Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/qQSd71qvgVE6AEMVf4NRXim3Uqc.roa
File: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (raw, json)
Hash identifier: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=
Subject key identifier: A9:04:9D:EF:5A:AF:81:51:3A:00:43:15:7F:83:51:5E:29:B7:52:A7
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 019423D8015609754164B4E97E27E511E073
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/qQSd71qvgVE6AEMVf4NRXim3Uqc.roa
Signing time: Wed 01 Jan 2025 21:49:06 +0000
ROA not before: Wed 01 Jan 2025 21:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12306
IP address blocks: 193.202.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:01:56:09:75:41:64:b4:e9:7e:27:e5:11:e0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9049def5aaf81513a0043157f83515e29b752a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:f3:31:bb:e3:50:d9:33:f6:b8:fd:0c:15:
29:c2:a1:1e:76:6d:cc:12:42:21:62:36:d7:5f:b7:
91:ac:ca:36:40:20:53:a1:fe:7b:b9:91:c4:70:33:
94:0a:fc:55:cb:0b:f4:b4:64:44:16:e3:18:42:51:
bc:a2:d2:5b:ed:7b:4c:4b:73:f2:b0:48:01:10:bc:
bb:08:ec:61:24:d2:2e:8c:d6:c4:fd:dc:ba:fd:fc:
5e:27:d8:b7:74:33:5f:37:47:7e:3c:b7:7f:09:d3:
a9:11:32:4d:81:4b:c2:f2:83:2e:c6:ed:87:2b:1e:
e2:e1:08:d4:1c:79:9f:5a:26:fe:a1:df:b9:a3:17:
67:1f:72:c5:c9:25:62:d7:7d:b4:13:ca:e2:e0:d3:
7e:93:17:06:97:28:5f:8b:cb:26:6b:14:03:6a:60:
40:da:8b:f6:62:f4:9c:98:e6:48:1f:a3:81:93:97:
68:28:75:60:f3:7e:65:45:32:e3:ce:35:4c:79:c4:
ed:b6:cb:c4:3b:d0:6e:13:23:d6:5e:c7:22:09:2b:
02:26:ac:b7:3b:70:1b:51:43:bb:a2:70:5b:80:46:
01:23:2d:53:c2:05:fe:db:41:4a:56:fb:e5:0a:3e:
fa:23:ee:1d:f7:c8:2f:07:b8:41:6f:b1:12:02:e0:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:04:9D:EF:5A:AF:81:51:3A:00:43:15:7F:83:51:5E:29:B7:52:A7
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/qQSd71qvgVE6AEMVf4NRXim3Uqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.119.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b1:69:1d:71:63:2b:87:fe:67:18:91:56:dd:d0:02:ab:ee:
8f:f2:6e:e3:04:fa:7e:79:e3:22:a8:8c:88:e7:d4:96:6c:cd:
dd:fd:be:92:79:5d:d3:bb:ce:04:53:ba:47:49:31:a5:21:ea:
96:49:93:96:54:fe:d4:98:e5:52:26:22:3a:72:8f:a3:7f:3e:
52:18:22:09:4e:21:d3:48:c1:9f:5b:e3:8d:65:ed:b8:d3:77:
79:92:34:ae:ac:8c:b7:e6:3f:36:a4:52:67:7f:55:cb:44:0f:
0a:fc:d7:34:a7:4c:ab:b3:90:dd:79:09:61:ba:12:02:41:4d:
54:35:c0:bb:b1:3f:13:bd:b8:3f:a5:cc:e8:5a:08:4d:6d:b9:
31:93:b6:d6:92:77:ad:71:07:7e:3d:c2:e0:b6:91:72:f9:37:
92:15:bd:60:15:63:ad:cd:87:be:dd:be:9c:db:75:9e:ff:c8:
4d:48:6e:83:48:0c:37:be:f3:9a:86:22:1b:86:e5:bf:ab:73:
06:68:fb:35:7b:e9:ad:1b:86:2a:20:4c:b7:02:c2:df:39:2f:
d7:21:e3:a0:b8:a4:5b:7c:a1:09:a0:1a:9f:79:17:c0:a0:20:
0b:c0:07:d8:dd:09:8d:6b:08:97:b1:57:86:10:39:23:e2:d8:
53:bf:59:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj2AFWCXVBZLTpfiflEeBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZWFiMTliZWMyMjJjNzA1YTFlYjAzYTgwZGYzNDE1Mzlk
OTdmMTQwHhcNMjUwMTAxMjE0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTA0OWRlZjVhYWY4MTUxM2EwMDQzMTU3ZjgzNTE1ZTI5Yjc1MmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8fzMbvjUNkz9rj9DBUpwqEedm3M
EkIhYjbXX7eRrMo2QCBTof57uZHEcDOUCvxVywv0tGREFuMYQlG8otJb7XtMS3Py
sEgBELy7COxhJNIujNbE/dy6/fxeJ9i3dDNfN0d+PLd/CdOpETJNgUvC8oMuxu2H
Kx7i4QjUHHmfWib+od+5oxdnH3LFySVi1320E8ri4NN+kxcGlyhfi8smaxQDamBA
2ov2YvScmOZIH6OBk5doKHVg835lRTLjzjVMecTttsvEO9BuEyPWXsciCSsCJqy3
O3AbUUO7onBbgEYBIy1TwgX+20FKVvvlCj76I+4d98gvB7hBb7ESAuAKnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKkEne9ar4FROgBDFX+DUV4pt1KnMB8GA1UdIwQY
MBaAFJbqsZvsIixwWh6wOoDfNBU52X8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmIt
NDEwMDYxZTM1NzZhLzEvcVFTZDcxcXZnVkU2QUVNVmY0TlJYaW0zVXFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmItNDEwMDYxZTM1NzZh
LzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcp3MA0G
CSqGSIb3DQEBCwUAA4IBAQBZsWkdcWMrh/5nGJFW3dACq+6P8m7jBPp+eeMiqIyI
59SWbM3d/b6SeV3Tu84EU7pHSTGlIeqWSZOWVP7UmOVSJiI6co+jfz5SGCIJTiHT
SMGfW+ONZe2403d5kjSurIy35j82pFJnf1XLRA8K/Nc0p0yrs5DdeQlhuhICQU1U
NcC7sT8Tvbg/pczoWghNbbkxk7bWknetcQd+PcLgtpFy+TeSFb1gFWOtzYe+3b6c
23We/8hNSG6DSAw3vvOahiIbhuW/q3MGaPs1e+mtG4YqIEy3AsLfOS/XIeOguKRb
fKEJoBqfeRfAoCALwAfY3QmNawiXsVeGEDkj4thTv1n+
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:36 2025 by rpki-client