Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/QsDL7x5oAgXjMeRoqEotR0YXQIw.roa
File: QsDL7x5oAgXjMeRoqEotR0YXQIw.roa (raw, json)
Hash identifier: z8q4Yda7b/Bhl+Mb3DcVE7Ved5TmFaoFf3dZxwrq/z8=
Subject key identifier: 42:C0:CB:EF:1E:68:02:05:E3:31:E4:68:A8:4A:2D:47:46:17:40:8C
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0194266B0D5C6C95196F72FB33A9A39399CA
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/QsDL7x5oAgXjMeRoqEotR0YXQIw.roa
Signing time: Thu 02 Jan 2025 09:48:57 +0000
ROA not before: Thu 02 Jan 2025 09:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204769
IP address blocks: 192.144.34.0/24 maxlen: 24
193.38.248.0/24 maxlen: 24
2a09:ff00:103::/48 maxlen: 48
2a09:ff00:104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:0d:5c:6c:95:19:6f:72:fb:33:a9:a3:93:99:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 2 09:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42c0cbef1e680205e331e468a84a2d474617408c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:b7:46:5e:6a:8f:c8:3c:70:38:b9:ca:05:
35:b3:61:3f:59:4f:40:86:86:a9:35:82:65:af:f0:
74:56:65:5a:89:51:61:10:e2:4a:82:42:4f:2b:98:
aa:ae:69:05:63:0e:53:a7:6a:f0:cd:10:c0:b3:c4:
5e:e3:91:9d:8e:d5:c8:2f:a4:e2:9f:6b:12:f9:59:
45:87:ad:c7:56:f1:fc:89:44:ce:66:72:a1:98:7b:
dc:35:3c:8c:46:60:3d:92:35:04:54:72:80:22:08:
a6:38:07:ac:98:e6:b4:58:53:d9:46:3b:85:92:43:
42:a1:0d:d9:cc:df:3d:95:66:8e:d7:4f:19:70:21:
47:19:46:8e:ff:79:ee:58:2e:e3:6d:16:4b:a8:67:
67:e2:80:95:db:bc:3e:f7:2d:f3:55:f9:c6:07:a6:
b7:24:de:ee:0d:bd:13:09:ba:67:57:f5:57:af:c0:
cd:74:a1:1f:45:11:8b:23:38:99:3c:d7:0a:b1:f4:
1c:4e:5c:1f:ef:47:33:38:cb:d6:47:09:6a:f5:bc:
1d:0a:a4:ed:8b:2e:f4:ac:78:a7:30:4d:fe:26:31:
d2:5c:a4:49:35:68:67:68:38:bd:e2:68:26:e4:94:
b9:55:49:19:34:3a:a4:83:d1:8f:46:e4:44:d5:0d:
81:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C0:CB:EF:1E:68:02:05:E3:31:E4:68:A8:4A:2D:47:46:17:40:8C
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/QsDL7x5oAgXjMeRoqEotR0YXQIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.34.0/24
193.38.248.0/24
IPv6:
2a09:ff00:103::-2a09:ff00:104:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3f:fa:83:52:7c:2b:60:82:02:e7:99:43:b2:4b:91:7e:22:d5:
c4:9c:dc:c5:3f:8e:0f:16:a0:3e:d0:d7:0a:ec:cc:3a:5b:22:
9d:84:16:c0:88:3f:76:ad:86:cf:e1:37:34:f9:ec:34:2d:29:
29:12:2d:00:7b:14:54:c2:46:d5:70:9a:a8:7f:ae:7b:f8:f6:
24:4d:2e:ce:3b:71:be:d5:1b:14:b0:2b:c6:61:91:8b:45:51:
5c:b2:65:5e:1b:ef:20:9f:e5:d5:dc:61:fb:32:ac:9b:c8:4e:
72:73:dc:9e:01:90:69:d5:cd:0b:7d:9b:74:00:e8:d9:29:a7:
ed:79:a5:8e:e8:ab:e0:ce:3c:4f:ea:98:9e:cc:05:bd:57:af:
8e:ca:4c:40:05:ad:7c:b3:99:57:b2:24:26:06:1f:86:79:ab:
ea:ae:f7:96:c5:f0:8c:ca:46:29:bc:47:40:fb:08:e2:40:df:
ae:56:d6:fc:07:63:a3:23:1a:21:31:ce:06:05:fc:c8:fe:08:
42:da:d0:34:b5:1f:aa:bf:2b:ca:4e:db:0d:1b:3e:28:51:10:
c8:b1:6e:51:82:a9:86:92:80:92:13:12:f0:fd:9c:bb:cb:03:
2f:62:2f:f6:95:d0:f2:40:3f:fb:0a:2d:0e:63:e0:90:aa:aa:
64:34:96:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:06 2025 by rpki-client