Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa
File: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (raw, json)
Hash identifier: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=
Subject key identifier: 75:24:E3:03:80:A7:01:FD:B5:23:13:F8:C5:78:E4:FE:36:B8:37:E4
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 0194266B5AAB1A11FE7A73D444DA61EF4634
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42649
IP address blocks: 178.239.48.0/20 maxlen: 20
185.24.248.0/22 maxlen: 22
185.149.56.0/24 maxlen: 24
185.149.57.0/24 maxlen: 24
185.149.58.0/24 maxlen: 24
185.149.59.0/24 maxlen: 24
185.195.92.0/24 maxlen: 24
185.195.93.0/24 maxlen: 24
185.195.94.0/24 maxlen: 24
185.195.95.0/24 maxlen: 24
2a0a:56c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5a:ab:1a:11:fe:7a:73:d4:44:da:61:ef:46:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7524e30380a701fdb52313f8c578e4fe36b837e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:88:3e:21:e6:55:53:95:80:6e:02:5c:51:
d2:44:28:ee:dd:e8:b0:5b:ac:60:14:78:f3:44:59:
df:51:30:00:10:71:c3:6c:e4:0b:11:0b:98:46:d3:
38:76:03:ab:41:af:d0:57:79:fc:cb:49:cb:14:93:
8d:89:02:cb:70:02:1a:4e:26:3d:8a:d8:f4:f5:97:
3c:42:9e:ff:d3:44:49:25:0d:bc:63:16:55:38:c0:
44:a1:32:b0:41:48:77:2a:29:6b:45:5b:73:62:f5:
27:8a:8a:22:4b:01:91:80:66:14:c1:48:2b:ef:81:
53:c6:95:d5:32:4f:10:54:dd:1b:7b:4d:06:cd:57:
d8:d1:54:0f:7c:00:48:a0:49:45:fa:be:81:28:e0:
57:35:9d:5d:2d:e0:66:96:36:a8:cc:bf:d8:b5:f6:
a2:0d:68:ca:94:5a:6b:ce:00:a7:bc:fe:72:70:72:
e3:4d:f3:4d:27:86:f7:96:c7:60:58:34:ad:ff:23:
41:60:b9:d5:93:e4:0b:80:c7:cb:00:25:a6:27:52:
22:f0:84:d5:fa:0b:0c:05:dd:d0:4b:ea:c5:e5:74:
1d:48:28:db:5b:13:53:76:31:f9:a3:d8:78:d3:e5:
20:86:57:cd:b3:8e:51:c4:54:69:9a:4f:d7:e5:cd:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:24:E3:03:80:A7:01:FD:B5:23:13:F8:C5:78:E4:FE:36:B8:37:E4
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.48.0/20
185.24.248.0/22
185.149.56.0/22
185.195.92.0/22
IPv6:
2a0a:56c0::/29
Signature Algorithm: sha256WithRSAEncryption
b1:00:f7:06:74:f6:d3:fb:91:d7:af:a1:5e:9e:2a:ff:32:a6:
93:a6:11:ad:52:27:93:15:d4:b6:d1:63:c8:c7:a0:03:2f:d9:
ad:6d:44:e7:aa:41:0f:ed:d0:88:41:40:0a:90:b2:41:fc:5f:
c2:a7:45:42:67:f1:91:27:38:a7:c7:f2:a7:87:d1:be:25:d3:
6c:14:28:82:af:0f:9d:cd:db:a8:f9:a1:e3:5d:68:c2:f6:75:
71:ff:f9:0e:c7:b2:4d:a4:de:49:ce:ec:03:ce:87:aa:42:cd:
95:e8:d3:f0:9f:ec:9f:e8:63:32:90:6e:d4:a3:eb:0a:d3:23:
0a:e4:34:cd:c2:e6:4f:5c:c1:4e:7e:4c:50:45:83:ad:c8:c2:
28:1d:45:75:a0:3e:73:2e:4f:50:d5:b6:63:69:3f:a2:80:e7:
1a:ff:e7:20:a5:d2:65:b4:ad:b7:c8:ec:7c:9a:50:56:84:7d:
09:d1:e0:eb:28:73:46:56:7b:21:cd:05:7c:7a:ab:c1:79:4f:
2b:25:35:ae:db:75:ce:e4:88:55:08:a8:11:b0:21:e7:c0:29:
22:c5:e3:d5:74:70:d4:06:ba:c4:29:17:31:77:71:4c:3b:b4:
3b:0a:ef:4c:f0:66:a7:32:84:53:1b:f5:da:03:da:65:f9:44:
d9:ae:19:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:08:03 2025 by rpki-client