Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/s_QDIrLshBQNlu6RPwCemGYvy74.roa
File: s_QDIrLshBQNlu6RPwCemGYvy74.roa (raw, json)
Hash identifier: 6Y18bq+vtApdDZHTDEQgo5JwDFt4pJR0lVY1yqjzjsk=
Subject key identifier: B3:F4:03:22:B2:EC:84:14:0D:96:EE:91:3F:00:9E:98:66:2F:CB:BE
Certificate issuer: /CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Certificate serial: 019422FC14DA9D324F1E1774C27C0D52663B
Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/s_QDIrLshBQNlu6RPwCemGYvy74.roa
Signing time: Wed 01 Jan 2025 17:48:53 +0000
ROA not before: Wed 01 Jan 2025 17:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 145.226.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:14:da:9d:32:4f:1e:17:74:c2:7c:0d:52:66:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3f40322b2ec84140d96ee913f009e98662fcbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:c0:df:43:22:21:d1:24:a1:76:3b:de:31:
d4:02:dc:c2:87:ee:de:79:1c:9c:d5:aa:c0:cd:2d:
5b:a8:41:8c:94:10:f6:ad:c3:21:22:9c:67:b3:fe:
c5:2a:a0:30:b7:c2:e3:2a:a9:b1:ac:fe:63:b5:ca:
64:12:6a:06:87:a3:9e:40:18:0b:ee:1f:61:22:d7:
3a:bd:be:89:6a:4b:f7:7d:75:e4:f3:2a:11:cc:05:
f5:32:a9:a0:bb:b3:ac:d5:50:a2:11:48:17:a2:c3:
9a:f5:46:1e:71:5d:c8:fe:41:38:bd:5f:7c:bf:43:
9f:88:f3:2e:81:1d:f3:8a:29:fd:e3:e8:fa:32:92:
e7:d2:99:6e:81:e7:d5:14:ad:7c:76:6b:6e:22:28:
e9:2c:bd:bf:d9:1f:46:af:29:c3:9d:f4:f1:5f:53:
61:b1:e1:96:12:bb:75:39:f4:c3:0f:83:45:00:be:
e6:d1:8c:0a:94:e0:12:d6:05:d9:df:94:87:86:f4:
6e:b1:a1:07:c9:ff:c5:f7:de:05:62:05:51:6e:ef:
47:68:c1:a4:55:52:54:d5:24:7e:df:43:81:90:2e:
02:55:c4:ae:2d:21:99:5b:0c:e8:74:8c:81:9f:cb:
9d:1e:f4:84:8f:3a:6c:7f:44:87:a8:b5:fc:01:ee:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F4:03:22:B2:EC:84:14:0D:96:EE:91:3F:00:9E:98:66:2F:CB:BE
X509v3 Authority Key Identifier:
keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/s_QDIrLshBQNlu6RPwCemGYvy74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.226.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:58:ae:05:23:78:aa:4a:c2:95:50:dd:68:33:4a:d5:d9:0a:
1a:7a:02:49:32:ea:3b:52:5b:6b:95:9d:c5:5d:35:92:d2:98:
3f:49:73:be:ff:94:a8:4e:b7:5f:09:3e:65:4b:44:b2:cd:86:
19:38:d0:e8:22:0f:7b:7e:68:fa:fd:3f:92:7a:4b:99:bd:f4:
9f:e7:ba:ad:61:79:f3:12:80:34:9e:7a:00:ee:01:ca:b2:d2:
98:a0:1e:3a:63:ca:c9:3c:53:0c:b0:b3:fc:67:c1:47:a8:ff:
2e:55:eb:30:58:71:98:18:89:c8:b7:7b:44:e6:7a:4e:51:88:
e3:5c:e9:b9:0b:9d:92:96:50:35:f1:f5:8c:3d:d3:ed:c2:d8:
35:1f:f5:08:e3:33:df:0f:60:32:ef:f6:31:6c:ef:ab:89:22:
0f:45:71:8a:30:37:e6:ae:d3:5e:21:8c:15:19:93:7e:0e:0e:
f7:fe:e3:e7:98:a9:2f:c6:62:60:89:43:f4:a7:bd:1d:73:44:
c3:f7:5a:53:a4:68:0e:31:db:0e:d3:01:1b:96:86:28:78:a9:
cf:12:13:0b:1e:83:07:00:3d:eb:51:15:57:3f:80:c7:19:a9:
19:00:19:a7:68:f6:20:68:f0:30:74:65:61:91:6a:bf:52:b0:
0e:fa:b2:5a
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQi/BTanTJPHhd0wnwNUmY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1OGY1YThlMjk1YWQxZDdiNDhhMWUxMTk1ODc5MDA1MmI1
N2EyNTMwHhcNMjUwMTAxMTc0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2Y0MDMyMmIyZWM4NDE0MGQ5NmVlOTEzZjAwOWU5ODY2MmZjYmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIfA30MiIdEkoXY73jHUAtzCh+7e
eRyc1arAzS1bqEGMlBD2rcMhIpxns/7FKqAwt8LjKqmxrP5jtcpkEmoGh6OeQBgL
7h9hItc6vb6Jakv3fXXk8yoRzAX1Mqmgu7Os1VCiEUgXosOa9UYecV3I/kE4vV98
v0OfiPMugR3ziin94+j6MpLn0plugefVFK18dmtuIijpLL2/2R9GrynDnfTxX1Nh
seGWErt1OfTDD4NFAL7m0YwKlOAS1gXZ35SHhvRusaEHyf/F994FYgVRbu9HaMGk
VVJU1SR+30OBkC4CVcSuLSGZWwzodIyBn8udHvSEjzpsf0SHqLX8Ae6YwwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFLP0AyKy7IQUDZbukT8AnphmL8u+MB8GA1UdIwQY
MBaAFCWPWo4pWtHXtIoeEZWHkAUrV6JTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zNzE5ZjMtMjJlMS00MzQ0LTlhMzkt
NDU4YTI3MzYxNTdhLzEvc19RRElyTHNoQlFObHU2UlB3Q2VtR1l2eTc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8zNzE5ZjMtMjJlMS00MzQ0LTlhMzktNDU4YTI3MzYxNTdh
LzEvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkeIwDQYJ
KoZIhvcNAQELBQADggEBACNYrgUjeKpKwpVQ3WgzStXZChp6Akky6jtSW2uVncVd
NZLSmD9Jc77/lKhOt18JPmVLRLLNhhk40OgiD3t+aPr9P5J6S5m99J/nuq1hefMS
gDSeegDuAcqy0pigHjpjysk8Uwyws/xnwUeo/y5V6zBYcZgYici3e0Tmek5RiONc
6bkLnZKWUDXx9Yw90+3C2DUf9QjjM98PYDLv9jFs76uJIg9FcYowN+au014hjBUZ
k34ODvf+4+eYqS/GYmCJQ/SnvR1zRMP3WlOkaA4x2w7TARuWhih4qc8SEwsegwcA
PetRFVc/gMcZqRkAGado9iBo8DB0ZWGRar9SsA76slo=
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:31:39 2025 by rpki-client