Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/QkZZT0OmyPm1U7sUIDpJIndlAn4.roa
File: QkZZT0OmyPm1U7sUIDpJIndlAn4.roa (raw, json)
Hash identifier: 2DQZexpqRbr1zDWnxxG0byMVlPhiUoCIJC9UgWimgPI=
Subject key identifier: 42:46:59:4F:43:A6:C8:F9:B5:53:BB:14:20:3A:49:22:77:65:02:7E
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 01942823AD7E7D318215636F3CC5D0F1F73F
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/QkZZT0OmyPm1U7sUIDpJIndlAn4.roa
Signing time: Thu 02 Jan 2025 17:50:14 +0000
ROA not before: Thu 02 Jan 2025 17:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48613
IP address blocks: 188.214.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:ad:7e:7d:31:82:15:63:6f:3c:c5:d0:f1:f7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Jan 2 17:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4246594f43a6c8f9b553bb14203a49227765027e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:fa:e2:c7:af:d5:d3:00:99:34:3e:51:7c:
45:6c:6d:5e:09:d1:77:6c:36:42:f3:86:07:26:23:
fd:90:0b:0d:5a:15:b8:91:3d:39:9f:95:2a:0e:f5:
2e:41:ff:e3:9e:10:ef:4f:a4:c1:91:75:00:5e:a0:
12:08:fc:b5:41:2e:bd:c5:8d:d0:d7:11:ab:b1:28:
98:3d:c2:8f:ef:85:79:a6:3c:ea:e5:14:3f:46:8b:
c4:26:16:04:b1:eb:4d:7d:45:dc:be:bc:ae:3f:09:
dd:87:6f:84:da:34:6c:c7:9a:c7:db:cc:8a:23:cc:
ec:77:54:8f:dd:b2:f6:82:c9:fa:e9:a8:d5:7f:64:
b1:64:bc:b3:f0:47:ba:17:bd:f8:4a:dc:38:ff:c2:
ce:4a:99:80:37:99:c6:6c:67:b9:1a:78:5f:71:40:
d7:06:3f:11:89:66:b3:97:50:2e:5b:e3:69:9b:4d:
e5:40:b8:4c:aa:29:90:f8:1d:94:22:53:53:38:8a:
f1:80:bb:77:9c:b7:7c:4a:02:d4:82:44:fd:65:64:
b9:93:cd:e7:1b:42:a6:4e:1d:3d:93:47:6b:d1:4e:
5c:22:1e:d0:ad:e1:75:96:2c:79:06:8e:7e:c9:73:
ce:44:1f:5d:ea:ab:61:ad:b5:20:cf:fc:4c:5c:37:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:46:59:4F:43:A6:C8:F9:B5:53:BB:14:20:3A:49:22:77:65:02:7E
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/QkZZT0OmyPm1U7sUIDpJIndlAn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.101.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:5b:9b:c0:c6:b0:67:fb:b0:66:fb:63:14:8b:5e:f5:34:6a:
5c:c6:45:3f:ca:aa:f6:2a:01:9e:25:0e:6f:42:bf:5b:95:f5:
b1:c9:4d:f3:d8:66:95:2c:c5:e2:9c:68:21:8e:59:3d:d2:e7:
3d:1f:94:23:71:44:bf:9e:6b:18:36:3f:97:c9:31:b6:40:b3:
46:9a:2b:e9:77:3d:80:2e:f3:e9:4c:36:52:16:16:53:f9:d5:
ab:14:0a:50:ac:31:c6:c6:7b:6b:e1:d5:c4:86:76:90:2a:a1:
7a:2a:37:1e:5f:71:d1:5b:ea:0e:3c:81:d3:01:b8:d5:ac:18:
6a:54:74:c0:11:d0:ac:92:c3:d7:6a:76:26:02:c5:59:98:48:
30:05:51:88:44:74:4b:ba:53:81:c3:39:ac:01:92:6e:9e:f5:
2f:8c:12:62:9f:5c:9e:03:02:e2:e6:39:a3:e1:70:73:42:29:
94:48:91:2b:d5:7b:ee:6f:97:52:99:dd:5d:aa:5b:0f:2a:c9:
3b:1c:3f:70:35:6e:62:c4:cc:5b:51:af:ce:54:dd:55:48:86:
cd:0a:8c:43:f4:db:79:85:fa:1a:25:73:30:47:b7:17:60:2a:
79:6d:de:3d:5a:fc:09:56:25:77:f0:7a:e3:5e:af:cd:70:43:
98:51:bb:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI61+fTGCFWNvPMXQ8fc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYWZlMWZlZDFmMmI3ZGIyNGEwYzJkMWY2MTAxMDY4NGU5
M2NiZDUwHhcNMjUwMTAyMTc1MDE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjQ2NTk0ZjQzYTZjOGY5YjU1M2JiMTQyMDNhNDkyMjc3NjUwMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBz64sev1dMAmTQ+UXxFbG1eCdF3
bDZC84YHJiP9kAsNWhW4kT05n5UqDvUuQf/jnhDvT6TBkXUAXqASCPy1QS69xY3Q
1xGrsSiYPcKP74V5pjzq5RQ/RovEJhYEsetNfUXcvryuPwndh2+E2jRsx5rH28yK
I8zsd1SP3bL2gsn66ajVf2SxZLyz8Ee6F734Stw4/8LOSpmAN5nGbGe5GnhfcUDX
Bj8RiWazl1AuW+Npm03lQLhMqimQ+B2UIlNTOIrxgLt3nLd8SgLUgkT9ZWS5k83n
G0KmTh09k0dr0U5cIh7QreF1lix5Bo5+yXPORB9d6qthrbUgz/xMXDcjjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEJGWU9Dpsj5tVO7FCA6SSJ3ZQJ+MB8GA1UdIwQY
MBaAFKCv4f7R8rfbJKDC0fYQEGhOk8vVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDIt
ZWNhNTNhN2Y3NzYyLzEvUWtaWlQwT215UG0xVTdzVUlEcEpJbmRsQW40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDItZWNhNTNhN2Y3NzYy
LzEvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNZlMA0G
CSqGSIb3DQEBCwUAA4IBAQCKW5vAxrBn+7Bm+2MUi171NGpcxkU/yqr2KgGeJQ5v
Qr9blfWxyU3z2GaVLMXinGghjlk90uc9H5QjcUS/nmsYNj+XyTG2QLNGmivpdz2A
LvPpTDZSFhZT+dWrFApQrDHGxntr4dXEhnaQKqF6KjceX3HRW+oOPIHTAbjVrBhq
VHTAEdCsksPXanYmAsVZmEgwBVGIRHRLulOBwzmsAZJunvUvjBJin1yeAwLi5jmj
4XBzQimUSJEr1Xvub5dSmd1dqlsPKsk7HD9wNW5ixMxbUa/OVN1VSIbNCoxD9Nt5
hfoaJXMwR7cXYCp5bd49WvwJViV38HrjXq/NcEOYUbsZ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:57 2025 by rpki-client