Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/QjltdHgB4W_2eDHH-42Rsn7haU4.roa
File: QjltdHgB4W_2eDHH-42Rsn7haU4.roa (raw, json)
Hash identifier: GyEMXz3VqmF7vL4u7u/PEu1jMNaIBLH5FqjmQMneOuk=
Subject key identifier: 42:39:6D:74:78:01:E1:6F:F6:78:31:C7:FB:8D:91:B2:7E:E1:69:4E
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 01966CC06568C19B2A3700955294B6E560AF
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/QjltdHgB4W_2eDHH-42Rsn7haU4.roa
Signing time: Fri 25 Apr 2025 11:41:10 +0000
ROA not before: Fri 25 Apr 2025 11:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204576
IP address blocks: 185.75.221.0/24 maxlen: 24
2a0d:a640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:c0:65:68:c1:9b:2a:37:00:95:52:94:b6:e5:60:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Apr 25 11:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42396d747801e16ff67831c7fb8d91b27ee1694e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:69:71:af:71:9d:55:14:82:fa:9d:3e:04:
ec:6a:4f:a8:dc:6e:77:61:ad:58:7d:11:59:91:1e:
fa:b9:33:8f:23:65:c1:27:a9:00:ea:59:c8:5e:93:
ff:a3:a3:08:53:64:bf:18:99:0a:84:ea:a5:aa:9b:
18:3b:5d:e9:e2:90:38:18:0c:86:bd:ed:8b:be:7b:
79:29:21:d0:d4:e2:96:e7:75:b6:f5:94:8c:b0:a0:
ab:99:3b:82:52:65:54:1d:97:4f:fd:9e:40:e9:77:
16:90:eb:2a:db:1b:55:0c:fa:a4:98:b3:1b:7f:13:
e5:eb:66:8f:6f:b1:e1:96:1b:ea:af:fb:75:c9:ec:
bd:ab:08:68:cc:5d:cb:8c:89:a2:75:c5:f6:37:1e:
94:74:45:1f:cb:5c:3c:e5:f6:4c:23:25:f2:61:ea:
30:b2:5e:e4:dc:13:0c:3a:cd:91:3e:7b:5c:42:e0:
13:6a:7b:c1:a9:d1:56:94:13:b8:fd:e1:13:49:36:
24:82:47:b0:69:13:52:f9:68:21:89:ec:29:d9:63:
80:4e:14:13:b9:dc:69:5d:da:98:16:dc:22:b6:be:
3a:cc:dc:df:72:22:6c:62:95:17:5f:45:7d:73:08:
3e:33:00:bc:12:d0:74:d4:63:3c:ad:17:7c:1e:ec:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:39:6D:74:78:01:E1:6F:F6:78:31:C7:FB:8D:91:B2:7E:E1:69:4E
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/QjltdHgB4W_2eDHH-42Rsn7haU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.221.0/24
IPv6:
2a0d:a640::/29
Signature Algorithm: sha256WithRSAEncryption
13:16:a2:af:1d:ab:8a:fd:ee:53:ed:6d:1e:36:94:b0:00:1f:
a2:9e:c2:af:61:0a:2e:b7:1a:db:f1:ba:69:b3:60:ab:61:bc:
23:51:c5:36:03:e0:df:1c:ad:01:15:e1:7a:67:0c:f3:06:0a:
2e:2a:eb:22:60:1c:b0:2d:e9:c8:77:6f:7c:df:32:7f:86:b1:
8d:b5:3e:46:dc:73:2e:89:67:af:01:d4:14:ba:b7:1f:ea:f8:
8f:0c:89:93:86:bf:4f:30:63:b6:64:73:59:a4:2f:86:e7:de:
c7:cd:82:c8:fd:b0:5e:bd:ed:6d:45:e0:18:63:47:f6:b5:0d:
18:c2:f5:99:df:7c:c5:43:3a:30:a3:75:d5:dd:6e:6b:64:7c:
e1:80:f0:3f:b6:33:b7:28:51:1d:7e:8b:57:ac:00:b8:e8:11:
bd:08:11:3b:26:fe:49:b0:8b:2e:27:0e:e3:4b:62:ef:cf:9b:
c1:ac:62:40:08:2d:73:17:26:3c:76:84:0c:3f:36:95:e8:5d:
8f:a0:7f:74:eb:78:2b:ad:9e:04:2f:51:5e:f1:87:b0:ed:b7:
26:04:49:c3:9f:3c:2f:86:cf:e5:ed:c9:22:ea:e8:1f:0d:31:
77:c7:9b:b7:ab:9e:25:d1:85:1a:e1:76:87:cc:af:89:f8:43:
ee:9e:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:12:35 2025 by rpki-client