Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/Qd4xLNuf8FHve_ofdQYaBbYBiP0.roa
File: Qd4xLNuf8FHve_ofdQYaBbYBiP0.roa (raw, json)
Hash identifier: 3fGg/QzwtWBuRFf4qS9VlLnxS+SRPgYbqGTG0ZfBI7w=
Subject key identifier: 41:DE:31:2C:DB:9F:F0:51:EF:7B:FA:1F:75:06:1A:05:B6:01:88:FD
Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial: 019652F7B29279AE50222B4ABAA7332B462C
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/Qd4xLNuf8FHve_ofdQYaBbYBiP0.roa
Signing time: Sun 20 Apr 2025 11:31:26 +0000
ROA not before: Sun 20 Apr 2025 11:31:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 193.36.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:f7:b2:92:79:ae:50:22:2b:4a:ba:a7:33:2b:46:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
Validity
Not Before: Apr 20 11:31:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41de312cdb9ff051ef7bfa1f75061a05b60188fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2f:ef:a6:76:d4:fa:3e:75:45:cc:c0:4e:37:
b4:06:6a:25:66:3a:c3:e9:a8:c8:16:1c:4d:f4:0d:
57:b6:78:81:38:72:7b:e5:41:ed:fb:9a:b8:dd:aa:
44:d0:ea:1b:06:d8:c3:c8:af:f7:f4:f6:f5:98:54:
d1:c1:60:db:e4:00:87:6e:73:fd:01:f2:48:42:ce:
db:93:35:9e:55:71:1d:c8:f6:31:73:86:0f:68:00:
79:af:b2:d4:7b:42:ca:a2:7d:f8:90:f6:05:07:9c:
0f:fd:cc:32:ba:8b:48:10:ed:fb:92:9b:bb:03:f2:
76:95:63:3c:09:2e:28:77:b7:d9:4f:29:ce:d5:2a:
46:4d:1e:f3:96:d8:c6:ca:8b:1f:31:2d:3d:7c:bb:
2d:29:ac:d9:09:93:3a:72:52:89:97:fc:1b:3c:05:
41:bf:0a:80:e2:60:43:8d:f4:00:7c:05:ac:be:ab:
4f:f0:e6:e0:59:ba:cf:64:81:99:07:9b:75:a0:f3:
e9:31:69:fa:49:fe:52:25:d1:eb:5f:87:4f:0a:63:
e7:b0:07:ce:e0:9a:b4:e3:45:a0:64:87:86:05:92:
0c:82:a8:8e:3e:7d:81:c6:6a:13:55:90:d4:fa:58:
80:5c:a9:0c:da:14:4c:48:2b:6a:d9:42:55:a6:8d:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DE:31:2C:DB:9F:F0:51:EF:7B:FA:1F:75:06:1A:05:B6:01:88:FD
X509v3 Authority Key Identifier:
keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/Qd4xLNuf8FHve_ofdQYaBbYBiP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.92.0/24
Signature Algorithm: sha256WithRSAEncryption
78:56:d8:6e:4b:c2:07:48:54:94:02:36:aa:0d:8a:d9:8b:3f:
b9:31:cc:5d:b9:07:55:1a:86:e1:a8:02:d0:9c:f0:2d:c6:be:
25:c8:aa:43:6f:35:77:d4:49:fe:d2:e4:0b:c0:1c:99:69:31:
6b:9e:9a:ae:17:48:dd:4b:e7:0a:60:59:ec:85:c6:f5:1a:dd:
ef:ee:f9:ac:73:1d:8d:69:bc:24:45:3e:2f:7d:99:bc:f3:e9:
5d:ff:2a:2f:81:41:5a:c3:78:97:35:20:2d:8f:92:39:59:ff:
68:a2:19:02:98:2a:c4:41:56:a9:2f:f7:9c:46:43:25:1a:7c:
d2:07:a0:3b:ac:53:03:9d:e4:4c:64:a3:c3:36:41:b5:e9:f4:
d3:5d:19:73:7f:79:01:15:02:cf:21:6f:49:7d:b2:71:0f:e3:
77:86:5e:56:d0:50:b1:97:8f:97:cf:9f:f0:96:c9:bd:9d:4c:
3e:68:11:8f:73:ba:0f:e0:dc:73:7f:d8:53:9b:06:84:f7:f2:
ce:72:c3:48:49:bf:12:2d:5f:9d:6c:ae:c5:13:0b:fe:5a:8a:
f7:8a:1a:1a:06:9c:4b:67:d4:ed:80:65:cf:9e:00:a0:34:6f:
37:f6:5f:44:8d:af:f5:b2:a3:8c:36:9b:3d:f8:fc:36:84:75:
5b:1d:a1:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZS97KSea5QIitKuqczK0YsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNDY0Yzc2YzAxOTQ4Zjg3ZTA0ZTJmYzVmNTE2NzAyYjM5
MDc0NTYwHhcNMjUwNDIwMTEzMTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWRlMzEyY2RiOWZmMDUxZWY3YmZhMWY3NTA2MWEwNWI2MDE4OGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5y/vpnbU+j51RczATje0BmolZjrD
6ajIFhxN9A1XtniBOHJ75UHt+5q43apE0OobBtjDyK/39Pb1mFTRwWDb5ACHbnP9
AfJIQs7bkzWeVXEdyPYxc4YPaAB5r7LUe0LKon34kPYFB5wP/cwyuotIEO37kpu7
A/J2lWM8CS4od7fZTynO1SpGTR7zltjGyosfMS09fLstKazZCZM6clKJl/wbPAVB
vwqA4mBDjfQAfAWsvqtP8ObgWbrPZIGZB5t1oPPpMWn6Sf5SJdHrX4dPCmPnsAfO
4Jq040WgZIeGBZIMgqiOPn2BxmoTVZDU+liAXKkM2hRMSCtq2UJVpo23uQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEHeMSzbn/BR73v6H3UGGgW2AYj9MB8GA1UdIwQY
MBaAFO1GTHbAGUj4fgTi/F9RZwKzkHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQt
Mzg1N2VjNWNiMWRiLzEvUWQ0eExOdWY4Rkh2ZV9vZmRRWWFCYllCaVAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9lNGRiNTAtNzQ2ZS00NWY0LTk2NGQtMzg1N2VjNWNiMWRi
LzEvN1VaTWRzQVpTUGgtQk9MOFgxRm5Bck9RZEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSRcMA0G
CSqGSIb3DQEBCwUAA4IBAQB4VthuS8IHSFSUAjaqDYrZiz+5McxduQdVGobhqALQ
nPAtxr4lyKpDbzV31En+0uQLwByZaTFrnpquF0jdS+cKYFnshcb1Gt3v7vmscx2N
abwkRT4vfZm88+ld/yovgUFaw3iXNSAtj5I5Wf9oohkCmCrEQVapL/ecRkMlGnzS
B6A7rFMDneRMZKPDNkG16fTTXRlzf3kBFQLPIW9JfbJxD+N3hl5W0FCxl4+Xz5/w
lsm9nUw+aBGPc7oP4Nxzf9hTmwaE9/LOcsNISb8SLV+dbK7FEwv+Wor3ihoaBpxL
Z9TtgGXPngCgNG839l9Eja/1sqOMNps9+Pw2hHVbHaH0
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:43:32 2025 by rpki-client