Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/qnV5Hej_TUgtUkVr50QeYituGsM.roa
File: qnV5Hej_TUgtUkVr50QeYituGsM.roa (raw, json)
Hash identifier: /uHwrUUizwAaJwUeauRQidUpOz8OR3evFbNnOMHVoFM=
Subject key identifier: AA:75:79:1D:E8:FF:4D:48:2D:52:45:6B:E7:44:1E:62:2B:6E:1A:C3
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B24508C007D5C1B8C1B6A95F9C4270
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/qnV5Hej_TUgtUkVr50QeYituGsM.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215802
IP address blocks: 188.95.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:45:08:c0:07:d5:c1:b8:c1:b6:a9:5f:9c:42:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa75791de8ff4d482d52456be7441e622b6e1ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:95:80:c2:29:39:b2:f9:14:6a:cd:57:6c:
56:30:ff:ae:a1:72:42:25:00:9d:2e:88:9e:49:5d:
e0:c6:4c:ba:20:a8:06:5c:c6:8f:69:60:5b:54:63:
f6:24:e3:e0:1c:f2:42:10:3e:07:ef:e9:2a:67:80:
56:4e:7e:80:a2:f9:3d:f0:66:25:f9:18:01:3a:00:
96:5d:6a:2f:31:85:df:17:4a:e0:81:af:a7:3c:2d:
17:f1:da:49:c6:03:49:03:58:c3:b9:64:23:b8:79:
20:30:b2:29:ca:32:de:33:62:79:a1:0e:88:ed:5a:
ea:f0:f9:71:9f:aa:4f:45:1c:9d:1f:ae:05:b9:fd:
01:39:e7:68:4f:97:7a:ff:49:6e:52:f6:54:91:c5:
6e:7e:f9:ed:9f:be:1d:3d:a7:80:2d:6f:2c:cd:24:
78:29:e0:b4:8e:43:37:2c:36:13:88:18:97:ba:67:
d5:8e:b0:57:7f:6a:3c:85:fe:10:f0:2d:3a:67:e4:
fd:e3:d3:7c:63:6b:09:51:57:00:a6:cc:3d:ae:91:
da:dd:50:af:bc:11:f6:b8:ad:e5:fc:b0:d0:d3:53:
7a:a8:45:ec:7b:e1:79:dd:5c:b9:6e:68:f0:bb:b2:
db:fc:65:ca:8b:06:14:58:30:53:43:94:d3:33:a5:
6c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:75:79:1D:E8:FF:4D:48:2D:52:45:6B:E7:44:1E:62:2B:6E:1A:C3
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/qnV5Hej_TUgtUkVr50QeYituGsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.95.0/24
Signature Algorithm: sha256WithRSAEncryption
84:39:e5:f6:32:e4:b1:7c:92:22:da:5c:58:b7:94:ee:f0:25:
56:95:2b:02:be:3a:de:5b:5c:1e:57:e8:ee:4d:8b:b5:6f:0e:
cf:7d:be:22:c9:ae:1d:70:29:6c:70:14:b2:2e:13:89:33:bb:
fd:25:ce:90:a8:08:f0:3a:a4:9a:2a:e3:ba:92:69:5e:6a:fb:
8b:ea:d8:6a:74:5a:9b:67:0b:e0:48:67:38:46:4e:7b:0c:f2:
dc:f7:56:d3:54:84:59:a4:7b:1b:a4:3b:37:e3:e7:07:00:0e:
8a:0b:5a:cd:7f:13:a8:33:30:f2:04:11:49:36:9e:71:21:f2:
53:3e:ec:96:8f:54:91:21:1a:57:1f:09:8d:a3:ce:34:75:54:
c1:ed:14:0c:10:71:30:c4:94:dc:81:53:47:48:10:96:86:06:
4a:05:64:b3:fc:53:a7:b7:53:f8:72:56:4c:be:de:12:e3:72:
a6:7c:f3:6a:2e:ff:ed:1c:8b:fb:d9:c7:e4:ab:bc:4b:4d:d1:
b0:38:82:65:be:e0:6c:74:d7:d5:3c:b4:3b:f0:49:7a:64:02:
7b:90:74:39:15:cd:5f:9f:d5:dc:c6:0c:50:f8:84:d1:4c:67:
8c:c4:4e:47:ca:f2:e4:4f:0c:36:2f:06:99:1e:6d:5c:9a:75:
cb:7e:37:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhskUIwAfVwbjBtqlfnEJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjUwMTAxMTE0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTc1NzkxZGU4ZmY0ZDQ4MmQ1MjQ1NmJlNzQ0MWU2MjJiNmUxYWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dyVgMIpObL5FGrNV2xWMP+uoXJC
JQCdLoieSV3gxky6IKgGXMaPaWBbVGP2JOPgHPJCED4H7+kqZ4BWTn6Aovk98GYl
+RgBOgCWXWovMYXfF0rgga+nPC0X8dpJxgNJA1jDuWQjuHkgMLIpyjLeM2J5oQ6I
7Vrq8Plxn6pPRRydH64Fuf0BOedoT5d6/0luUvZUkcVufvntn74dPaeALW8szSR4
KeC0jkM3LDYTiBiXumfVjrBXf2o8hf4Q8C06Z+T949N8Y2sJUVcApsw9rpHa3VCv
vBH2uK3l/LDQ01N6qEXse+F53Vy5bmjwu7Lb/GXKiwYUWDBTQ5TTM6VsHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKp1eR3o/01ILVJFa+dEHmIrbhrDMB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvcW5WNUhlal9UVWd0VWtWcjUwUWVZaXR1R3NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF9fMA0G
CSqGSIb3DQEBCwUAA4IBAQCEOeX2MuSxfJIi2lxYt5Tu8CVWlSsCvjreW1weV+ju
TYu1bw7Pfb4iya4dcClscBSyLhOJM7v9Jc6QqAjwOqSaKuO6kmleavuL6thqdFqb
ZwvgSGc4Rk57DPLc91bTVIRZpHsbpDs34+cHAA6KC1rNfxOoMzDyBBFJNp5xIfJT
PuyWj1SRIRpXHwmNo840dVTB7RQMEHEwxJTcgVNHSBCWhgZKBWSz/FOnt1P4clZM
vt4S43KmfPNqLv/tHIv72cfkq7xLTdGwOIJlvuBsdNfVPLQ78El6ZAJ7kHQ5Fc1f
n9XcxgxQ+ITRTGeMxE5HyvLkTww2LwaZHm1cmnXLfjdQ
-----END CERTIFICATE-----
Generated at Sun Apr 13 15:54:28 2025 by rpki-client