Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/qlvT_rfUG4ejf4QxIhtwR0KVBaU.roa
File: qlvT_rfUG4ejf4QxIhtwR0KVBaU.roa (raw, json)
Hash identifier: cEPHwqf9ZGQy4f5t4JvJXVhOqo0mssjCD9DkTCC84C4=
Subject key identifier: AA:5B:D3:FE:B7:D4:1B:87:A3:7F:84:31:22:1B:70:47:42:95:05:A5
Certificate issuer: /CN=1034068b5e9f7314277e2be9726c732131b1756c
Certificate serial: 01941FFA6A4C25B1ABC890BE7094EB44738E
Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/qlvT_rfUG4ejf4QxIhtwR0KVBaU.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206350
IP address blocks: 62.231.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6a:4c:25:b1:ab:c8:90:be:70:94:eb:44:73:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa5bd3feb7d41b87a37f8431221b7047429505a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:3e:9c:cf:66:e7:30:4a:e7:5e:b3:9f:62:
fa:c6:df:2c:f1:57:9e:18:a0:e5:c7:a2:09:f3:af:
60:2f:55:f3:2a:76:97:3c:c6:55:41:26:83:ca:8d:
33:de:50:0d:2f:90:44:da:ec:a4:57:b7:61:4c:97:
71:b1:d7:79:3e:41:a8:73:26:a4:c3:df:47:c0:72:
4f:f5:cf:6e:16:00:f6:98:4f:0f:52:7d:ca:e3:50:
ce:c7:94:22:17:25:0e:ee:1c:2e:a8:78:32:d5:36:
8a:0f:ed:40:66:c7:de:ac:cb:94:fc:bc:90:27:20:
ae:10:8e:58:d0:99:02:23:3e:05:2e:d7:26:13:ac:
38:41:f1:23:86:7d:2f:76:8a:7c:44:38:72:95:90:
e7:a4:e0:1a:6e:55:ed:8e:e0:1c:0b:25:50:4c:f0:
91:d1:9d:17:43:a4:62:91:7d:92:96:a1:df:77:6a:
6d:9e:ce:cf:93:75:4d:be:bc:0a:07:d9:4e:22:41:
75:48:e0:40:09:42:b2:3d:b2:d1:30:85:6d:f2:33:
9a:e2:fa:17:2e:83:12:0c:0d:3f:7e:c2:c2:ff:40:
07:60:c5:34:bd:e9:b8:13:2f:76:f9:77:49:89:d6:
31:da:ba:35:10:ac:41:03:db:57:9a:97:f1:85:d7:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5B:D3:FE:B7:D4:1B:87:A3:7F:84:31:22:1B:70:47:42:95:05:A5
X509v3 Authority Key Identifier:
keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/qlvT_rfUG4ejf4QxIhtwR0KVBaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.231.244.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b0:2b:6a:cf:41:d1:3f:3c:33:1a:3f:1e:0b:a3:53:72:60:
2c:3a:cf:7c:dc:54:28:36:9c:7e:f8:52:4c:c2:1e:bf:d0:57:
ed:d1:22:f6:10:e0:bc:31:ee:f7:b6:68:e3:3e:d6:ca:ce:aa:
17:4d:e4:9d:fd:1d:50:db:9a:bb:33:2e:82:c1:90:34:1d:23:
1a:26:eb:fe:ef:a2:fc:54:3e:bf:54:cd:fd:d5:b9:8f:73:10:
0b:d3:70:e6:db:83:3b:5c:62:72:d3:f0:5e:c2:0f:a2:c1:44:
70:f2:cc:de:dd:a9:81:97:ef:12:b9:dc:0d:44:b0:bc:6e:c5:
f2:c2:d2:8c:60:e5:1e:45:16:2b:e5:04:98:78:46:ed:9b:38:
5d:2b:d3:55:89:a0:9a:e8:3f:72:82:53:43:80:55:9a:54:ed:
75:2e:7c:e2:77:9f:28:af:be:30:53:eb:7f:2a:bb:f2:15:34:
90:6d:11:f8:00:4b:8f:d5:08:08:d2:a1:c2:84:1f:c3:45:81:
65:56:8e:01:b0:a8:42:f9:53:8a:54:83:79:ce:69:de:59:f2:
24:81:3c:7f:36:db:17:dd:ce:2a:43:65:8b:58:b7:84:32:2e:
40:b9:0c:7a:b9:f2:27:9b:13:19:2f:54:a1:4c:6e:d1:08:15:
76:84:5f:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+mpMJbGryJC+cJTrRHOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMzQwNjhiNWU5ZjczMTQyNzdlMmJlOTcyNmM3MzIxMzFi
MTc1NmMwHhcNMjUwMTAxMDM0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTViZDNmZWI3ZDQxYjg3YTM3Zjg0MzEyMjFiNzA0NzQyOTUwNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqo+nM9m5zBK516zn2L6xt8s8Vee
GKDlx6IJ869gL1XzKnaXPMZVQSaDyo0z3lANL5BE2uykV7dhTJdxsdd5PkGocyak
w99HwHJP9c9uFgD2mE8PUn3K41DOx5QiFyUO7hwuqHgy1TaKD+1AZsferMuU/LyQ
JyCuEI5Y0JkCIz4FLtcmE6w4QfEjhn0vdop8RDhylZDnpOAablXtjuAcCyVQTPCR
0Z0XQ6RikX2SlqHfd2ptns7Pk3VNvrwKB9lOIkF1SOBACUKyPbLRMIVt8jOa4voX
LoMSDA0/fsLC/0AHYMU0vem4Ey92+XdJidYx2ro1EKxBA9tXmpfxhdf6KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKpb0/631BuHo3+EMSIbcEdClQWlMB8GA1UdIwQY
MBaAFBA0Boten3MUJ34r6XJscyExsXVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRURRR2kxNmZjeFFuZml2cGNteHpJVEd4ZFd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hMDQ1MGUtNTYzNC00NThkLTkxOGYt
MTAzZDkzZDI1MWFiLzEvcWx2VF9yZlVHNGVqZjRReElodHdSMEtWQmFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hMDQ1MGUtNTYzNC00NThkLTkxOGYtMTAzZDkzZDI1MWFi
LzEvRURRR2kxNmZjeFFuZml2cGNteHpJVEd4ZFd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPuf0MA0G
CSqGSIb3DQEBCwUAA4IBAQCGsCtqz0HRPzwzGj8eC6NTcmAsOs983FQoNpx++FJM
wh6/0Fft0SL2EOC8Me73tmjjPtbKzqoXTeSd/R1Q25q7My6CwZA0HSMaJuv+76L8
VD6/VM391bmPcxAL03Dm24M7XGJy0/Bewg+iwURw8sze3amBl+8SudwNRLC8bsXy
wtKMYOUeRRYr5QSYeEbtmzhdK9NViaCa6D9yglNDgFWaVO11Lnzid58or74wU+t/
KrvyFTSQbRH4AEuP1QgI0qHChB/DRYFlVo4BsKhC+VOKVIN5zmneWfIkgTx/NtsX
3c4qQ2WLWLeEMi5AuQx6ufInmxMZL1ShTG7RCBV2hF8T
-----END CERTIFICATE-----
Generated at Sun Apr 13 15:28:55 2025 by rpki-client