Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/qA60hfzIHo5QRJ_hLhIVl9p2lrY.roa
File: qA60hfzIHo5QRJ_hLhIVl9p2lrY.roa (raw, json)
Hash identifier: nlkxnu+zDhTWvt5yhhFwQ8By8uFeDVCXgbF+abS8Yvg=
Subject key identifier: A8:0E:B4:85:FC:C8:1E:8E:50:44:9F:E1:2E:12:15:97:DA:76:96:B6
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019427B68291A7A89F04CF0E24D94B0D258D
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/qA60hfzIHo5QRJ_hLhIVl9p2lrY.roa
Signing time: Thu 02 Jan 2025 15:50:59 +0000
ROA not before: Thu 02 Jan 2025 15:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206448
IP address blocks: 192.109.243.0/24 maxlen: 24
192.109.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:82:91:a7:a8:9f:04:cf:0e:24:d9:4b:0d:25:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 15:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a80eb485fcc81e8e50449fe12e121597da7696b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:50:40:17:03:af:4e:d6:2d:f1:fb:bf:3c:fa:
55:8c:06:1d:af:16:25:4b:15:06:9a:84:5a:0c:28:
6b:cb:23:1d:6a:da:ea:86:d1:4a:e0:07:ea:a9:7b:
bd:5e:1d:69:2e:17:e1:cd:47:7d:d3:78:98:7a:ee:
5b:60:f6:91:99:d0:e6:bb:02:ec:7a:19:87:1f:cf:
62:a0:29:b1:d3:74:06:22:13:41:41:ee:de:f7:3e:
bf:fa:7a:ab:51:7c:fc:db:cd:8b:42:d9:40:3b:53:
03:35:e7:e6:f2:ca:08:1e:84:11:c9:03:0a:23:d1:
fb:80:1a:ab:42:72:52:41:4e:5d:4f:a9:6a:e8:74:
57:77:45:c4:42:76:0d:33:af:66:52:f3:16:80:5b:
41:26:78:bc:68:2e:d9:4c:7d:e1:95:95:0f:63:62:
03:48:9d:f7:1d:1d:82:25:44:56:96:fb:9d:7b:8a:
66:15:b4:9a:03:87:01:fd:2f:6c:49:21:ea:b6:b4:
67:d1:06:ab:9a:4b:cd:7c:c8:1f:2c:59:29:72:12:
66:b6:71:ba:cb:7f:f5:09:ee:b1:7e:9c:4f:95:35:
47:7d:b7:13:cf:98:5b:b7:20:b6:99:91:2d:7e:b6:
68:8c:a7:c2:34:cf:30:fd:7b:9d:b0:38:27:66:5a:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0E:B4:85:FC:C8:1E:8E:50:44:9F:E1:2E:12:15:97:DA:76:96:B6
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/qA60hfzIHo5QRJ_hLhIVl9p2lrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.243.0/24
192.109.250.0/24
Signature Algorithm: sha256WithRSAEncryption
79:3f:c7:64:6f:c8:4b:3d:ea:16:86:c3:14:f3:c2:f1:42:bd:
21:a6:03:43:9d:78:45:68:b6:09:af:d2:83:85:94:2c:58:3f:
7b:4c:e1:3e:61:5a:ae:4d:fb:2a:2c:f4:54:8e:69:d8:23:5f:
7e:c0:97:d3:d2:b7:cd:f9:cf:dd:bf:82:8e:4e:b6:76:8a:c8:
d4:b6:35:09:4f:9f:45:0c:7c:08:ec:e7:a5:14:70:36:05:94:
7e:b9:83:15:8d:c1:9e:fe:6d:06:c1:3c:88:4e:b9:40:17:ed:
c8:14:27:21:0c:7e:21:a8:f5:5f:9a:37:08:8c:cd:07:d1:cb:
4a:f7:7d:14:c7:5d:4d:0d:f3:ad:50:79:fa:e7:38:97:ca:63:
62:e4:05:c1:89:b3:50:e5:d1:86:9f:bf:98:cb:98:1c:d6:86:
0b:e8:ff:2f:1b:46:b3:26:29:99:50:62:c4:e8:89:dd:2d:73:
74:97:b4:cd:13:9d:84:fe:e5:be:39:d8:48:6b:a7:e2:7a:c7:
26:34:44:da:c4:ce:5b:d0:42:62:68:2e:b1:62:29:3d:9e:66:
ea:84:0b:66:a0:44:36:67:2a:2f:ca:15:0e:e8:3e:20:f7:14:
93:de:25:e8:bd:db:4c:d6:dc:b1:c3:1d:c8:6b:d4:d0:92:79:
ca:75:d1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:15:42 2025 by rpki-client