Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/tqDHXiS7i5dxh3CeCoDJkGQqezg.roa
File: tqDHXiS7i5dxh3CeCoDJkGQqezg.roa (raw, json)
Hash identifier: l6w/oRDzimMT8gSmQ7FtqRNlVcpqgstHkEfCIU2SJhE=
Subject key identifier: B6:A0:C7:5E:24:BB:8B:97:71:87:70:9E:0A:80:C9:90:64:2A:7B:38
Certificate issuer: /CN=52a65c628483a756688bb158c28ab7c0d47de27c
Certificate serial: 019423D6E1BE4C4767DCBFEEED35EC90FA97
Authority key identifier: 52:A6:5C:62:84:83:A7:56:68:8B:B1:58:C2:8A:B7:C0:D4:7D:E2:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqZcYoSDp1Zoi7FYwoq3wNR94nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/tqDHXiS7i5dxh3CeCoDJkGQqezg.roa
Signing time: Wed 01 Jan 2025 21:47:52 +0000
ROA not before: Wed 01 Jan 2025 21:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 31.43.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqZcYoSDp1Zoi7FYwoq3wNR94nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e1:be:4c:47:67:dc:bf:ee:ed:35:ec:90:fa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a65c628483a756688bb158c28ab7c0d47de27c
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6a0c75e24bb8b977187709e0a80c990642a7b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:bc:a3:b4:70:a9:9a:05:41:14:9f:46:d8:
cf:c4:85:a5:fb:99:08:aa:47:4b:79:23:40:29:56:
12:d0:ce:7d:41:4a:9a:38:14:2a:a8:29:f7:98:41:
92:cf:dc:fe:44:b8:e4:a1:3b:8e:27:c9:3a:d1:f9:
a6:92:7e:42:f9:23:cb:b0:22:8a:9b:2a:bd:3f:26:
75:99:ca:98:c3:e0:6d:e9:41:f4:e1:de:b2:23:a4:
9a:73:5b:d9:c0:21:ab:6b:93:a6:b9:b2:75:b4:2d:
5e:e1:08:08:63:73:fe:8f:bc:ff:a0:fd:bb:cd:54:
12:c5:78:97:c7:44:15:8e:38:a1:03:5c:2f:7a:90:
73:57:dd:eb:41:68:28:1d:d6:d5:dd:4b:94:eb:ef:
fa:3b:a7:a2:4e:97:ce:99:99:d9:0c:a6:9b:e8:06:
30:e9:ae:76:69:22:d6:44:56:4f:80:b6:b4:52:c9:
11:af:f1:fe:e1:42:47:ac:2d:ae:7c:a2:e0:81:14:
0a:07:61:64:26:51:bb:dd:ba:9a:c0:f0:a1:c6:c1:
66:fb:1c:0b:5d:09:87:be:7b:a4:20:45:5a:64:bd:
38:4e:aa:7f:3f:c6:c8:7d:2b:74:5f:78:11:fd:24:
34:f4:8b:65:2b:9e:ba:f4:83:31:43:04:31:8f:fa:
fb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A0:C7:5E:24:BB:8B:97:71:87:70:9E:0A:80:C9:90:64:2A:7B:38
X509v3 Authority Key Identifier:
keyid:52:A6:5C:62:84:83:A7:56:68:8B:B1:58:C2:8A:B7:C0:D4:7D:E2:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqZcYoSDp1Zoi7FYwoq3wNR94nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/tqDHXiS7i5dxh3CeCoDJkGQqezg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.160.0/23
Signature Algorithm: sha256WithRSAEncryption
28:23:76:53:62:5b:de:96:be:85:1c:b8:45:85:27:36:9d:f1:
e9:57:b1:8b:8b:8f:ed:b9:65:b4:45:58:08:70:94:d9:32:06:
a9:44:2a:3d:6a:d4:24:bb:21:aa:ce:95:59:60:6a:16:df:34:
aa:0d:be:0f:e7:6e:44:61:8f:0d:f1:9a:6b:2a:21:30:4e:ea:
e7:3b:c4:98:0a:78:00:a7:df:7b:0f:e8:7b:95:88:29:98:8e:
62:3d:7d:2c:f3:78:24:bb:d7:3f:18:64:60:34:7b:bf:41:5d:
97:b5:0f:68:d7:a8:6b:5a:11:79:4e:65:c7:39:48:43:c8:fe:
67:58:e4:36:29:09:d4:36:b8:94:de:d9:68:b5:61:b3:0d:a5:
18:c1:03:3f:fa:46:5d:69:c2:0b:71:90:5a:4a:0f:64:0a:25:
cd:84:50:df:ef:84:50:9a:40:21:7d:44:b0:21:fe:15:ff:45:
46:b1:e3:b1:52:e4:48:b3:4f:07:1b:e3:5e:30:4d:dc:70:f0:
db:b6:10:04:3a:bd:9b:f7:8d:7b:9e:67:b2:5c:93:3a:12:b9:
8e:bc:26:b2:47:39:3e:d2:51:10:90:cc:1c:a4:06:85:b8:f2:
d7:ee:9d:23:ed:89:7f:c9:29:a7:d9:55:1c:64:a6:12:6d:96:
c1:2a:01:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1uG+TEdn3L/u7TXskPqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTY1YzYyODQ4M2E3NTY2ODhiYjE1OGMyOGFiN2MwZDQ3
ZGUyN2MwHhcNMjUwMTAxMjE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmEwYzc1ZTI0YmI4Yjk3NzE4NzcwOWUwYTgwYzk5MDY0MmE3YjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydS8o7RwqZoFQRSfRtjPxIWl+5kI
qkdLeSNAKVYS0M59QUqaOBQqqCn3mEGSz9z+RLjkoTuOJ8k60fmmkn5C+SPLsCKK
myq9PyZ1mcqYw+Bt6UH04d6yI6Sac1vZwCGra5OmubJ1tC1e4QgIY3P+j7z/oP27
zVQSxXiXx0QVjjihA1wvepBzV93rQWgoHdbV3UuU6+/6O6eiTpfOmZnZDKab6AYw
6a52aSLWRFZPgLa0UskRr/H+4UJHrC2ufKLggRQKB2FkJlG73bqawPChxsFm+xwL
XQmHvnukIEVaZL04Tqp/P8bIfSt0X3gR/SQ09ItlK5669IMxQwQxj/r7wQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLagx14ku4uXcYdwngqAyZBkKns4MB8GA1UdIwQY
MBaAFFKmXGKEg6dWaIuxWMKKt8DUfeJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFaY1lvU0RwMVpvaTdGWXdvcTN3TlI5NG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wM2QwZTItYTQ5ZS00MzcxLWIyMWMt
NTAxNWUxMjA4MTE5LzEvdHFESFhpUzdpNWR4aDNDZUNvREprR1FxZXpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wM2QwZTItYTQ5ZS00MzcxLWIyMWMtNTAxNWUxMjA4MTE5
LzEvVXFaY1lvU0RwMVpvaTdGWXdvcTN3TlI5NG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHyugMA0G
CSqGSIb3DQEBCwUAA4IBAQAoI3ZTYlvelr6FHLhFhSc2nfHpV7GLi4/tuWW0RVgI
cJTZMgapRCo9atQkuyGqzpVZYGoW3zSqDb4P525EYY8N8ZprKiEwTurnO8SYCngA
p997D+h7lYgpmI5iPX0s83gku9c/GGRgNHu/QV2XtQ9o16hrWhF5TmXHOUhDyP5n
WOQ2KQnUNriU3tlotWGzDaUYwQM/+kZdacILcZBaSg9kCiXNhFDf74RQmkAhfUSw
If4V/0VGseOxUuRIs08HG+NeME3ccPDbthAEOr2b9417nmeyXJM6ErmOvCayRzk+
0lEQkMwcpAaFuPLX7p0j7Yl/ySmn2VUcZKYSbZbBKgF8
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:51 2025 by rpki-client