Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/QNIQdG4Tu9zIYU5pnHAiIv-6jdQ.roa
File: QNIQdG4Tu9zIYU5pnHAiIv-6jdQ.roa (raw, json)
Hash identifier: iDeA+sQiPag5Td4fIdhnGBEsGTbasSmj20N0QdB9b24=
Subject key identifier: 40:D2:10:74:6E:13:BB:DC:C8:61:4E:69:9C:70:22:22:FF:BA:8D:D4
Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Certificate serial: 0194221F79C4A444AC80FE5E3879CCA34205
Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/QNIQdG4Tu9zIYU5pnHAiIv-6jdQ.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 130.193.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:79:c4:a4:44:ac:80:fe:5e:38:79:cc:a3:42:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40d210746e13bbdcc8614e699c702222ffba8dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:04:07:bc:c7:f1:f9:0c:dd:a9:03:13:e0:42:
6b:05:98:cb:97:00:57:87:48:92:ae:06:ed:f2:e6:
45:87:b9:45:ed:3e:2b:cb:65:bf:97:dd:9c:ae:66:
84:46:92:94:41:5c:f5:50:66:3f:19:c9:94:5d:87:
5b:0a:5f:c8:31:23:fa:1d:6d:14:22:cb:64:73:c7:
6b:4f:61:59:15:90:09:8c:ab:2b:6c:83:50:ad:db:
85:f0:9e:4f:79:78:a5:61:9f:2d:93:95:e1:8a:bc:
81:14:58:8a:61:82:cd:2e:c1:a7:1e:ba:60:0d:41:
44:92:c2:1d:e6:3c:8e:46:db:ca:49:fa:2c:7a:93:
5f:04:91:21:97:f1:81:d1:44:30:2d:78:c2:64:39:
cb:94:5c:8e:dd:c3:51:1d:89:a6:67:bd:c8:60:48:
09:22:29:e9:62:0a:26:40:2f:6d:c8:ae:51:3e:27:
58:44:4f:cb:b7:52:bb:72:4d:bb:15:54:5b:04:f2:
05:58:8b:7d:89:53:94:db:30:af:e4:e7:50:18:cf:
35:18:62:5f:a8:b3:c4:88:14:94:a8:f6:65:a7:6d:
4f:9d:ec:e4:ba:08:95:c6:f3:fa:ee:d7:52:cd:17:
3a:fe:95:8c:d9:b1:6a:48:5b:5f:47:00:8b:f4:09:
ce:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D2:10:74:6E:13:BB:DC:C8:61:4E:69:9C:70:22:22:FF:BA:8D:D4
X509v3 Authority Key Identifier:
keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/QNIQdG4Tu9zIYU5pnHAiIv-6jdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.2.0/24
Signature Algorithm: sha256WithRSAEncryption
53:41:e0:a4:5d:70:55:34:ee:c4:b8:f3:a1:f6:62:18:5a:7f:
7d:d6:36:dc:fa:fb:ad:53:af:d5:61:9e:f4:09:cc:b2:30:73:
ff:ab:14:4b:42:ff:e2:bc:e0:25:5f:d7:cb:52:c3:33:39:c5:
36:41:00:36:47:c9:4b:f5:f8:97:d0:81:63:b9:65:03:06:60:
67:99:ce:d5:b4:86:f0:57:98:d0:c4:bc:6c:6f:06:59:38:b0:
97:38:e5:e1:ab:7b:b2:9d:7a:58:e6:42:24:67:5b:2e:ec:ce:
9f:ea:a8:8b:47:fb:b3:84:3c:16:4f:f7:4d:cc:37:5d:dc:d0:
6f:2c:d4:eb:7a:ee:f6:7d:2a:af:3f:62:99:69:04:c0:73:ed:
7e:80:b0:67:33:4e:11:de:13:e3:c3:64:be:8a:de:7f:f8:2c:
86:49:29:3a:ae:54:ef:9b:4d:74:08:d9:13:0a:ef:5a:c2:b0:
e4:19:1f:e1:ae:59:3d:ea:da:76:0e:2e:7e:59:9b:16:b6:24:
e5:26:c9:c8:7f:dd:5e:8f:4a:1a:83:58:9c:d8:4e:a7:71:62:
2b:ff:05:3f:af:ff:22:31:4a:5d:4f:7e:87:ef:ee:cf:97:91:
95:90:57:7a:82:0b:f8:41:14:eb:87:bf:39:02:39:cd:6a:26:
05:09:a7:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH3nEpESsgP5eOHnMo0IFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTYyZWE1NjYwNTQ2NTZlZjgyYWFjZTJkNzFjNzZkMWIw
Yjg4YmIwHhcNMjUwMTAxMTM0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGQyMTA3NDZlMTNiYmRjYzg2MTRlNjk5YzcwMjIyMmZmYmE4ZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gQHvMfx+QzdqQMT4EJrBZjLlwBX
h0iSrgbt8uZFh7lF7T4ry2W/l92crmaERpKUQVz1UGY/GcmUXYdbCl/IMSP6HW0U
Istkc8drT2FZFZAJjKsrbINQrduF8J5PeXilYZ8tk5XhiryBFFiKYYLNLsGnHrpg
DUFEksId5jyORtvKSfosepNfBJEhl/GB0UQwLXjCZDnLlFyO3cNRHYmmZ73IYEgJ
IinpYgomQC9tyK5RPidYRE/Lt1K7ck27FVRbBPIFWIt9iVOU2zCv5OdQGM81GGJf
qLPEiBSUqPZlp21PnezkugiVxvP67tdSzRc6/pWM2bFqSFtfRwCL9AnOIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEDSEHRuE7vcyGFOaZxwIiL/uo3UMB8GA1UdIwQY
MBaAFEWWLqVmBUZW74Kqzi1xx20bC4i7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpZdXBXWUZSbGJ2Z3FyT0xYSEhiUnNMaUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xZWQzZTItYTA5Yy00OWMyLTk5Mjgt
YzVjMDgyYTMxM2Y3LzEvUU5JUWRHNFR1OXpJWVU1cG5IQWlJdi02amRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xZWQzZTItYTA5Yy00OWMyLTk5MjgtYzVjMDgyYTMxM2Y3
LzEvUlpZdXBXWUZSbGJ2Z3FyT0xYSEhiUnNMaUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgsECMA0G
CSqGSIb3DQEBCwUAA4IBAQBTQeCkXXBVNO7EuPOh9mIYWn991jbc+vutU6/VYZ70
CcyyMHP/qxRLQv/ivOAlX9fLUsMzOcU2QQA2R8lL9fiX0IFjuWUDBmBnmc7VtIbw
V5jQxLxsbwZZOLCXOOXhq3uynXpY5kIkZ1su7M6f6qiLR/uzhDwWT/dNzDdd3NBv
LNTreu72fSqvP2KZaQTAc+1+gLBnM04R3hPjw2S+it5/+CyGSSk6rlTvm010CNkT
Cu9awrDkGR/hrlk96tp2Di5+WZsWtiTlJsnIf91ej0oag1ic2E6ncWIr/wU/r/8i
MUpdT36H7+7Pl5GVkFd6ggv4QRTrh785AjnNaiYFCadw
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:43 2025 by rpki-client