Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/PQ_yvQsZl8a1BJZelz18O8KYziI.roa
File: PQ_yvQsZl8a1BJZelz18O8KYziI.roa (raw, json)
Hash identifier: a9+EgNIf1zhqdc2reiY/K2IYhXxlOzKE9JswUeuIGNI=
Subject key identifier: 3D:0F:F2:BD:0B:19:97:C6:B5:04:96:5E:97:3D:7C:3B:C2:98:CE:22
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 019425FCB1DE04C6C25296B171507EBD5413
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/PQ_yvQsZl8a1BJZelz18O8KYziI.roa
Signing time: Thu 02 Jan 2025 07:48:25 +0000
ROA not before: Thu 02 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50182
IP address blocks: 194.247.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:b1:de:04:c6:c2:52:96:b1:71:50:7e:bd:54:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Jan 2 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d0ff2bd0b1997c6b504965e973d7c3bc298ce22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:f5:56:ec:14:60:7c:a0:22:94:9d:9f:fc:
4e:59:b6:13:bb:da:6f:53:2d:18:09:e1:43:99:3a:
92:5a:b7:37:cd:c9:0b:53:67:42:59:16:a4:79:8a:
5f:de:04:a1:95:f5:b2:7c:76:20:0b:b3:2d:70:d9:
dc:fd:85:a8:16:84:4a:78:09:fc:5a:92:bf:b0:0a:
78:04:03:86:d9:c5:9b:11:9b:24:19:cb:d2:91:55:
93:52:d5:ad:b4:16:22:aa:d8:c4:46:88:81:90:50:
03:66:b5:b3:f0:c7:84:a7:ee:f3:58:20:8a:d0:44:
b1:82:1a:3f:db:b0:0f:bf:8d:8c:8b:b3:58:cb:8b:
f3:2f:d9:84:fa:78:bc:ea:82:d0:c4:ec:27:70:cf:
02:61:2d:0a:e4:50:1b:55:93:98:22:83:ed:c4:3c:
5f:be:d4:32:64:46:8a:1f:3f:02:40:a7:ca:f3:42:
54:2b:b8:99:db:e1:b9:a7:f3:d3:ef:1f:b7:35:47:
89:21:96:64:b6:82:79:e6:50:d3:fd:10:1f:7d:63:
de:92:21:fc:03:42:c3:8e:e6:ca:08:e5:44:eb:76:
aa:71:8b:04:62:62:b6:16:42:0a:12:18:71:f3:37:
63:e1:30:86:d5:7f:ed:ab:47:c0:79:f5:f1:e8:d2:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0F:F2:BD:0B:19:97:C6:B5:04:96:5E:97:3D:7C:3B:C2:98:CE:22
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/PQ_yvQsZl8a1BJZelz18O8KYziI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.190.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:7a:71:b9:f4:99:68:6b:33:e4:d8:16:db:bd:9c:99:bf:c5:
8c:45:0a:dd:da:88:c9:99:d3:73:10:15:94:1a:78:1c:e8:99:
9b:db:23:cf:52:bb:f9:6f:b1:86:3a:ce:04:d0:b8:6d:a9:f0:
22:8b:d9:e9:a0:26:5b:ee:50:14:43:18:85:c3:98:9e:44:b3:
62:38:60:54:fa:0b:08:7e:17:4b:72:7a:d3:f3:82:0a:64:5c:
3a:18:00:c4:63:20:2c:12:7b:9e:cd:6c:75:c9:a7:d1:4d:19:
82:f6:16:cd:5d:2b:f3:8d:a3:e3:fc:07:02:95:c8:d2:d5:3e:
e7:28:7e:90:ec:54:fc:34:b9:e5:e0:77:b0:83:d0:a3:b6:16:
d9:34:28:b8:6f:1a:c0:1b:bb:c2:30:c1:ce:14:ad:af:06:14:
15:77:e2:58:df:7e:13:42:66:62:dd:ee:8e:ff:8b:e2:89:ad:
35:38:3b:fe:7b:dd:9e:7f:0f:6d:7b:40:9c:12:ad:82:6d:9e:
39:9b:f7:9b:07:e1:8a:8d:17:94:ce:f2:36:ce:ec:f3:0a:84:
83:a3:0f:bf:cb:9f:7c:86:f8:6b:60:2e:99:c5:fc:e2:66:56:
bd:63:6d:34:8a:21:50:8c:35:fb:a0:41:76:87:6c:2a:42:4b:
44:5b:88:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/LHeBMbCUpaxcVB+vVQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjFlYWJiZTVlZTBjMDQ5NjgwZTJhYmM5NTUzNDM5ZWM2
NDNjMGIwHhcNMjUwMTAyMDc0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDBmZjJiZDBiMTk5N2M2YjUwNDk2NWU5NzNkN2MzYmMyOThjZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkST1VuwUYHygIpSdn/xOWbYTu9pv
Uy0YCeFDmTqSWrc3zckLU2dCWRakeYpf3gShlfWyfHYgC7MtcNnc/YWoFoRKeAn8
WpK/sAp4BAOG2cWbEZskGcvSkVWTUtWttBYiqtjERoiBkFADZrWz8MeEp+7zWCCK
0ESxgho/27APv42Mi7NYy4vzL9mE+ni86oLQxOwncM8CYS0K5FAbVZOYIoPtxDxf
vtQyZEaKHz8CQKfK80JUK7iZ2+G5p/PT7x+3NUeJIZZktoJ55lDT/RAffWPekiH8
A0LDjubKCOVE63aqcYsEYmK2FkIKEhhx8zdj4TCG1X/tq0fAefXx6NKerQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0P8r0LGZfGtQSWXpc9fDvCmM4iMB8GA1UdIwQY
MBaAFJOx6rvl7gwEloDiq8lVNDnsZDwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdIcXUtWHVEQVNXZ09LcnlWVTBPZXhrUEFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xYjUxMmItMjE1OS00ZjljLWEwYmYt
OWQyOGJmNWVmM2MxLzEvUFFfeXZRc1psOGExQkpaZWx6MThPOEtZemlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xYjUxMmItMjE1OS00ZjljLWEwYmYtOWQyOGJmNWVmM2Mx
LzEvazdIcXUtWHVEQVNXZ09LcnlWVTBPZXhrUEFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwve+MA0G
CSqGSIb3DQEBCwUAA4IBAQB7enG59JloazPk2BbbvZyZv8WMRQrd2ojJmdNzEBWU
Gngc6Jmb2yPPUrv5b7GGOs4E0LhtqfAii9npoCZb7lAUQxiFw5ieRLNiOGBU+gsI
fhdLcnrT84IKZFw6GADEYyAsEnuezWx1yafRTRmC9hbNXSvzjaPj/AcClcjS1T7n
KH6Q7FT8NLnl4Hewg9CjthbZNCi4bxrAG7vCMMHOFK2vBhQVd+JY334TQmZi3e6O
/4viia01ODv+e92efw9te0CcEq2CbZ45m/ebB+GKjReUzvI2zuzzCoSDow+/y598
hvhrYC6ZxfziZla9Y200iiFQjDX7oEF2h2wqQktEW4hi
-----END CERTIFICATE-----
Generated at Sun Feb 2 14:38:29 2025 by rpki-client