Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/LQ6wK8IFy4F-UbZLfDTlA9_1t1k.roa
File: LQ6wK8IFy4F-UbZLfDTlA9_1t1k.roa (raw, json)
Hash identifier: pYYrgfYcpybt5MppLbeq0XNpkLdX1IktWNqSxEFW5DQ=
Subject key identifier: 2D:0E:B0:2B:C2:05:CB:81:7E:51:B6:4B:7C:34:E5:03:DF:F5:B7:59
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0196342AC25E82E8D396D1D8B05B00806EA9
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/LQ6wK8IFy4F-UbZLfDTlA9_1t1k.roa
Signing time: Mon 14 Apr 2025 11:58:59 +0000
ROA not before: Mon 14 Apr 2025 11:58:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9002
IP address blocks: 31.128.32.0/22 maxlen: 24
37.233.82.0/23 maxlen: 24
37.233.84.0/23 maxlen: 24
37.233.86.0/24 maxlen: 24
45.130.212.0/22 maxlen: 24
77.73.233.0/24 maxlen: 24
77.73.235.0/24 maxlen: 24
77.73.238.0/24 maxlen: 24
83.222.20.0/23 maxlen: 24
90.156.254.0/23 maxlen: 24
91.218.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:2a:c2:5e:82:e8:d3:96:d1:d8:b0:5b:00:80:6e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Apr 14 11:58:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d0eb02bc205cb817e51b64b7c34e503dff5b759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b0:31:2e:27:21:17:cc:e4:77:48:99:e2:d3:
89:8f:63:1a:6b:e5:da:72:3a:d3:67:33:ec:72:10:
1a:a6:e6:b9:a9:62:e1:9f:b2:ef:65:8f:52:b9:0b:
13:77:8e:d3:84:aa:29:a0:09:f9:7e:33:a0:d3:6e:
41:c9:b1:86:5c:41:31:c6:4c:65:b8:4f:ec:8d:ea:
13:57:c6:e2:5a:f8:0c:3a:51:c0:dc:a7:f2:9c:36:
fb:83:6a:ff:66:b4:f4:73:2c:17:92:62:05:85:8b:
be:3c:93:fe:2c:02:85:55:32:c7:27:6b:d4:be:1e:
2d:71:1c:db:c8:f5:7d:14:83:be:20:3f:86:fe:f2:
94:5c:46:72:d8:69:f6:a8:64:99:a6:e0:a9:b9:5a:
ee:fa:b0:56:60:41:80:03:2e:ca:ba:81:64:af:ae:
9a:bc:73:c9:18:24:69:06:f5:83:0e:bb:ac:07:1b:
48:f5:5e:36:91:09:60:a6:41:b1:af:f2:31:3f:23:
59:e1:e4:31:ae:b4:f5:66:45:62:80:54:d6:1d:f8:
10:f0:46:f7:9a:4d:fe:09:a1:b1:2f:1d:f6:a1:43:
60:23:b9:92:a5:40:3c:5c:90:fc:19:17:c5:05:db:
b9:02:60:d2:2c:c1:e1:aa:dd:e8:b1:7f:f5:3c:49:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0E:B0:2B:C2:05:CB:81:7E:51:B6:4B:7C:34:E5:03:DF:F5:B7:59
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/LQ6wK8IFy4F-UbZLfDTlA9_1t1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.32.0/22
37.233.82.0-37.233.86.255
45.130.212.0/22
77.73.233.0/24
77.73.235.0/24
77.73.238.0/24
83.222.20.0/23
90.156.254.0/23
91.218.142.0/23
Signature Algorithm: sha256WithRSAEncryption
99:b0:30:86:f0:41:fd:59:8a:36:83:e4:44:d0:bd:a8:a0:00:
49:ed:f1:b4:59:e8:ec:e3:04:6b:e1:15:1f:5b:54:a1:ae:8c:
af:cd:e3:a9:b6:8b:e2:6a:19:09:0f:e7:f8:57:86:45:84:56:
4a:f2:54:15:ea:9c:52:d6:f5:43:03:7d:8c:08:eb:b8:35:7c:
c3:5d:29:a4:35:e8:e7:c8:71:19:dd:54:43:3c:7a:89:3a:20:
76:44:4f:49:8a:b1:fe:8e:cf:5f:da:1d:ec:d5:4a:3f:31:f4:
5b:b6:be:26:fc:86:53:61:f0:19:fe:6c:ca:4e:89:2a:c3:96:
da:fb:97:4a:fd:55:d5:a3:8a:5f:6a:eb:1e:23:29:27:d4:c9:
e0:ad:ed:8f:ba:7a:34:a6:71:8a:8c:86:45:07:7d:ff:41:db:
9e:fb:77:40:12:d7:41:ab:62:2d:fa:5d:16:70:06:15:45:68:
d7:ba:b6:dc:d5:5c:14:b8:7c:e5:51:17:bc:03:92:1f:24:b3:
49:36:49:5e:96:fc:4c:e4:f6:ef:10:6f:d4:21:3d:8f:18:6e:
44:40:cf:7c:a5:9c:78:f5:33:d8:c0:a2:5b:02:aa:16:f2:19:
47:b6:5c:53:0e:1f:ba:31:7d:a0:a4:66:b5:eb:20:e5:0b:d6:
d6:19:8f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:33:01 2025 by rpki-client