Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qDxoFmqrQ0BJs6EivpEG8MFmLoA.roa
File: qDxoFmqrQ0BJs6EivpEG8MFmLoA.roa (raw, json)
Hash identifier: c3jHZDiVdwx2RNXaqJPPbqDiliC8yx1bwV3wm95AGNw=
Subject key identifier: A8:3C:68:16:6A:AB:43:40:49:B3:A1:22:BE:91:06:F0:C1:66:2E:80
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019537677A2F64BEB952AA23B67DF54E4147
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qDxoFmqrQ0BJs6EivpEG8MFmLoA.roa
Signing time: Mon 24 Feb 2025 10:01:23 +0000
ROA not before: Mon 24 Feb 2025 10:01:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213646
IP address blocks: 82.153.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:67:7a:2f:64:be:b9:52:aa:23:b6:7d:f5:4e:41:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 24 10:01:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a83c68166aab434049b3a122be9106f0c1662e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1b:57:60:51:59:90:3d:f8:e1:4c:85:a9:72:
07:34:bf:ad:4f:d6:07:d5:e2:13:8e:c0:9f:61:46:
2c:db:e8:55:35:8e:35:5d:a7:f4:14:b0:29:ff:c9:
dc:74:b2:ad:41:29:2a:c1:46:cb:9b:91:d5:5d:02:
28:03:23:f1:2f:f6:f3:a2:70:9c:57:56:c3:9d:90:
ee:67:f4:51:17:f7:5a:f3:1d:0a:0b:8f:af:87:36:
ab:62:ac:1a:39:3e:20:08:91:19:76:f6:2b:6c:db:
25:a1:72:f0:7e:72:6f:ab:c1:3b:47:e8:9d:bb:65:
de:4b:74:24:b9:1e:df:5c:e6:b6:57:81:fe:92:b4:
d1:7c:21:df:d8:d2:01:c2:60:03:29:4d:30:2a:0f:
b5:ef:be:9d:83:9b:59:45:ae:ca:83:25:23:c2:61:
e5:aa:3d:3e:c5:57:61:cb:83:85:11:12:b0:b2:77:
64:b1:51:6b:28:fc:01:9a:59:37:d5:82:d1:54:d7:
44:ed:3d:ea:8e:a3:8c:13:87:72:78:bd:df:a5:13:
17:e6:80:22:7d:cc:52:c1:de:e5:e9:d1:19:55:9f:
32:22:4a:61:17:e6:f3:f7:1d:dd:a1:c4:6e:3f:31:
90:19:53:55:09:9f:07:c0:c2:76:b5:e0:39:4b:4a:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3C:68:16:6A:AB:43:40:49:B3:A1:22:BE:91:06:F0:C1:66:2E:80
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qDxoFmqrQ0BJs6EivpEG8MFmLoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ac:31:d9:7d:5a:ec:5e:9c:06:ff:20:4e:91:ff:a1:50:1e:
df:ef:42:27:d6:4c:d6:9b:6d:6f:4a:f9:27:0b:3c:fa:25:cc:
92:69:f3:57:9a:ef:fe:2c:f5:fb:5f:6d:ef:dd:d4:98:9c:4b:
41:82:fa:95:2a:39:68:8e:17:ac:4c:fa:eb:54:56:8d:1c:eb:
03:23:94:23:89:31:0f:d6:08:41:79:e5:8c:e9:9c:b9:f6:27:
3f:9f:a0:42:da:b4:35:dc:09:08:ab:e1:2f:db:77:0d:7d:12:
28:e2:8e:4e:7f:6f:43:62:91:c1:56:b4:f2:f7:66:42:18:ce:
56:ef:36:cc:f6:37:c5:78:bb:c8:36:ac:d5:ff:9f:58:13:29:
97:e1:42:f0:00:79:0f:08:37:11:5b:a9:e3:30:d9:e2:4e:4e:
33:45:f9:70:c0:f9:31:76:e4:78:b5:b2:67:94:23:73:17:00:
70:01:34:f4:1b:22:2c:d8:c7:fb:7a:9a:a1:52:8c:61:10:94:
79:22:cb:58:eb:b2:b8:3c:54:b8:09:7f:1e:d9:68:db:c5:8b:
20:28:b6:1a:17:1c:35:7e:b0:16:43:7f:a1:16:7a:cd:3c:f7:
ba:27:2f:67:e3:f8:b8:f8:99:6f:04:90:ca:b4:32:cc:ea:f4:
9b:48:57:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU3Z3ovZL65Uqojtn31TkFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMjI0MTAwMTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODNjNjgxNjZhYWI0MzQwNDliM2ExMjJiZTkxMDZmMGMxNjYyZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RtXYFFZkD344UyFqXIHNL+tT9YH
1eITjsCfYUYs2+hVNY41Xaf0FLAp/8ncdLKtQSkqwUbLm5HVXQIoAyPxL/bzonCc
V1bDnZDuZ/RRF/da8x0KC4+vhzarYqwaOT4gCJEZdvYrbNsloXLwfnJvq8E7R+id
u2XeS3QkuR7fXOa2V4H+krTRfCHf2NIBwmADKU0wKg+1776dg5tZRa7KgyUjwmHl
qj0+xVdhy4OFERKwsndksVFrKPwBmlk31YLRVNdE7T3qjqOME4dyeL3fpRMX5oAi
fcxSwd7l6dEZVZ8yIkphF+bz9x3docRuPzGQGVNVCZ8HwMJ2teA5S0qCoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKg8aBZqq0NASbOhIr6RBvDBZi6AMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvcUR4b0ZtcXJRMEJKczZFaXZwRUc4TUZtTG9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpn/MA0G
CSqGSIb3DQEBCwUAA4IBAQCMrDHZfVrsXpwG/yBOkf+hUB7f70In1kzWm21vSvkn
Czz6JcySafNXmu/+LPX7X23v3dSYnEtBgvqVKjlojhesTPrrVFaNHOsDI5QjiTEP
1ghBeeWM6Zy59ic/n6BC2rQ13AkIq+Ev23cNfRIo4o5Of29DYpHBVrTy92ZCGM5W
7zbM9jfFeLvINqzV/59YEymX4ULwAHkPCDcRW6njMNniTk4zRflwwPkxduR4tbJn
lCNzFwBwATT0GyIs2Mf7epqhUoxhEJR5IstY67K4PFS4CX8e2WjbxYsgKLYaFxw1
frAWQ3+hFnrNPPe6Jy9n4/i4+JlvBJDKtDLM6vSbSFde
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:22:31 2025 by rpki-client