Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/q2_sbJziOr7rwxyhvKWnkNjMans.roa
File: q2_sbJziOr7rwxyhvKWnkNjMans.roa (raw, json)
Hash identifier: 0BH7DATsPfSUKJPP/TZdwOG931UfHO+OV4ftBhPZrwY=
Subject key identifier: AB:6F:EC:6C:9C:E2:3A:BE:EB:C3:1C:A1:BC:A5:A7:90:D8:CC:6A:7B
Certificate issuer: /CN=2880474a96161dde2942cfb9f1856c2ffc880904
Certificate serial: 0194EEC7852C0F3AF247E2531907EB0D642B
Authority key identifier: 28:80:47:4A:96:16:1D:DE:29:42:CF:B9:F1:85:6C:2F:FC:88:09:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/q2_sbJziOr7rwxyhvKWnkNjMans.roa
Signing time: Mon 10 Feb 2025 07:34:00 +0000
ROA not before: Mon 10 Feb 2025 07:34:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206389
IP address blocks: 193.3.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ee:c7:85:2c:0f:3a:f2:47:e2:53:19:07:eb:0d:64:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2880474a96161dde2942cfb9f1856c2ffc880904
Validity
Not Before: Feb 10 07:34:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab6fec6c9ce23abeebc31ca1bca5a790d8cc6a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:92:f0:6f:4b:cd:1f:ee:85:ee:b1:e2:cc:
f5:6d:d4:f0:4d:24:6b:ae:b2:52:32:20:86:ba:ce:
23:0f:05:9c:bc:75:31:9a:50:a9:0e:97:aa:0b:ca:
94:72:fe:49:b3:52:5a:9b:b3:6c:04:19:4e:0e:7a:
4a:10:41:0f:cc:b0:98:94:28:91:c1:f8:5e:e7:6d:
07:24:7d:e7:2a:09:95:bd:da:91:d7:73:a5:f1:ec:
4a:0e:f5:32:6f:63:5f:0a:e7:b8:b7:15:64:94:84:
d8:31:1e:16:fc:21:f8:32:79:8b:18:9c:57:25:aa:
77:01:9e:3a:a5:e1:79:e3:3d:75:f4:36:a0:41:0e:
28:c7:37:46:c7:82:bc:01:27:1b:5c:df:0b:53:b7:
de:22:40:3a:c9:6e:94:64:a5:09:16:db:60:0f:5e:
af:d4:d0:2e:47:0e:f3:73:a4:76:84:32:3c:ba:18:
e9:05:59:71:64:16:73:50:11:de:db:02:44:6a:ba:
40:a9:d0:9c:8c:bb:6d:e7:c3:6b:24:8c:5d:a6:36:
5b:21:a4:84:cf:2e:d7:b0:f0:52:24:aa:34:f1:ba:
17:9d:f4:7b:81:5e:46:7c:23:82:39:d9:37:36:74:
1a:7c:5c:a6:e2:9e:bd:70:9c:ad:21:72:e2:52:07:
3e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6F:EC:6C:9C:E2:3A:BE:EB:C3:1C:A1:BC:A5:A7:90:D8:CC:6A:7B
X509v3 Authority Key Identifier:
keyid:28:80:47:4A:96:16:1D:DE:29:42:CF:B9:F1:85:6C:2F:FC:88:09:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/q2_sbJziOr7rwxyhvKWnkNjMans.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.27.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f4:14:59:a3:06:fc:e7:81:2a:a6:34:55:cf:60:26:58:a7:
c3:14:48:84:cd:4e:5a:08:86:68:c8:9d:81:85:2c:f4:4b:cf:
7f:8f:be:04:35:3d:12:34:5a:da:34:6c:1b:df:ee:ac:ce:87:
76:cc:c3:0b:d0:4f:8c:0a:39:d6:6a:3d:c4:00:a5:5f:e8:64:
0f:cd:24:ed:a8:1d:ab:33:34:58:53:2c:41:99:b4:9b:b1:01:
a8:a9:b1:3f:fd:3e:fe:dd:85:b9:68:15:6a:a0:90:9c:bd:d2:
36:2c:d2:78:6e:c1:b9:0a:44:bd:1b:41:c7:75:9b:7f:81:61:
c9:6c:4b:0d:f7:bc:b4:b7:b3:07:b2:86:41:bc:f1:ee:9c:a9:
57:ce:41:c0:d5:51:3c:4f:59:df:a5:4e:55:d8:81:c8:ef:6d:
5f:ff:d5:65:67:58:c3:41:5d:7d:dc:d5:b1:9d:e6:1a:1e:37:
a2:f7:3e:3b:f8:cf:2f:90:e9:30:ef:6d:ce:a9:11:f7:3d:1a:
a5:7d:2e:f4:23:c9:41:4e:d5:81:ea:f3:f3:0e:0b:c5:c1:7a:
c5:bb:b1:03:37:f3:e2:bb:8d:19:3e:9f:81:32:8b:54:9e:15:
b9:21:e4:a6:bf:41:2c:19:77:b2:9c:a8:35:30:cf:77:fa:b2:
46:b7:a5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:46:15 2025 by rpki-client