Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Q6LsWReGKNutfUTah7q4q5FgWaw.roa
File: Q6LsWReGKNutfUTah7q4q5FgWaw.roa (raw, json)
Hash identifier: T83YUz+DzOmdLi9tCj2KAPIuSjnQxbyJScLlQv1En54=
Subject key identifier: 43:A2:EC:59:17:86:28:DB:AD:7D:44:DA:87:BA:B8:AB:91:60:59:AC
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019630A323D073F93D194F9217F4D5B4EFCF
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Q6LsWReGKNutfUTah7q4q5FgWaw.roa
Signing time: Sun 13 Apr 2025 19:31:59 +0000
ROA not before: Sun 13 Apr 2025 19:31:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.228.0/22 maxlen: 24
212.116.229.0/24 maxlen: 24
212.116.236.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.244.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:a3:23:d0:73:f9:3d:19:4f:92:17:f4:d5:b4:ef:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Apr 13 19:31:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43a2ec59178628dbad7d44da87bab8ab916059ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c0:88:40:51:6b:cc:53:cd:b5:83:49:00:c7:
7a:03:a3:51:48:84:f9:c8:f2:ed:5c:f1:75:bc:60:
7a:c3:45:bb:29:a8:99:4a:c5:1b:d7:61:6d:42:9e:
5d:34:36:f2:5d:57:c5:d3:63:d9:1e:79:40:b1:d2:
57:20:e1:64:f2:50:01:57:c9:f6:f9:1b:ca:5b:1c:
1a:87:5d:dd:0a:e2:78:6a:7c:14:3d:47:dd:61:d2:
ee:07:65:4e:28:93:3f:c2:28:73:b2:7b:77:6d:0c:
5b:2e:fc:84:2b:cd:ee:ca:fb:84:1c:0b:9e:f4:2b:
35:ba:a3:b7:ca:eb:a9:ed:a5:79:3b:77:e9:ac:81:
ca:93:6a:5c:52:7e:22:f2:ca:d7:c1:cf:3c:a9:02:
9e:a8:3f:23:e1:78:b4:43:e4:62:a2:87:79:9a:a6:
de:00:33:f0:7c:05:fa:c1:4b:33:a0:fd:4b:0f:b4:
ba:11:e7:86:d8:88:43:98:52:76:0b:51:0a:b4:ed:
34:8c:2b:3c:87:54:b6:64:71:1c:c6:67:f1:b1:cf:
b4:05:dc:57:88:a6:ef:70:83:fd:74:01:49:4d:54:
81:4a:b4:89:bf:a6:6f:d9:0b:45:c0:a0:2f:a4:66:
e1:38:de:6e:3e:a0:54:20:5e:63:4b:20:91:eb:ed:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A2:EC:59:17:86:28:DB:AD:7D:44:DA:87:BA:B8:AB:91:60:59:AC
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Q6LsWReGKNutfUTah7q4q5FgWaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0-212.116.231.255
212.116.236.0/24
212.116.238.0/23
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
66:cc:6c:c9:78:c4:ae:10:a9:24:74:f3:15:9e:c1:7a:ce:3d:
9e:c6:eb:0b:5c:09:33:84:09:fa:80:11:cb:f2:e0:42:7a:68:
97:dc:5b:18:50:48:8d:38:89:d2:4d:0e:4a:96:80:4d:0e:b1:
1c:6f:77:f0:34:82:ea:68:c7:d0:4a:c6:f9:23:05:ff:4f:9a:
22:a6:1b:a5:2c:5d:6c:37:8f:d1:45:2f:77:64:01:66:52:15:
b7:fb:35:07:45:e6:1a:77:70:c1:38:76:30:de:db:d1:32:7a:
eb:d8:da:c7:f6:2e:4f:73:4d:e0:93:30:59:c3:8f:a1:3b:b0:
b2:72:df:a5:d0:de:b1:1c:88:ea:0c:9d:6e:fa:ad:66:67:35:
56:f4:ec:23:15:77:c3:cc:bf:d2:16:a3:b9:bf:04:3e:9b:e8:
cd:fd:93:45:0c:21:46:b3:88:f1:c3:16:a8:fe:4b:52:36:e3:
86:c2:7a:a0:f4:d9:aa:67:ea:35:23:be:82:3f:6c:4e:25:8c:
c4:36:2d:94:42:01:d6:77:54:c2:f1:7b:cb:4d:e0:9f:6f:a9:
53:f2:64:54:9d:4c:56:c7:ef:06:50:9d:3f:9e:6e:ef:9a:28:
ec:db:16:76:f7:c0:fa:97:28:0c:61:00:b2:41:6f:07:4c:61:
ae:a9:90:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:53 2025 by rpki-client