Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/_QBZZm_j6pkBqG7ULTSKSuYA6m4.roa
File: _QBZZm_j6pkBqG7ULTSKSuYA6m4.roa (raw, json)
Hash identifier: J+NZ6+xHvgyZBnOnyLbSKcqDP+9z+FmiBI8TDK00aCo=
Subject key identifier: FD:00:59:66:6F:E3:EA:99:01:A8:6E:D4:2D:34:8A:4A:E6:00:EA:6E
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 019427B6954C7C4587B713A11CDD434C40AD
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/_QBZZm_j6pkBqG7ULTSKSuYA6m4.roa
Signing time: Thu 02 Jan 2025 15:51:04 +0000
ROA not before: Thu 02 Jan 2025 15:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49871
IP address blocks: 193.104.9.0/24 maxlen: 32
193.109.236.0/24 maxlen: 32
194.29.56.0/22 maxlen: 32
195.66.154.0/23 maxlen: 32
195.234.129.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:95:4c:7c:45:87:b7:13:a1:1c:dd:43:4c:40:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Jan 2 15:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd0059666fe3ea9901a86ed42d348a4ae600ea6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:44:7d:3b:1e:df:54:c3:79:22:83:cd:26:03:
80:6d:e5:07:34:4d:98:bd:14:22:38:c7:ad:6d:36:
eb:4b:9d:ec:80:ba:da:38:d8:55:94:2c:f0:b9:c9:
46:78:1d:a2:dd:0b:71:3a:2f:73:e4:a3:5a:52:07:
61:6a:71:77:c5:0f:0e:a9:29:7e:f5:3f:ec:fc:30:
d0:9b:ef:c6:d5:aa:d0:c8:a1:99:20:4f:ce:f7:78:
1b:1f:d3:8f:f2:40:22:cb:f4:0c:49:4b:ec:78:19:
06:99:0b:74:65:ce:6b:1c:dc:e5:31:d3:23:d7:fa:
96:8f:b7:c8:47:16:7d:c8:4a:5b:12:b2:20:1e:05:
2e:96:5f:8a:61:cb:80:c6:55:eb:52:c1:a8:d9:65:
8c:5b:80:67:5c:df:db:66:bc:62:ee:b0:4d:1f:d5:
a8:aa:89:ea:7d:ee:8f:33:25:62:80:10:f7:7e:73:
08:56:7f:96:9b:ba:b1:b5:39:d3:ef:66:cf:9c:27:
97:7f:86:b2:3c:05:1e:a8:8e:56:55:d2:23:5b:25:
1f:dd:de:5c:32:20:6e:90:ba:d5:3f:44:ac:63:0f:
46:32:13:7c:78:28:62:27:bc:4a:c5:df:3d:db:f4:
cd:e5:cd:17:14:e1:47:d4:ad:d4:6a:a0:8d:55:3c:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:00:59:66:6F:E3:EA:99:01:A8:6E:D4:2D:34:8A:4A:E6:00:EA:6E
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/_QBZZm_j6pkBqG7ULTSKSuYA6m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.9.0/24
193.109.236.0/24
194.29.56.0/22
195.66.154.0/23
195.234.129.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6d:0b:c9:c1:a2:77:2c:95:4d:ea:87:f2:42:92:74:d3:9a:
5b:0f:d7:af:2f:89:d7:b6:e7:1f:6a:e8:27:b4:89:dd:59:55:
8a:10:9d:48:4e:fe:f3:a2:4c:b6:9b:fd:7d:48:ca:02:9c:a5:
0e:dc:6e:38:c6:9b:55:28:55:1e:08:d6:82:2a:7e:3b:91:28:
28:a4:c9:36:69:15:34:88:f5:35:ee:07:1f:47:7c:e4:50:78:
8e:9f:a0:5c:b1:15:e2:48:df:99:c3:90:c0:2b:f3:c3:ef:d5:
02:a8:57:57:bf:f5:b1:80:f5:55:7d:c3:19:e5:f9:0a:c1:fe:
82:45:7a:fe:ec:27:55:90:55:5c:4d:48:52:e4:93:5c:95:4c:
d0:f5:0d:29:48:ae:c6:4d:9c:5c:12:6e:a3:9b:78:00:27:d8:
52:15:df:34:f1:10:36:71:3c:38:2c:02:35:02:09:fb:9f:c8:
8c:dc:47:2a:73:21:27:f4:e4:ac:51:c8:18:8c:e9:87:fa:0e:
44:01:df:b2:62:e2:52:f4:84:d4:74:0f:10:f1:cb:73:e2:57:
9f:e6:42:09:30:ae:26:08:c3:bb:2c:b4:d3:7c:2e:6a:77:31:
d7:52:25:2c:cd:a7:f6:4a:d4:c1:7e:6d:b6:84:7e:39:b1:26:
a4:4b:33:36
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQntpVMfEWHtxOhHN1DTECtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5
ZjJmNjEwHhcNMjUwMTAyMTU1MTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDAwNTk2NjZmZTNlYTk5MDFhODZlZDQyZDM0OGE0YWU2MDBlYTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApER9Ox7fVMN5IoPNJgOAbeUHNE2Y
vRQiOMetbTbrS53sgLraONhVlCzwuclGeB2i3QtxOi9z5KNaUgdhanF3xQ8OqSl+
9T/s/DDQm+/G1arQyKGZIE/O93gbH9OP8kAiy/QMSUvseBkGmQt0Zc5rHNzlMdMj
1/qWj7fIRxZ9yEpbErIgHgUull+KYcuAxlXrUsGo2WWMW4BnXN/bZrxi7rBNH9Wo
qonqfe6PMyVigBD3fnMIVn+Wm7qxtTnT72bPnCeXf4ayPAUeqI5WVdIjWyUf3d5c
MiBukLrVP0SsYw9GMhN8eChiJ7xKxd892/TN5c0XFOFH1K3UaqCNVTxS9wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFP0AWWZv4+qZAahu1C00ikrmAOpuMB8GA1UdIwQY
MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt
MDYzNjc1MzY3OWI2LzEvX1FCWlptX2o2cGtCcUc3VUxUU0tTdVlBNm00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2
LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwWgJAwQA
wW3sAwQCwh04AwQBw0KaAwQAw+qBMA0GCSqGSIb3DQEBCwUAA4IBAQBFbQvJwaJ3
LJVN6ofyQpJ005pbD9evL4nXtucfaugntIndWVWKEJ1ITv7zoky2m/19SMoCnKUO
3G44xptVKFUeCNaCKn47kSgopMk2aRU0iPU17gcfR3zkUHiOn6BcsRXiSN+Zw5DA
K/PD79UCqFdXv/WxgPVVfcMZ5fkKwf6CRXr+7CdVkFVcTUhS5JNclUzQ9Q0pSK7G
TZxcEm6jm3gAJ9hSFd808RA2cTw4LAI1Agn7n8iM3EcqcyEn9OSsUcgYjOmH+g5E
Ad+yYuJS9ITUdA8Q8ctz4lef5kIJMK4mCMO7LLTTfC5qdzHXUiUszaf2StTBfm22
hH45sSakSzM2
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:41 2025 by rpki-client