Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Qhulp2iV7iWIEUIFLKIJK5FBglQ.roa
File: Qhulp2iV7iWIEUIFLKIJK5FBglQ.roa (raw, json)
Hash identifier: cdnUYbgGh1Rzxk/84f2i4mZXOC7zNRwlAjm85nTQeO4=
Subject key identifier: 42:1B:A5:A7:68:95:EE:25:88:11:42:05:2C:A2:09:2B:91:41:82:54
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C1D1C359955DC7427171C98BFB4BF
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Qhulp2iV7iWIEUIFLKIJK5FBglQ.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39312
IP address blocks: 80.96.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1d:1c:35:99:55:dc:74:27:17:1c:98:bf:b4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=421ba5a76895ee25881142052ca2092b91418254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:b8:7d:ef:fb:0d:f9:a9:bb:ae:28:b8:45:
1e:00:59:48:67:9a:0c:80:a7:f9:33:c6:77:56:78:
b5:df:9a:5a:33:52:6a:a3:c8:41:90:1f:60:1b:3a:
e6:9f:70:c7:bc:f3:a7:a4:44:25:c5:05:43:78:11:
aa:a0:a5:8c:13:11:06:f0:d3:69:45:a1:01:2c:ac:
b7:c7:36:84:bd:8a:44:4d:23:06:ff:0a:f6:94:56:
de:a7:f4:f8:84:7a:00:7c:1c:53:c3:c2:eb:7d:94:
70:4f:09:46:60:3c:18:86:35:c3:df:b3:b9:26:b0:
34:ef:fb:51:ed:c2:af:17:27:0a:d4:e3:d8:64:67:
4d:76:89:10:14:c2:d0:22:7b:01:3a:29:e2:18:2d:
59:c2:d1:41:ff:c3:5c:35:63:65:25:e7:d7:d7:f0:
6b:40:1e:f9:7a:54:d5:27:d7:da:85:3a:df:c7:1e:
8b:f2:0c:25:63:ab:e7:5e:32:aa:9c:39:3d:5e:32:
18:43:48:46:1c:14:e4:b3:96:c7:0b:30:78:5f:04:
ea:6e:16:66:fb:64:b6:fd:0f:a1:83:93:7d:1e:5d:
6d:22:93:02:e2:c5:d7:b7:2b:fa:93:2d:76:24:f7:
ea:01:6a:b6:2e:a1:bb:87:d8:ee:f0:54:36:6f:e7:
04:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1B:A5:A7:68:95:EE:25:88:11:42:05:2C:A2:09:2B:91:41:82:54
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Qhulp2iV7iWIEUIFLKIJK5FBglQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.82.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ea:c5:c2:61:0d:7c:91:ae:26:ce:a7:78:d5:f5:39:d0:de:
37:01:3f:74:12:d4:b8:2d:27:9b:4c:75:54:b5:e0:22:c1:8f:
ce:c8:59:55:1a:49:61:d0:d7:ed:fc:56:5c:f3:00:8e:48:56:
48:d4:90:30:01:e2:44:12:9e:c2:57:8c:61:57:67:70:d6:58:
e4:53:46:29:c3:ff:1e:c2:95:99:7a:83:22:ea:2c:fb:0a:90:
4c:51:81:c4:70:55:68:85:2d:8b:50:32:8b:91:d0:56:0d:00:
26:61:96:6c:16:68:16:f2:6b:2f:7d:90:88:79:f7:22:ec:95:
9d:2b:96:cb:89:58:ba:f1:4b:7a:78:2b:6d:62:5e:94:54:15:
dc:ed:74:fb:6e:12:c0:81:bb:2b:55:6a:96:36:fd:e9:24:b6:
28:53:19:85:af:bf:f8:3a:d6:e9:ba:b7:65:71:61:01:49:96:
dd:55:56:bc:04:11:23:46:fc:20:3d:23:f3:27:b1:b5:63:c7:
45:9f:bd:0c:a1:cf:72:e1:ad:5d:42:a3:07:e7:eb:f9:cf:00:
cb:c3:e5:83:8b:2f:e3:8d:a2:8c:7e:01:e8:71:77:ea:16:18:
f2:8a:21:78:e8:c9:a9:a7:86:26:04:56:19:f7:9a:de:8a:aa:
02:a7:1f:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjB0cNZlV3HQnFxyYv7S/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMTAxMDE0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjFiYTVhNzY4OTVlZTI1ODgxMTQyMDUyY2EyMDkyYjkxNDE4MjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiq4fe/7Dfmpu64ouEUeAFlIZ5oM
gKf5M8Z3Vni135paM1Jqo8hBkB9gGzrmn3DHvPOnpEQlxQVDeBGqoKWMExEG8NNp
RaEBLKy3xzaEvYpETSMG/wr2lFbep/T4hHoAfBxTw8LrfZRwTwlGYDwYhjXD37O5
JrA07/tR7cKvFycK1OPYZGdNdokQFMLQInsBOiniGC1ZwtFB/8NcNWNlJefX1/Br
QB75elTVJ9fahTrfxx6L8gwlY6vnXjKqnDk9XjIYQ0hGHBTks5bHCzB4XwTqbhZm
+2S2/Q+hg5N9Hl1tIpMC4sXXtyv6ky12JPfqAWq2LqG7h9ju8FQ2b+cEvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEIbpadole4liBFCBSyiCSuRQYJUMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvUWh1bHAyaVY3aVdJRVVJRkxLSUpLNUZCZ2xRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUGBSMA0G
CSqGSIb3DQEBCwUAA4IBAQA16sXCYQ18ka4mzqd41fU50N43AT90EtS4LSebTHVU
teAiwY/OyFlVGklh0Nft/FZc8wCOSFZI1JAwAeJEEp7CV4xhV2dw1ljkU0Ypw/8e
wpWZeoMi6iz7CpBMUYHEcFVohS2LUDKLkdBWDQAmYZZsFmgW8msvfZCIefci7JWd
K5bLiVi68Ut6eCttYl6UVBXc7XT7bhLAgbsrVWqWNv3pJLYoUxmFr7/4Otbpurdl
cWEBSZbdVVa8BBEjRvwgPSPzJ7G1Y8dFn70Moc9y4a1dQqMH5+v5zwDLw+WDiy/j
jaKMfgHocXfqFhjyiiF46Mmpp4YmBFYZ95reiqoCpx/T
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:25 2025 by rpki-client