Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/QZxCWcbwldfBbje2z7CU-dKZ2OQ.roa
File: QZxCWcbwldfBbje2z7CU-dKZ2OQ.roa (raw, json)
Hash identifier: z3N51ZQ5F8Gr4zs53/jXBVGssP0tmVUaOonBzkRtl38=
Subject key identifier: 41:9C:42:59:C6:F0:95:D7:C1:6E:37:B6:CF:B0:94:F9:D2:99:D8:E4
Certificate issuer: /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial: 01942747423FEB8764E0B9870F9DFAA53687
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/QZxCWcbwldfBbje2z7CU-dKZ2OQ.roa
Signing time: Thu 02 Jan 2025 13:49:28 +0000
ROA not before: Thu 02 Jan 2025 13:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201118
IP address blocks: 185.85.120.0/24 maxlen: 24
185.85.121.0/24 maxlen: 24
185.85.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:42:3f:eb:87:64:e0:b9:87:0f:9d:fa:a5:36:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Validity
Not Before: Jan 2 13:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=419c4259c6f095d7c16e37b6cfb094f9d299d8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:95:45:c0:06:60:a5:f6:94:a7:b8:e4:47:73:
cb:a1:d3:38:f7:e0:27:d4:09:05:77:19:c5:e4:b9:
d1:d5:8e:ba:2e:82:f5:ae:0c:1b:05:5c:15:36:38:
82:f3:58:b2:65:27:6c:ed:c1:c0:54:f5:d4:39:d6:
0e:cf:df:1a:4a:1d:ba:cf:3e:0b:b7:7e:1e:f1:3f:
f0:0d:dd:e1:96:60:d7:9e:2e:49:cd:e4:85:a2:46:
cf:b1:0e:6d:d3:4e:dd:34:e8:96:3c:02:a0:0a:88:
17:68:d9:54:b5:0a:50:f0:ba:94:67:34:c8:c4:95:
47:1a:a9:a0:fc:3b:f5:33:0f:71:6b:ac:f4:11:e7:
75:2c:c9:eb:ed:7f:55:46:fb:61:15:81:7f:82:55:
25:7c:11:ef:bc:b6:46:d7:17:88:5b:70:38:b0:16:
3e:44:cc:ec:78:8e:f4:48:16:d0:06:db:68:5a:df:
ce:b0:8e:10:5b:64:5e:29:83:0c:67:1c:37:1d:f9:
e5:e0:08:d5:f0:6a:b9:0d:d3:f7:c2:b6:e5:41:73:
b6:54:22:a2:5d:f1:ac:40:d0:dc:b0:09:5e:d1:8e:
91:e6:ed:d8:d6:b2:2c:0b:69:1d:62:7a:e2:7a:bd:
71:d0:8b:25:7c:84:bd:7a:07:59:0c:fd:fb:60:06:
c5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9C:42:59:C6:F0:95:D7:C1:6E:37:B6:CF:B0:94:F9:D2:99:D8:E4
X509v3 Authority Key Identifier:
keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/QZxCWcbwldfBbje2z7CU-dKZ2OQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.120.0/23
185.85.123.0/24
Signature Algorithm: sha256WithRSAEncryption
52:12:76:ee:e4:76:8b:1a:df:9f:26:e7:2c:c1:1c:4e:93:41:
a3:15:ac:d2:11:b8:1a:8e:f8:f3:f2:b5:5e:b0:96:9a:78:96:
7f:5e:64:26:24:11:cf:8e:ea:95:03:59:8f:c2:b9:a4:50:96:
ee:00:78:51:0a:6c:7b:0b:ed:63:cf:90:8e:0a:7f:99:6d:e9:
11:35:b1:af:9a:5b:e7:e6:47:f8:00:06:f5:84:10:23:26:43:
86:b3:7e:17:80:8a:ff:72:c9:b6:ef:21:b4:63:33:f7:d8:26:
33:74:bc:55:14:76:4c:8d:a0:81:9e:ed:6b:13:a8:06:20:4d:
65:3d:0f:57:24:fb:8f:3a:b6:77:09:ab:45:e7:65:bc:3f:24:
e9:17:06:74:20:8c:57:9b:dc:d7:24:15:b5:73:ac:17:4e:5c:
7b:fb:06:f5:8f:a5:da:5a:dd:19:66:b3:8d:77:3f:b1:b7:1c:
2a:a7:62:94:97:2b:68:fd:72:66:9c:83:4c:e6:9a:50:92:9f:
5f:d5:76:2e:96:7e:54:75:45:20:b0:f7:35:46:df:86:30:f7:
4d:8e:9c:f7:f5:fa:21:6b:47:cc:91:91:f9:c9:2c:8c:b5:4b:
14:67:c1:52:34:ad:a5:eb:c5:dc:fe:69:e1:81:5d:ce:94:af:
a1:45:ee:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:35:47 2025 by rpki-client