Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/Quqkr7DGUJAZlQSsc4OdLvgM5O8.roa
File: Quqkr7DGUJAZlQSsc4OdLvgM5O8.roa (raw, json)
Hash identifier: iHt82QR12LPpEvZ7uiS/6X3yVLGKHgczSuxvhMOvlug=
Subject key identifier: 42:EA:A4:AF:B0:C6:50:90:19:95:04:AC:73:83:9D:2E:F8:0C:E4:EF
Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial: 019421B23986621C1847B6920C81C4F9199A
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/Quqkr7DGUJAZlQSsc4OdLvgM5O8.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206070
IP address blocks: 185.197.104.0/22 maxlen: 22
185.212.160.0/22 maxlen: 22
185.245.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:39:86:62:1c:18:47:b6:92:0c:81:c4:f9:19:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42eaa4afb0c65090199504ac73839d2ef80ce4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:0b:76:91:f0:4e:33:2a:86:c6:ac:53:f9:
a2:bd:19:38:74:fe:4a:a3:eb:3c:12:d4:c8:00:c5:
95:ca:a2:89:26:d6:37:45:92:92:f4:64:52:c6:e2:
77:68:19:24:72:9b:dc:50:2a:3d:6f:3b:d2:d1:de:
95:44:37:3d:df:cb:48:c9:ee:59:46:10:b1:05:ce:
9a:29:1b:7e:5b:87:16:9f:95:e3:ef:22:58:78:72:
ae:bf:3f:d2:55:81:cd:52:97:70:53:88:18:9f:be:
00:fe:ab:76:a5:2b:27:7a:15:4e:6a:ec:bf:e9:39:
82:2b:3d:66:2a:75:10:68:56:69:90:2f:b2:49:fc:
9c:b1:38:ca:80:48:fc:3e:27:53:b0:73:c7:f1:97:
e9:38:7c:bf:74:d1:3f:ce:01:ea:df:ab:c5:66:b6:
3c:ba:6d:6b:79:55:56:1e:3d:f4:43:04:61:e4:13:
77:73:fc:c4:f9:51:2e:bc:1b:ed:e0:5f:a6:b3:47:
54:4d:3a:43:8f:18:b8:66:6b:e2:d4:64:09:a9:e4:
b3:25:07:29:1e:be:aa:b6:c3:e8:16:92:fc:0a:5f:
07:b1:25:3d:b8:3b:a1:a8:83:df:a5:58:13:6f:c3:
b0:d7:db:7b:49:4e:ac:da:1e:b4:6e:ac:3e:72:d9:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EA:A4:AF:B0:C6:50:90:19:95:04:AC:73:83:9D:2E:F8:0C:E4:EF
X509v3 Authority Key Identifier:
keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/Quqkr7DGUJAZlQSsc4OdLvgM5O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.104.0/22
185.212.160.0/22
185.245.24.0/22
Signature Algorithm: sha256WithRSAEncryption
69:d5:89:35:f4:25:0e:c2:2e:85:cb:72:e2:1b:13:f4:09:3d:
2d:2b:96:ef:38:b0:d5:3e:bd:4b:cf:6c:28:79:31:a5:dc:7d:
eb:c5:7f:43:9d:f6:06:e3:78:bd:1d:d2:80:84:51:e4:3b:58:
99:11:30:1c:31:17:82:4c:09:c0:10:f2:75:03:a1:82:8f:73:
67:72:6e:38:ed:ed:2a:73:40:16:dc:6f:91:21:db:e1:a0:ee:
20:71:b4:7f:af:0d:e5:9f:a6:cc:54:56:1f:e5:af:ae:91:1d:
09:34:b2:14:e2:8e:9e:44:c8:44:40:d6:95:4d:82:19:94:12:
9c:2a:9e:c4:0b:7c:e0:bd:4c:bf:99:a5:8a:7e:b9:cd:f3:c2:
1b:82:39:0e:54:ab:d0:8f:11:f5:34:4b:2a:b4:12:1c:4f:25:
8c:28:5f:4e:89:19:8a:05:28:b7:95:9e:3f:7f:8a:44:d0:52:
c6:d3:cc:80:66:ea:0e:f6:2d:75:4d:84:95:09:86:ea:98:9f:
28:9e:1e:2d:3a:45:63:a6:77:58:01:c3:9c:7f:2b:b5:b2:d0:
3b:a8:ec:2c:da:53:0c:17:70:66:ab:41:fe:ef:75:0a:8b:b8:
8e:a8:36:93:34:0d:a1:42:e8:79:b3:3c:cc:be:01:da:b5:e7:
df:d1:de:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:00:40 2025 by rpki-client