Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/kqno_oeousw5ueAimcHkmEBcyD8.roa
File: kqno_oeousw5ueAimcHkmEBcyD8.roa (raw, json)
Hash identifier: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=
Subject key identifier: 92:A9:E8:FE:87:A8:BA:CC:39:B9:E0:22:99:C1:E4:98:40:5C:C8:3F
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0194258F8E43F0FEA56F9F31EA948E412527
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/kqno_oeousw5ueAimcHkmEBcyD8.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57217
IP address blocks: 46.174.200.0/22 maxlen: 22
91.237.91.0/24 maxlen: 24
176.107.64.0/21 maxlen: 21
176.116.224.0/22 maxlen: 22
176.121.32.0/21 maxlen: 21
176.121.40.0/21 maxlen: 21
176.121.104.0/22 maxlen: 22
193.36.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8e:43:f0:fe:a5:6f:9f:31:ea:94:8e:41:25:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92a9e8fe87a8bacc39b9e02299c1e498405cc83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:bc:ad:04:2f:5f:26:b1:f2:bd:27:e7:2b:
73:9d:fd:47:8f:b9:f5:0d:f9:64:ec:5a:e5:19:d8:
34:88:f4:e6:3e:cd:06:f8:14:ff:b1:4d:6e:4c:50:
e5:f3:07:0b:c1:94:bb:cc:9c:c6:13:04:c6:43:89:
bc:3a:ba:bf:ac:50:1f:a9:0b:3d:c6:0a:05:d3:ac:
2b:e3:e1:43:77:0f:c2:36:48:ed:63:d0:0a:fe:d7:
ff:22:a2:ba:2e:86:04:25:cc:7b:e8:8d:87:6b:a2:
41:2c:26:53:d3:77:21:8a:c9:e0:43:97:72:32:5c:
dc:43:00:c7:d2:ed:b2:0f:d6:57:4a:f8:a0:84:2b:
92:d2:09:99:84:68:80:39:0f:61:fe:1d:58:bb:fc:
70:16:5b:51:8f:ac:a1:72:cf:a9:2d:71:18:34:4d:
2d:f8:b7:65:ca:dd:24:cd:40:2a:f9:9e:6c:b9:81:
d2:b1:91:86:16:e6:3e:af:5f:91:12:d6:0f:9f:47:
f6:96:dd:b9:f7:5c:bf:f4:d5:8b:6b:a4:d5:32:89:
88:06:94:26:8a:8f:cd:db:f4:66:da:58:d0:36:64:
99:98:c1:d1:99:9d:76:49:4e:97:d7:50:81:fd:83:
20:cf:ff:ef:fa:90:65:ed:0a:d2:cd:f4:96:0b:68:
ba:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A9:E8:FE:87:A8:BA:CC:39:B9:E0:22:99:C1:E4:98:40:5C:C8:3F
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/kqno_oeousw5ueAimcHkmEBcyD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.200.0/22
91.237.91.0/24
176.107.64.0/21
176.116.224.0/22
176.121.32.0/20
176.121.104.0/22
193.36.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:3a:e0:da:c8:87:27:80:b6:3f:3c:c8:0c:50:d3:b9:e0:fd:
4a:95:75:a1:ac:8e:bb:3c:e3:bd:33:63:86:d1:d5:cd:c5:4f:
78:33:16:be:9d:4d:9c:67:e4:84:54:ac:a9:e4:71:dc:62:18:
d5:32:e3:b9:e8:fa:03:f1:84:ac:ed:f0:a6:63:cc:c0:34:67:
b5:a7:31:a2:ca:8a:f2:5f:fa:c7:b6:e6:d4:1a:41:26:80:0d:
77:b7:62:91:37:21:1b:91:08:d3:6d:0e:cb:bd:64:c4:00:ad:
54:93:db:40:a6:c5:94:c2:e9:ec:eb:41:5d:b7:95:e0:f6:28:
9a:a8:32:85:9d:8c:ba:3a:d5:98:70:92:da:74:d7:1a:15:bb:
3c:33:3e:c5:ef:ff:71:9d:f3:b6:09:fc:53:32:16:88:12:7d:
4f:3a:73:a6:77:4d:b1:6e:7a:2c:52:85:df:1e:a1:fd:62:e0:
86:c9:cf:30:cc:fc:af:16:82:6e:cd:9b:6c:8b:2b:9f:6a:8c:
ce:3f:67:18:cb:ab:02:f5:12:bf:e5:5f:bb:24:88:94:5b:f1:
d7:01:96:ca:06:54:50:e4:25:88:0e:a1:59:25:9b:3d:6c:dd:
70:e4:06:31:8e:71:00:d7:7a:cc:4f:5d:14:2d:70:9d:a0:e2:
32:87:03:fe
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQlj45D8P6lb58x6pSOQSUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjUwMTAyMDU0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmE5ZThmZTg3YThiYWNjMzliOWUwMjI5OWMxZTQ5ODQwNWNjODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxm8rQQvXyax8r0n5ytznf1Hj7n1
Dflk7FrlGdg0iPTmPs0G+BT/sU1uTFDl8wcLwZS7zJzGEwTGQ4m8Orq/rFAfqQs9
xgoF06wr4+FDdw/CNkjtY9AK/tf/IqK6LoYEJcx76I2Ha6JBLCZT03chisngQ5dy
MlzcQwDH0u2yD9ZXSvighCuS0gmZhGiAOQ9h/h1Yu/xwFltRj6yhcs+pLXEYNE0t
+Ldlyt0kzUAq+Z5suYHSsZGGFuY+r1+REtYPn0f2lt2591y/9NWLa6TVMomIBpQm
io/N2/Rm2ljQNmSZmMHRmZ12SU6X11CB/YMgz//v+pBl7QrSzfSWC2i6YwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFJKp6P6HqLrMObngIpnB5JhAXMg/MB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEva3Fub19vZW91c3c1dWVBaW1jSGttRUJjeUQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLq7IAwQA
W+1bAwQDsGtAAwQCsHTgAwQEsHkgAwQCsHloAwQCwSTYMA0GCSqGSIb3DQEBCwUA
A4IBAQB8OuDayIcngLY/PMgMUNO54P1KlXWhrI67POO9M2OG0dXNxU94Mxa+nU2c
Z+SEVKyp5HHcYhjVMuO56PoD8YSs7fCmY8zANGe1pzGiyoryX/rHtubUGkEmgA13
t2KRNyEbkQjTbQ7LvWTEAK1Uk9tApsWUwuns60Fdt5Xg9iiaqDKFnYy6OtWYcJLa
dNcaFbs8Mz7F7/9xnfO2CfxTMhaIEn1POnOmd02xbnosUoXfHqH9YuCGyc8wzPyv
FoJuzZtsiyufaozOP2cYy6sC9RK/5V+7JIiUW/HXAZbKBlRQ5CWIDqFZJZs9bN1w
5AYxjnEA13rMT10ULXCdoOIyhwP+
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:50 2025 by rpki-client