Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/CQ0HG1zWD48ox6-boezAROBkH6Q.roa
File: CQ0HG1zWD48ox6-boezAROBkH6Q.roa (raw, json)
Hash identifier: zcrpqTakOim+S6H2s99YrSuzoN8a0ByVl/l7V7jze5I=
Subject key identifier: 09:0D:07:1B:5C:D6:0F:8F:28:C7:AF:9B:A1:EC:C0:44:E0:64:1F:A4
Certificate issuer: /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial: 019422FAFD587D1217201AAB5E0FB0357BDF
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/CQ0HG1zWD48ox6-boezAROBkH6Q.roa
Signing time: Wed 01 Jan 2025 17:47:41 +0000
ROA not before: Wed 01 Jan 2025 17:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9144
IP address blocks: 79.99.92.0/24 maxlen: 24
79.99.93.0/24 maxlen: 24
79.99.94.0/24 maxlen: 24
79.99.95.0/24 maxlen: 24
195.5.179.0/24 maxlen: 24
2a0b:c4c0::/30 maxlen: 30
2a0b:c4c0::/32 maxlen: 32
2a0b:c4c1::/32 maxlen: 32
2a0b:c4c2::/32 maxlen: 32
2a0b:c4c3::/32 maxlen: 32
2a0b:c4c4::/30 maxlen: 30
2a0b:c4c4::/32 maxlen: 32
2a0b:c4c5::/32 maxlen: 32
2a0b:c4c6::/32 maxlen: 32
2a0b:c4c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:fd:58:7d:12:17:20:1a:ab:5e:0f:b0:35:7b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
Validity
Not Before: Jan 1 17:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=090d071b5cd60f8f28c7af9ba1ecc044e0641fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:19:d7:ae:0e:6f:15:6a:b1:fc:57:b7:3a:
52:d4:1a:25:e4:1d:cf:c0:ce:9b:7e:8f:36:1e:a4:
1b:9d:10:67:d0:35:14:45:92:98:52:74:dd:e7:c0:
2f:26:0d:cf:e4:58:3d:45:cb:a7:3d:1c:08:39:33:
e0:30:22:de:70:79:6d:17:ce:25:b6:b6:89:d0:17:
0b:19:c5:92:42:24:99:82:a0:95:a8:26:70:0a:34:
36:12:5e:9d:e1:a9:bd:1f:63:25:f1:9b:bc:32:1d:
21:a5:00:c1:7e:2c:83:3f:b4:04:13:6b:60:ba:5f:
cc:37:38:77:02:8f:73:8f:e8:7a:67:fb:20:29:ae:
78:0a:c0:27:3c:e4:aa:80:da:2e:24:50:51:fe:ec:
d7:a4:19:c7:e5:14:5e:43:45:24:4c:50:8e:36:6c:
f0:6a:84:5d:99:64:5c:1c:a6:2d:fb:5a:41:33:ea:
35:f8:53:ac:eb:a9:97:e0:4d:b4:89:2a:b7:12:f7:
a4:12:c7:95:35:91:10:37:76:09:53:f0:1b:93:e2:
64:c2:a8:9a:9a:be:65:98:bf:d2:ee:77:b4:99:29:
bd:30:f4:e1:af:3a:dc:e0:cb:0b:1e:43:29:23:c7:
44:5a:ad:f0:21:2e:fc:23:ae:2e:8b:cc:ab:d4:8d:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0D:07:1B:5C:D6:0F:8F:28:C7:AF:9B:A1:EC:C0:44:E0:64:1F:A4
X509v3 Authority Key Identifier:
keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/CQ0HG1zWD48ox6-boezAROBkH6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.92.0/22
195.5.179.0/24
IPv6:
2a0b:c4c0::/29
Signature Algorithm: sha256WithRSAEncryption
77:b2:ed:17:16:5f:76:3c:2d:6e:93:93:59:70:20:b0:72:e4:
73:06:59:9e:11:92:28:d3:7c:e1:1d:12:e4:7b:e4:de:b2:ca:
6c:ef:7f:31:30:3f:ab:8b:d1:d4:c8:56:e8:a0:76:6b:91:e3:
4b:33:86:5b:8c:0a:00:7f:30:50:4c:3c:66:ab:6a:0b:68:6b:
52:68:82:41:7c:73:40:d5:d6:a7:84:e1:e9:f7:85:d9:41:45:
73:fa:ad:dc:67:02:83:a1:fd:d0:18:b8:91:e1:fc:b7:20:f8:
5d:ae:96:b0:7c:63:cc:76:95:2d:1c:a4:a4:d3:77:2d:5a:6f:
e9:8c:72:15:98:e7:52:e7:87:ad:d7:1f:d6:28:0b:2f:99:6a:
11:9c:74:ea:b7:01:04:e9:90:d1:f7:a2:68:35:e1:f4:f0:29:
4d:bb:d6:99:b9:5b:1f:26:ec:b8:ff:82:ff:4c:b5:be:8e:d3:
cc:51:24:4d:05:12:89:eb:bc:76:a8:4f:19:94:28:3a:5a:60:
32:f5:4d:96:23:13:f4:1d:38:e9:5f:21:79:c9:4f:a1:16:cf:
81:83:bb:53:8f:eb:3a:17:34:51:bf:7e:b0:ea:5a:5e:f7:9c:
43:e9:d1:f2:1b:bb:e0:27:ff:89:bf:c8:5d:e7:0d:0e:0d:9b:
97:69:d4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:03 2025 by rpki-client