Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa
File: 0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa (raw, json)
Hash identifier: q9HOhDrTziiN8dHNBG3tLes1wQlniZAzuxjJOEin3Rw=
Subject key identifier: D2:A5:B9:63:8C:80:DF:6C:F8:0E:7C:BA:98:82:7E:A8:B5:B6:5D:69
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 019427B498E154746BBC351EE436E804F680
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa
Signing time: Thu 02 Jan 2025 15:48:54 +0000
ROA not before: Thu 02 Jan 2025 15:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47447
IP address blocks: 91.216.248.0/24 maxlen: 24
91.227.74.0/24 maxlen: 24
176.103.220.0/23 maxlen: 23
193.148.68.0/22 maxlen: 22
2a10:fc80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:98:e1:54:74:6b:bc:35:1e:e4:36:e8:04:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Jan 2 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2a5b9638c80df6cf80e7cba98827ea8b5b65d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:57:84:0f:51:f2:65:23:20:34:e2:a6:58:
e0:78:b6:b2:6b:ee:d2:8b:f6:68:b7:35:c0:a5:95:
e8:d2:38:f4:44:21:10:28:78:55:58:44:91:c0:9f:
55:fb:33:ff:5d:6f:df:03:00:90:25:87:8c:c4:8c:
b2:77:19:c0:0d:92:b3:81:9e:f0:ac:fe:7e:87:d1:
71:51:55:58:4d:c0:08:63:37:9b:48:d3:25:cd:28:
ba:94:b9:7c:13:7b:03:e8:91:fe:d0:51:5f:fc:06:
5a:92:7f:8d:e7:12:fa:cc:0d:e6:78:03:ec:93:07:
75:b2:38:09:ef:9a:d0:6d:e7:d7:f2:75:00:1b:df:
af:aa:fc:cb:33:db:ed:5d:47:08:a2:67:b3:75:66:
a5:6a:cd:74:f4:01:39:2c:55:88:c3:de:6c:eb:2a:
14:4b:95:31:e1:9d:79:30:63:16:d0:27:ee:ce:ef:
04:8f:6d:72:88:0b:73:c8:f2:18:86:14:b6:12:9b:
e1:3a:2a:66:fe:1b:04:d4:b8:27:33:a1:9c:a5:f2:
16:45:2f:b9:93:5b:ba:c3:b5:aa:cb:61:47:87:b0:
6a:c2:9f:6f:6a:08:36:a2:19:2e:2a:a0:a1:d8:56:
9b:85:9c:5f:c5:8e:a1:c1:b0:4a:b2:46:bd:6c:c2:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A5:B9:63:8C:80:DF:6C:F8:0E:7C:BA:98:82:7E:A8:B5:B6:5D:69
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.248.0/24
91.227.74.0/24
176.103.220.0/23
193.148.68.0/22
IPv6:
2a10:fc80::/29
Signature Algorithm: sha256WithRSAEncryption
b1:7b:85:58:d6:2c:ed:d9:f5:22:59:4d:a1:2b:66:c1:10:be:
25:5b:83:e8:3c:66:a8:95:71:41:d9:c4:68:44:60:35:c3:bc:
be:dc:65:09:b3:c0:12:85:3b:b8:04:67:5f:be:4d:1f:c7:c0:
3b:1b:07:fc:1d:2b:39:7d:0b:69:5a:30:00:d2:89:13:2d:b8:
6a:4f:1e:20:38:0e:ce:56:90:f7:fe:f9:e1:ae:10:e6:5d:23:
7d:82:f5:9f:e0:af:42:5f:f8:58:2c:68:23:9e:0d:6f:ed:ed:
30:c8:e0:d5:14:a9:0f:5e:e4:1d:88:f1:5e:60:ec:1d:6b:5f:
d6:19:3b:8b:12:90:88:7d:92:8a:e7:4a:c8:b0:2b:a5:de:3e:
cd:eb:9a:7c:4a:66:12:78:42:58:5f:41:d5:ce:07:05:c6:71:
8e:2e:5a:b4:09:2e:21:98:56:84:c3:b8:43:9d:67:75:b3:90:
75:aa:d8:e1:0d:19:74:ad:74:6c:ba:4d:6d:c2:a7:e7:f6:45:
4f:c8:81:8e:83:11:82:f9:7c:df:fa:88:90:bd:2f:3c:8e:b0:
b2:91:d0:11:95:1c:16:19:de:32:47:89:40:3f:47:19:3a:d7:
eb:3e:12:cf:a3:45:19:7d:2d:1f:16:37:fe:80:c4:23:68:f8:
15:74:3e:18
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQntJjhVHRrvDUe5DboBPaAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTc3NmE2OTU1YzAxNjNjOWNmMWE4MzhjNDFkZmVlNWRh
OWRiM2QwHhcNMjUwMTAyMTU0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmE1Yjk2MzhjODBkZjZjZjgwZTdjYmE5ODgyN2VhOGI1YjY1ZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6xXhA9R8mUjIDTipljgeLaya+7S
i/ZotzXApZXo0jj0RCEQKHhVWESRwJ9V+zP/XW/fAwCQJYeMxIyydxnADZKzgZ7w
rP5+h9FxUVVYTcAIYzebSNMlzSi6lLl8E3sD6JH+0FFf/AZakn+N5xL6zA3meAPs
kwd1sjgJ75rQbefX8nUAG9+vqvzLM9vtXUcIomezdWalas109AE5LFWIw95s6yoU
S5Ux4Z15MGMW0Cfuzu8Ej21yiAtzyPIYhhS2EpvhOipm/hsE1LgnM6GcpfIWRS+5
k1u6w7Wqy2FHh7Bqwp9vagg2ohkuKqCh2FabhZxfxY6hwbBKska9bMIHPQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFNKluWOMgN9s+A58upiCfqi1tl1pMB8GA1UdIwQY
MBaAFCKndqaVXAFjyc8ag4xB3+5dqds9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMt
YWYxZGUzZDBmMjE3LzEvMHFXNVk0eUEzMno0RG55Nm1JSi1xTFcyWFdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81Y2VkOGYtZDAyNC00NWJiLTkyMmMtYWYxZGUzZDBmMjE3
LzEvSXFkMnBwVmNBV1BKenhxRGpFSGY3bDJwMnowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAW9j4AwQA
W+NKAwQBsGfcAwQCwZREMA0EAgACMAcDBQMqEPyAMA0GCSqGSIb3DQEBCwUAA4IB
AQCxe4VY1izt2fUiWU2hK2bBEL4lW4PoPGaolXFB2cRoRGA1w7y+3GUJs8AShTu4
BGdfvk0fx8A7Gwf8HSs5fQtpWjAA0okTLbhqTx4gOA7OVpD3/vnhrhDmXSN9gvWf
4K9CX/hYLGgjng1v7e0wyODVFKkPXuQdiPFeYOwda1/WGTuLEpCIfZKK50rIsCul
3j7N65p8SmYSeEJYX0HVzgcFxnGOLlq0CS4hmFaEw7hDnWd1s5B1qtjhDRl0rXRs
uk1twqfn9kVPyIGOgxGC+Xzf+oiQvS88jrCykdARlRwWGd4yR4lAP0cZOtfrPhLP
o0UZfS0fFjf+gMQjaPgVdD4Y
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:01 2025 by rpki-client