E2:B9:A7:04:0A:04:64:A4:C6:49:61:74:59:2C:82:9E
X509v3 Authority Key Identifier:
keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/QjtOOOK5pwQKBGSkxklhdFksgp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.162.0/24
IPv6:
2a12:4440::/32
Signature Algorithm: sha256WithRSAEncryption
5b:ef:8e:ad:6e:6e:a6:f3:13:32:b0:89:82:d4:c7:bf:6d:cc:
45:bd:c2:b9:50:16:c9:2a:01:1c:05:88:8c:84:81:5b:18:b6:
e4:44:f7:40:89:52:76:53:8d:73:87:97:dc:fa:c9:af:29:c5:
55:fe:be:5b:62:08:ff:39:d2:54:47:5e:ae:46:ea:bb:3e:14:
8a:92:61:bb:18:73:4e:78:cd:b4:e6:bb:e4:50:ee:cb:70:bc:
bb:15:ea:31:d4:26:f9:88:cd:64:f3:7e:09:64:b3:87:d7:f7:
7a:8a:ab:b1:f9:e8:52:87:c8:e3:b0:7f:47:87:c7:46:38:3a:
ba:34:87:46:26:ae:a9:24:38:cd:4e:69:06:0b:15:b3:84:04:
65:eb:e9:dd:09:bb:55:d8:f7:cd:d4:ec:bc:d0:3f:e8:32:55:
8a:09:3d:b0:14:c7:10:08:1a:81:ca:06:43:23:99:66:02:74:
4a:53:44:83:ef:8e:84:0b:2d:5c:ae:2d:b9:5d:92:6f:03:ca:
c2:d1:8c:71:70:37:a6:b5:e4:3b:84:99:8f:ad:d9:5f:f5:03:
41:87:f7:20:71:c1:d2:38:28:03:79:8d:29:a7:56:03:95:a1:
75:da:a1:88:0d:94:5a:c8:3a:15:0d:ef:23:25:3c:0b:ab:03:
31:6b:a5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:49:22 2025 by rpki-client