Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/qQy4Ff0I-RFPojOvRzqGsJ28eg8.roa
File: qQy4Ff0I-RFPojOvRzqGsJ28eg8.roa (raw, json)
Hash identifier: KF47TtbdP48u62TLuuhtCoJv1ZVOVKI3VHzg8tm8ZpU=
Subject key identifier: A9:0C:B8:15:FD:08:F9:11:4F:A2:33:AF:47:3A:86:B0:9D:BC:7A:0F
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 01966766C4AC2A5710F41D0F3554968635B6
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/qQy4Ff0I-RFPojOvRzqGsJ28eg8.roa
Signing time: Thu 24 Apr 2025 10:45:10 +0000
ROA not before: Thu 24 Apr 2025 10:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216389
IP address blocks: 185.73.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:66:c4:ac:2a:57:10:f4:1d:0f:35:54:96:86:35:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Apr 24 10:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a90cb815fd08f9114fa233af473a86b09dbc7a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:4a:1d:23:fa:df:e8:cb:78:0b:06:ae:65:
12:54:d1:b1:22:5d:ff:56:dd:87:1d:d3:67:9f:af:
1e:62:04:9b:d8:9d:1b:77:f4:3f:32:c1:ad:fa:a8:
22:66:40:99:0f:4a:1f:e6:f3:95:7c:19:cb:fb:a3:
a1:3a:6d:0f:44:75:a4:51:94:ae:74:e8:44:45:a7:
7f:58:02:ba:ce:e3:ab:84:2b:b5:5c:04:a5:18:cf:
d5:a2:4d:85:10:08:ae:1a:8f:14:06:11:06:11:26:
5c:57:7b:34:6c:1e:1f:71:04:b5:89:b8:83:7b:b2:
92:2e:60:bc:ab:96:ea:13:23:fb:2e:76:15:30:b5:
fc:b3:cb:bd:a5:00:af:41:7e:25:44:bf:67:dd:c0:
e2:2b:7e:06:81:8d:81:f3:f9:d1:5a:bd:70:82:81:
7d:e3:d2:02:6e:25:2c:c1:82:ce:1d:03:04:c2:ce:
ac:16:9c:5b:d9:d7:13:ac:ad:5c:2f:63:52:83:18:
55:76:ef:5a:5f:f3:e0:2d:b5:1e:77:be:06:52:35:
81:3b:01:28:a7:09:59:c4:11:72:40:ca:80:a4:7b:
87:d1:a1:78:28:2d:1e:59:cc:a4:d6:e2:ec:79:bf:
19:95:9e:a2:36:07:7f:b4:1c:4a:d9:00:90:74:5d:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0C:B8:15:FD:08:F9:11:4F:A2:33:AF:47:3A:86:B0:9D:BC:7A:0F
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/qQy4Ff0I-RFPojOvRzqGsJ28eg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a3:92:31:cb:01:30:ea:7c:f1:66:d5:a2:5d:be:86:8b:61:
e4:b5:39:1c:8c:52:47:54:44:6f:1b:35:0a:0b:68:a0:24:41:
33:9f:85:e4:b5:14:e4:02:60:95:82:f0:d9:55:05:ae:e5:a6:
99:3e:3c:dc:03:96:a5:87:f1:5a:1a:40:8b:20:9d:8c:de:0f:
0c:fc:89:20:f2:5d:a1:c8:ba:d4:ce:51:02:28:37:d4:0c:b3:
ae:d2:f5:f2:f4:bb:73:f4:8c:dd:60:a7:c4:36:af:64:b7:a3:
d9:a2:04:1d:71:76:55:3f:f7:c8:77:07:11:6b:4a:fd:fe:1c:
02:e6:58:da:3d:53:2c:79:0f:d7:87:48:08:58:96:62:b0:fe:
14:d1:27:ca:73:fa:35:63:77:01:74:43:f4:f3:be:21:92:a3:
ba:6e:b0:07:4e:7f:cc:fc:f2:c0:3c:5b:b2:58:f1:00:5f:df:
3f:8d:b7:aa:45:4c:9e:b0:45:64:34:70:51:44:4e:15:a0:21:
41:be:a6:76:2e:13:b6:09:ed:07:47:b6:c7:8f:e5:ef:fd:70:
62:b2:06:25:ca:e1:e0:f6:97:84:20:28:99:44:f0:15:a4:2d:
15:38:84:c8:66:11:99:b9:9e:0a:3c:46:2e:17:c4:87:5c:4c:
d9:42:fe:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:48 2025 by rpki-client