Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/i1vQfq5K6A-H06YMbg-F_fjtfl4.roa
File: i1vQfq5K6A-H06YMbg-F_fjtfl4.roa (raw, json)
Hash identifier: +8kYxsIrdCv4MUOM8YLp4u35KK9tvU6LHvc0dzsNKRw=
Subject key identifier: 8B:5B:D0:7E:AE:4A:E8:0F:87:D3:A6:0C:6E:0F:85:FD:F8:ED:7E:5E
Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45
Certificate serial: 01942445776F17C3F399FBAA0126311006A6
Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/i1vQfq5K6A-H06YMbg-F_fjtfl4.roa
Signing time: Wed 01 Jan 2025 23:48:39 +0000
ROA not before: Wed 01 Jan 2025 23:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49175
IP address blocks: 185.138.84.0/24 maxlen: 24
185.138.85.0/24 maxlen: 24
185.138.86.0/24 maxlen: 24
185.138.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:77:6f:17:c3:f3:99:fb:aa:01:26:31:10:06:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45
Validity
Not Before: Jan 1 23:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b5bd07eae4ae80f87d3a60c6e0f85fdf8ed7e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:8c:e1:c9:41:c1:6c:41:1d:0e:25:0d:0b:
c9:ad:a8:0a:3c:3f:56:f5:85:ce:a2:d4:33:b7:78:
d8:f3:89:a7:fd:99:79:b0:51:9b:95:4e:c3:4d:2d:
5f:1c:01:71:9c:ee:36:72:0b:e7:c2:49:69:c6:c0:
b2:1a:9e:fd:c1:51:b5:d6:e5:de:2a:c0:61:4c:92:
c8:b6:93:5e:8c:ca:55:88:f7:ad:1c:75:91:36:ba:
91:12:00:8a:1c:a2:21:af:33:1e:cc:c1:a1:8a:c0:
ff:02:49:e7:6f:a2:a7:ad:5a:2a:c3:54:98:a0:44:
8a:16:ae:7d:f1:91:94:03:99:f4:6c:3c:1e:3f:45:
82:d4:df:89:45:e7:7b:bd:c8:d3:6f:fd:5d:9a:2e:
6b:11:b5:03:97:14:ec:a0:05:c4:5d:21:ea:f8:fd:
3e:50:3b:83:e1:39:c7:61:77:d6:b5:e5:90:56:55:
fa:d9:7c:e6:56:27:0d:61:a9:1b:70:4b:79:1f:14:
bb:7c:a5:d7:1b:a8:ac:74:90:92:41:14:28:5d:a2:
de:55:13:70:a0:33:36:f7:3a:6b:bc:b9:6b:57:7f:
73:2b:e2:ec:92:2d:ef:e0:13:27:ac:cf:eb:33:9f:
17:3a:84:d2:4b:7d:c2:89:84:89:23:f8:78:10:19:
c8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5B:D0:7E:AE:4A:E8:0F:87:D3:A6:0C:6E:0F:85:FD:F8:ED:7E:5E
X509v3 Authority Key Identifier:
keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/i1vQfq5K6A-H06YMbg-F_fjtfl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.84.0/22
Signature Algorithm: sha256WithRSAEncryption
79:df:a1:0f:0d:e4:25:07:fb:f5:91:54:c6:ba:99:23:13:03:
0f:b2:d8:b6:6d:f6:db:69:6a:07:d1:a2:47:d3:a7:fb:65:0a:
1e:62:65:c7:4f:d3:48:73:81:5b:75:11:0f:1b:a7:f7:e4:7f:
6e:d0:63:c3:c6:0d:1e:5e:93:e4:ae:68:e7:0f:ad:a3:a9:bf:
03:51:88:c9:6d:bf:cd:57:d1:80:81:00:e3:06:d1:3e:b9:39:
25:23:27:ad:4b:5b:6f:2c:89:d6:6d:75:8e:07:9d:ee:4a:a6:
38:d0:88:eb:db:f8:1d:91:38:d4:e5:2a:1b:2c:b9:98:ea:b7:
ce:d3:4f:42:93:50:77:42:cf:88:ed:23:53:8a:77:c1:a3:ea:
56:10:7c:a9:cf:81:54:33:26:81:6e:9c:c1:69:79:d3:57:65:
11:62:30:f4:e0:bb:66:73:5a:6e:63:3f:ba:84:87:53:d2:61:
7f:24:27:af:a1:13:3c:63:7e:fb:9e:b1:8f:8b:7a:1e:30:4b:
15:88:1f:47:51:95:c3:bc:47:c1:f8:61:05:e7:53:62:f6:58:
5a:7c:00:a9:9a:c5:8a:14:dc:cf:bf:a1:5f:91:19:12:21:6e:
b8:ed:96:43:86:6c:ca:af:26:56:5e:d6:8b:a7:d2:65:7d:81:
d8:cf:ec:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:55:13 2025 by rpki-client