Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/qfUgWmjDBIJJxDCL7jiouOIMq6E.roa
File: qfUgWmjDBIJJxDCL7jiouOIMq6E.roa (raw, json)
Hash identifier: 8LoPzts8EEAcumqZ7LuONp4lduak/H5FziwN8+pOFJE=
Subject key identifier: A9:F5:20:5A:68:C3:04:82:49:C4:30:8B:EE:38:A8:B8:E2:0C:AB:A1
Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial: 019427B577DC89D1A191560931CE9DFF03EA
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/qfUgWmjDBIJJxDCL7jiouOIMq6E.roa
Signing time: Thu 02 Jan 2025 15:49:51 +0000
ROA not before: Thu 02 Jan 2025 15:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57826
IP address blocks: 176.108.64.0/19 maxlen: 19
176.108.64.0/24 maxlen: 24
176.108.65.0/24 maxlen: 24
176.108.66.0/24 maxlen: 24
176.108.67.0/24 maxlen: 24
176.108.68.0/22 maxlen: 22
176.108.72.0/22 maxlen: 22
176.108.76.0/22 maxlen: 22
176.108.80.0/24 maxlen: 24
176.108.81.0/24 maxlen: 24
176.108.82.0/24 maxlen: 24
176.108.83.0/24 maxlen: 24
176.108.84.0/24 maxlen: 24
176.108.85.0/24 maxlen: 24
176.108.86.0/24 maxlen: 24
176.108.87.0/24 maxlen: 24
176.108.88.0/22 maxlen: 22
176.108.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:77:dc:89:d1:a1:91:56:09:31:ce:9d:ff:03:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Validity
Not Before: Jan 2 15:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9f5205a68c3048249c4308bee38a8b8e20caba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ca:95:d6:58:fc:79:e3:44:b6:ad:2b:69:f2:
dc:f2:9e:cb:26:6f:75:c2:3c:61:48:75:ee:e2:ba:
f7:32:cd:ba:b1:d8:90:56:54:0d:b8:3c:17:f5:ef:
82:73:93:ef:27:a0:2f:fa:4b:a4:85:2f:12:b2:f2:
09:0c:cd:1e:f0:56:5e:f8:f2:2e:7e:d7:f7:38:60:
f2:54:bf:8a:be:ac:bc:5c:f3:88:c5:9f:c7:15:71:
de:5a:a5:f4:b4:bb:79:d2:62:60:97:f8:29:4f:61:
6e:df:03:6f:4e:7f:45:96:c6:be:3f:ec:10:b4:bd:
9f:08:2f:c1:5f:a7:ed:98:73:c7:3f:d1:97:d4:9e:
52:53:d4:fa:9e:57:cb:2b:5f:02:b1:fa:ff:bd:5b:
ee:0a:e8:b2:c1:5c:d6:c0:cb:6c:54:91:5e:3f:0b:
ea:8d:6a:f8:27:bd:a6:b5:a2:d2:ec:12:a1:1d:bd:
3c:28:9c:2f:73:a0:eb:bb:0b:b9:0d:9b:2e:13:ae:
23:1c:a7:35:d8:7c:79:6d:2b:55:ce:27:56:4d:33:
2e:3c:da:08:fc:4f:c6:e1:e1:de:e1:3b:00:f0:b9:
4e:cf:46:5e:c9:02:f4:57:5d:8c:97:ce:f4:ba:16:
8c:dc:86:f9:47:d5:9c:95:33:8c:6b:97:07:07:cb:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F5:20:5A:68:C3:04:82:49:C4:30:8B:EE:38:A8:B8:E2:0C:AB:A1
X509v3 Authority Key Identifier:
keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/qfUgWmjDBIJJxDCL7jiouOIMq6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.64.0/19
Signature Algorithm: sha256WithRSAEncryption
25:99:a6:8f:8e:fd:35:36:05:b3:52:67:25:b2:13:ec:6c:eb:
16:e2:b1:8b:49:13:d2:5a:cb:3c:85:fb:4d:3a:dc:41:65:e3:
a6:b2:34:14:a3:0c:1e:ae:bb:21:02:21:c6:5f:b0:f8:48:cd:
36:5c:c7:f0:ae:26:a6:9b:22:4d:55:21:8a:ed:07:b5:a4:86:
49:e2:c7:4b:35:47:83:ce:ad:3c:1c:27:fa:e7:59:e5:7d:f6:
b4:82:0e:73:a2:43:9d:49:22:36:36:71:2d:4c:2e:83:57:6e:
57:c8:d0:cb:90:b9:a4:1a:88:4c:a4:1a:c1:e7:13:4f:99:68:
28:7c:41:6d:9d:2b:f5:9d:16:57:f5:09:8e:6c:8b:11:9b:b9:
94:7b:8d:f7:74:20:e3:f1:20:2e:d8:d5:ca:cc:7a:d1:36:62:
df:fc:4f:e8:9d:21:12:07:25:e1:c4:ea:02:35:3d:4f:08:2c:
90:cf:21:9e:0b:ed:e9:ae:9c:9b:b2:99:8d:89:ce:54:08:9c:
b9:95:fc:a3:98:bb:92:1a:c2:ef:78:99:e7:84:02:b3:f7:8b:
88:ad:08:5f:92:ab:9b:e8:ce:3a:05:bb:f9:41:1c:0b:46:83:
ef:43:23:62:24:6e:e1:ba:62:a9:fa:ac:40:79:d7:ef:3d:66:
ce:cf:be:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntXfcidGhkVYJMc6d/wPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZmI1MjZhMzNmMzY2YWE4OTQ2MTg4ZTVkMzI2YmRjZTQ2
ZTJjNDAwHhcNMjUwMTAyMTU0OTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWY1MjA1YTY4YzMwNDgyNDljNDMwOGJlZTM4YThiOGUyMGNhYmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sqV1lj8eeNEtq0rafLc8p7LJm91
wjxhSHXu4rr3Ms26sdiQVlQNuDwX9e+Cc5PvJ6Av+kukhS8SsvIJDM0e8FZe+PIu
ftf3OGDyVL+Kvqy8XPOIxZ/HFXHeWqX0tLt50mJgl/gpT2Fu3wNvTn9Flsa+P+wQ
tL2fCC/BX6ftmHPHP9GX1J5SU9T6nlfLK18Csfr/vVvuCuiywVzWwMtsVJFePwvq
jWr4J72mtaLS7BKhHb08KJwvc6Druwu5DZsuE64jHKc12Hx5bStVzidWTTMuPNoI
/E/G4eHe4TsA8LlOz0ZeyQL0V12Ml870uhaM3Ib5R9WclTOMa5cHB8tTmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKn1IFpowwSCScQwi+44qLjiDKuhMB8GA1UdIwQY
MBaAFNX7Umoz82aqiUYYjl0ya9zkbixAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80YTI3Y2ItOGNkNi00NWNjLTgyNDYt
MGU5ZDNlY2E0NGMyLzEvcWZVZ1dtakRCSUpKeERDTDdqaW91T0lNcTZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS80YTI3Y2ItOGNkNi00NWNjLTgyNDYtMGU5ZDNlY2E0NGMy
LzEvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFsGxAMA0G
CSqGSIb3DQEBCwUAA4IBAQAlmaaPjv01NgWzUmclshPsbOsW4rGLSRPSWss8hftN
OtxBZeOmsjQUowwerrshAiHGX7D4SM02XMfwriammyJNVSGK7Qe1pIZJ4sdLNUeD
zq08HCf651nlffa0gg5zokOdSSI2NnEtTC6DV25XyNDLkLmkGohMpBrB5xNPmWgo
fEFtnSv1nRZX9QmObIsRm7mUe433dCDj8SAu2NXKzHrRNmLf/E/onSESByXhxOoC
NT1PCCyQzyGeC+3prpybspmNic5UCJy5lfyjmLuSGsLveJnnhAKz94uIrQhfkqub
6M46Bbv5QRwLRoPvQyNiJG7humKp+qxAedfvPWbOz75n
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:33 2025 by rpki-client