Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa
File: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (raw, json)
Hash identifier: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=
Subject key identifier: 3D:01:3E:31:6F:DF:B7:B3:4E:BA:52:37:9E:E0:37:4E:DA:9D:F7:33
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 01942444E2538A7A714BEC9EF6A5BC293BB3
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa
Signing time: Wed 01 Jan 2025 23:48:01 +0000
ROA not before: Wed 01 Jan 2025 23:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209504
IP address blocks: 185.125.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e2:53:8a:7a:71:4b:ec:9e:f6:a5:bc:29:3b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Jan 1 23:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d013e316fdfb7b34eba52379ee0374eda9df733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:17:3f:1f:6c:5b:b3:00:f2:1b:33:b5:d8:
a4:f3:51:34:57:71:8c:4f:41:45:7d:d1:f4:35:8c:
31:e4:18:93:bd:8c:17:51:8a:29:fb:65:8c:b6:78:
83:6d:16:3f:61:68:66:72:54:dd:1f:dc:a2:c6:86:
96:0f:a2:e7:81:0a:dc:ae:3b:04:3a:72:46:b1:d2:
b1:a4:29:c3:44:a5:62:30:16:40:1e:05:1b:a7:69:
bf:9c:3b:f5:40:86:73:3e:ed:55:cb:ea:ca:7c:0c:
6d:38:f0:85:91:c8:c0:ab:45:90:70:6a:90:f8:85:
d7:62:43:01:90:e0:e0:1f:7c:d5:bb:08:ec:43:cc:
62:94:a2:7d:22:8a:6d:a9:53:47:93:ce:e9:ef:74:
df:c3:3c:42:78:f3:46:a4:86:09:77:b5:88:93:72:
2d:c9:06:f5:9d:6a:9f:98:18:96:9a:42:e1:60:40:
20:cd:15:bb:07:15:f2:89:e0:ef:cb:f6:42:a3:0c:
32:58:26:b4:61:12:60:a9:8f:05:03:0a:de:ab:f9:
7d:ba:e8:48:1b:f8:62:d1:90:4e:66:1d:ea:07:2c:
e0:af:91:1a:88:de:3c:11:f8:03:ef:3f:2f:57:22:
1d:f1:e6:ef:96:90:77:d4:5f:38:23:5d:aa:9d:5e:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:01:3E:31:6F:DF:B7:B3:4E:BA:52:37:9E:E0:37:4E:DA:9D:F7:33
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.90.0/24
Signature Algorithm: sha256WithRSAEncryption
47:be:67:3a:21:ee:fe:f0:5b:de:5b:30:c3:54:53:3b:2f:34:
1f:6d:46:df:6d:ae:05:99:2e:9d:78:a1:2b:e5:b0:6a:81:9a:
c2:03:48:f9:c3:43:4d:40:2e:5a:20:0e:76:d0:6c:e7:70:db:
91:00:87:20:4d:17:b1:87:40:05:2b:9d:86:0e:f6:bd:b0:41:
50:1b:4f:a0:b9:f7:8d:50:10:01:02:13:7d:ec:72:a6:56:2f:
92:a4:c6:e6:68:bf:2a:c7:9d:dd:6d:d1:c2:f9:96:e0:9c:1f:
3b:a2:4e:e3:2d:5b:9b:8a:9b:e2:0c:60:5d:18:08:d5:50:f0:
3e:38:53:ba:80:45:d0:b5:ba:1f:4d:4a:cb:57:62:e2:2a:45:
5a:84:1b:28:3b:30:f2:8f:6d:ee:4b:2c:4d:98:22:af:cb:ad:
a8:d5:54:76:27:34:c3:34:91:9f:ca:d4:03:0f:76:86:d6:6a:
68:14:72:fa:12:6a:7c:d7:40:6c:5b:9c:11:37:ff:2c:68:66:
ae:95:e6:0f:7d:5e:6b:a3:b8:d3:a8:68:71:45:cd:38:30:dc:
df:4d:ad:1d:16:2b:bf:04:0c:2f:f6:18:7f:20:1b:44:91:1c:
b9:8a:46:cc:01:0f:52:a2:a3:6f:a1:05:7d:67:fb:70:2c:18:
d7:87:aa:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkROJTinpxS+ye9qW8KTuzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy
ZjM5NzEwHhcNMjUwMTAxMjM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDAxM2UzMTZmZGZiN2IzNGViYTUyMzc5ZWUwMzc0ZWRhOWRmNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUcXPx9sW7MA8hsztdik81E0V3GM
T0FFfdH0NYwx5BiTvYwXUYop+2WMtniDbRY/YWhmclTdH9yixoaWD6LngQrcrjsE
OnJGsdKxpCnDRKViMBZAHgUbp2m/nDv1QIZzPu1Vy+rKfAxtOPCFkcjAq0WQcGqQ
+IXXYkMBkODgH3zVuwjsQ8xilKJ9IoptqVNHk87p73TfwzxCePNGpIYJd7WIk3It
yQb1nWqfmBiWmkLhYEAgzRW7BxXyieDvy/ZCowwyWCa0YRJgqY8FAwreq/l9uuhI
G/hi0ZBOZh3qByzgr5EaiN48EfgD7z8vVyId8ebvlpB31F84I12qnV5mGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0BPjFv37ezTrpSN57gN07anfczMB8GA1UdIwQY
MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt
NzA0NDYzZWJhZDM2LzEvUFFFLU1XX2Z0N05PdWxJM251QTNUdHFkOXpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2
LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX1aMA0G
CSqGSIb3DQEBCwUAA4IBAQBHvmc6Ie7+8FveWzDDVFM7LzQfbUbfba4FmS6deKEr
5bBqgZrCA0j5w0NNQC5aIA520GzncNuRAIcgTRexh0AFK52GDva9sEFQG0+gufeN
UBABAhN97HKmVi+SpMbmaL8qx53dbdHC+ZbgnB87ok7jLVubipviDGBdGAjVUPA+
OFO6gEXQtbofTUrLV2LiKkVahBsoOzDyj23uSyxNmCKvy62o1VR2JzTDNJGfytQD
D3aG1mpoFHL6Emp810BsW5wRN/8saGauleYPfV5ro7jTqGhxRc04MNzfTa0dFiu/
BAwv9hh/IBtEkRy5ikbMAQ9SoqNvoQV9Z/twLBjXh6qt
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:40 2025 by rpki-client