Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/q0ApgfDR6MUFo5SmPdczTTS0Xsc.roa
File: q0ApgfDR6MUFo5SmPdczTTS0Xsc.roa (raw, json)
Hash identifier: scfCeq11ilCac8clsFq/zmbEUDIqGanHD8OiJk8YEiI=
Subject key identifier: AB:40:29:81:F0:D1:E8:C5:05:A3:94:A6:3D:D7:33:4D:34:B4:5E:C7
Certificate issuer: /CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Certificate serial: 019420D5E800E0C20508BA0DE54CAA42F34E
Authority key identifier: 94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/q0ApgfDR6MUFo5SmPdczTTS0Xsc.roa
Signing time: Wed 01 Jan 2025 07:47:56 +0000
ROA not before: Wed 01 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35366
IP address blocks: 81.7.0.0/18 maxlen: 19
81.89.96.0/20 maxlen: 21
84.23.64.0/19 maxlen: 20
85.31.184.0/21 maxlen: 23
91.143.80.0/20 maxlen: 21
185.2.8.0/22 maxlen: 23
2a02:180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e8:00:e0:c2:05:08:ba:0d:e5:4c:aa:42:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab402981f0d1e8c505a394a63dd7334d34b45ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:24:d9:9b:c2:25:55:b5:64:48:be:b3:43:
8e:2e:09:09:9a:43:54:6d:bb:45:bb:8f:a1:19:df:
f7:f8:1e:b2:11:f7:bc:cd:91:23:2a:7d:8d:95:f4:
f4:14:24:ce:c0:20:97:6a:91:b8:5d:f3:e8:2d:3e:
08:2b:85:4c:d6:66:6e:0b:94:79:38:b9:65:e3:e2:
0d:e8:df:b9:53:14:1c:e3:50:64:48:fe:f1:12:46:
29:e4:cb:76:dc:db:c1:80:5c:ef:5e:29:af:f9:79:
dd:13:d7:b7:d0:72:f1:ee:52:38:08:88:61:23:f1:
20:7b:b8:f1:22:d7:b5:71:72:cf:71:fd:62:56:e5:
80:a4:f1:ad:4f:bd:42:db:1c:cc:3b:d0:ed:b1:e6:
50:e2:ae:bc:d7:f1:78:7c:3d:53:b6:51:2a:37:c3:
c4:e6:2b:95:53:f6:80:0d:89:92:c4:f1:37:95:43:
e1:b9:bc:a1:43:46:44:1e:e9:96:a5:69:50:4d:ba:
7d:46:f4:da:7b:01:0d:39:e2:09:f7:e4:d7:a0:27:
6a:60:12:9c:74:b3:a0:0c:1e:be:49:e8:92:fa:1d:
ab:00:40:6a:14:e8:a6:c8:19:10:0e:d1:ea:d3:3d:
da:30:3d:7c:1e:36:fb:70:31:fe:ce:04:b1:15:2e:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:40:29:81:F0:D1:E8:C5:05:A3:94:A6:3D:D7:33:4D:34:B4:5E:C7
X509v3 Authority Key Identifier:
keyid:94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/q0ApgfDR6MUFo5SmPdczTTS0Xsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.7.0.0/18
81.89.96.0/20
84.23.64.0/19
85.31.184.0/21
91.143.80.0/20
185.2.8.0/22
IPv6:
2a02:180::/32
Signature Algorithm: sha256WithRSAEncryption
30:36:02:fa:f3:d3:ce:c9:67:1b:11:12:35:5b:5f:c9:fa:92:
f3:28:42:b5:be:2d:46:fa:29:f4:10:7a:58:9a:50:59:b0:75:
18:6b:16:51:d7:08:46:88:1e:8d:fa:32:ec:96:68:4f:c8:19:
90:9d:8d:7f:70:bf:65:1e:2c:86:11:ee:8d:83:9a:92:f5:65:
64:4d:9a:9b:ef:3a:b8:86:54:1e:ea:07:a3:3c:7a:60:58:cc:
6d:9d:53:72:e4:cb:23:d5:6e:19:e1:1c:b5:1b:58:06:92:a4:
85:fa:52:44:d3:13:26:ca:b1:47:8b:eb:d7:dd:3e:37:ad:91:
37:d5:0c:6e:ec:1e:84:92:31:01:65:1f:24:ea:ca:9a:94:18:
c1:14:61:03:b2:3c:11:d7:50:1a:aa:13:71:3d:ff:a0:c8:b8:
b6:af:5d:46:10:2c:a4:3d:18:26:30:9d:33:ec:cb:e9:ed:ba:
6f:da:51:56:d9:4b:e8:b9:6d:51:ee:9a:2e:9b:72:74:44:91:
a2:a1:7b:96:e3:9c:70:11:e6:2b:3f:59:b0:73:9e:68:30:77:
f7:fb:89:72:22:12:87:ee:90:d4:ef:e4:3c:18:5a:5a:8b:e0:
a9:7e:46:a8:12:3c:ba:15:f2:5f:4c:ac:c3:d2:2f:6e:3d:5c:
d6:d5:b4:22
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQg1egA4MIFCLoN5UyqQvNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZGI0YjFlOWVkNjhiYjVjMzMyMjhhZTMwZTljZGQyNTJi
MzJmYjgwHhcNMjUwMTAxMDc0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjQwMjk4MWYwZDFlOGM1MDVhMzk0YTYzZGQ3MzM0ZDM0YjQ1ZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowYk2ZvCJVW1ZEi+s0OOLgkJmkNU
bbtFu4+hGd/3+B6yEfe8zZEjKn2NlfT0FCTOwCCXapG4XfPoLT4IK4VM1mZuC5R5
OLll4+IN6N+5UxQc41BkSP7xEkYp5Mt23NvBgFzvXimv+XndE9e30HLx7lI4CIhh
I/Ege7jxIte1cXLPcf1iVuWApPGtT71C2xzMO9DtseZQ4q681/F4fD1TtlEqN8PE
5iuVU/aADYmSxPE3lUPhubyhQ0ZEHumWpWlQTbp9RvTaewENOeIJ9+TXoCdqYBKc
dLOgDB6+SeiS+h2rAEBqFOimyBkQDtHq0z3aMD18Hjb7cDH+zgSxFS4eKwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFKtAKYHw0ejFBaOUpj3XM000tF7HMB8GA1UdIwQY
MBaAFJTbSx6e1ou1wzIorjDpzdJSsy+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE50TEhwN1dpN1hETWlpdU1Pbk4wbEt6TDdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yMGY4MDUtZGY2My00NjMxLTk5YmQt
YTI1NjE3NzczOWM2LzEvcTBBcGdmRFI2TVVGbzVTbVBkY3pUVFMwWHNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yMGY4MDUtZGY2My00NjMxLTk5YmQtYTI1NjE3NzczOWM2
LzEvbE50TEhwN1dpN1hETWlpdU1Pbk4wbEt6TDdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQGUQcAAwQE
UVlgAwQFVBdAAwQDVR+4AwQEW49QAwQCuQIIMA0EAgACMAcDBQAqAgGAMA0GCSqG
SIb3DQEBCwUAA4IBAQAwNgL689POyWcbERI1W1/J+pLzKEK1vi1G+in0EHpYmlBZ
sHUYaxZR1whGiB6N+jLslmhPyBmQnY1/cL9lHiyGEe6Ng5qS9WVkTZqb7zq4hlQe
6gejPHpgWMxtnVNy5Msj1W4Z4Ry1G1gGkqSF+lJE0xMmyrFHi+vX3T43rZE31Qxu
7B6EkjEBZR8k6sqalBjBFGEDsjwR11AaqhNxPf+gyLi2r11GECykPRgmMJ0z7Mvp
7bpv2lFW2UvouW1R7poum3J0RJGioXuW45xwEeYrP1mwc55oMHf3+4lyIhKH7pDU
7+Q8GFpai+CpfkaoEjy6FfJfTKzD0i9uPVzW1bQi
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:28:33 2025 by rpki-client