Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Q8YAap5JaMtgGC9lgf6LQHDq2Ok.roa
File: Q8YAap5JaMtgGC9lgf6LQHDq2Ok.roa (raw, json)
Hash identifier: HuBCPUPNI4BFPOetznQYeD5cw+9ALmDFX0RulPMRYrs=
Subject key identifier: 43:C6:00:6A:9E:49:68:CB:60:18:2F:65:81:FE:8B:40:70:EA:D8:E9
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194274734A3E01FA12ECFA3AAADDFB88E52
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Q8YAap5JaMtgGC9lgf6LQHDq2Ok.roa
Signing time: Thu 02 Jan 2025 13:49:25 +0000
ROA not before: Thu 02 Jan 2025 13:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212219
IP address blocks: 193.35.153.0/24 maxlen: 24
193.35.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:34:a3:e0:1f:a1:2e:cf:a3:aa:ad:df:b8:8e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43c6006a9e4968cb60182f6581fe8b4070ead8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:a0:77:7f:2f:38:d1:4c:fd:75:1b:c0:36:
e0:fc:d8:e4:04:29:8b:da:1d:d0:b6:5e:79:2c:3b:
5f:6c:dd:93:7c:46:3a:c3:cd:fd:c8:fa:b7:0f:3d:
60:ae:8a:30:73:3c:92:06:95:bc:c5:0e:74:e0:ad:
20:5a:02:73:0c:1e:18:76:d4:d6:ce:53:0c:3c:6b:
23:91:5e:bd:55:d8:6a:14:7d:4c:13:71:c7:fd:6c:
37:63:48:a9:9c:37:b1:30:2c:02:0d:ee:73:84:fc:
aa:1d:c2:db:d5:92:12:24:d7:8c:64:76:a2:f2:17:
95:b5:e0:16:7f:12:93:6e:74:db:a8:1d:54:4d:6b:
1b:bc:1c:01:d3:0d:1c:22:ea:01:ae:33:c3:0a:f0:
17:43:19:9c:e9:78:d4:52:47:70:f9:81:bc:6d:00:
88:e5:a6:fd:d2:de:c1:b8:17:b4:b5:0f:97:ff:97:
2c:e7:d1:3a:52:23:d5:28:fa:6f:07:9c:ce:1e:63:
53:fb:74:47:88:79:a9:93:8f:1e:2a:5d:d4:cc:a4:
a6:74:37:94:c1:d2:b2:1a:cc:d6:2c:48:48:d1:e2:
75:1b:33:5d:bb:26:c2:07:39:10:db:a5:d9:6b:41:
75:e1:77:e2:d7:d8:9e:e4:c2:e8:35:ef:c5:c7:01:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C6:00:6A:9E:49:68:CB:60:18:2F:65:81:FE:8B:40:70:EA:D8:E9
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Q8YAap5JaMtgGC9lgf6LQHDq2Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.153.0-193.35.154.255
Signature Algorithm: sha256WithRSAEncryption
00:20:e8:22:40:f7:fd:ff:25:e1:b8:92:dd:c7:c7:ca:9e:45:
a3:56:b2:80:b6:7b:a1:74:0a:9d:3d:ca:52:54:19:9b:94:a8:
bf:4f:37:ef:30:1a:68:62:80:33:52:eb:49:88:99:1d:63:81:
ec:4c:ec:62:4a:8c:bc:dc:49:95:c7:57:a9:ac:7a:fa:63:e8:
a5:67:f6:28:56:2c:78:eb:d8:e2:ac:8f:ec:03:87:15:f8:eb:
fa:6e:ec:91:4e:6f:2e:64:e3:b7:f5:92:f3:de:a7:05:71:ff:
32:49:99:11:80:a7:8d:6b:e9:01:42:04:15:0a:5e:aa:34:70:
f0:99:99:17:67:fa:7e:f3:d0:c1:b1:c8:fc:b0:30:4d:56:98:
e9:d0:fa:cd:2d:3c:56:31:63:89:4a:0f:5b:b5:53:d3:34:2b:
d2:29:51:cc:40:aa:ee:34:fd:82:e1:c1:10:13:5a:91:8d:f2:
50:af:00:e8:9c:34:17:92:c8:b9:14:7a:2b:99:2c:be:38:8c:
d1:66:92:b1:2b:99:26:98:3b:19:cc:12:98:0e:f0:cc:e2:41:
d0:7e:a0:d4:96:3c:28:6b:49:cb:f4:52:59:0c:62:33:44:36:
cd:28:f8:bf:66:64:83:c0:0a:89:d1:59:18:5d:84:4c:80:33:
50:2d:cb:29
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQnRzSj4B+hLs+jqq3fuI5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUwMTAyMTM0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2M2MDA2YTllNDk2OGNiNjAxODJmNjU4MWZlOGI0MDcwZWFkOGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrygd38vONFM/XUbwDbg/NjkBCmL
2h3Qtl55LDtfbN2TfEY6w839yPq3Dz1groowczySBpW8xQ504K0gWgJzDB4YdtTW
zlMMPGsjkV69VdhqFH1ME3HH/Ww3Y0ipnDexMCwCDe5zhPyqHcLb1ZISJNeMZHai
8heVteAWfxKTbnTbqB1UTWsbvBwB0w0cIuoBrjPDCvAXQxmc6XjUUkdw+YG8bQCI
5ab90t7BuBe0tQ+X/5cs59E6UiPVKPpvB5zOHmNT+3RHiHmpk48eKl3UzKSmdDeU
wdKyGszWLEhI0eJ1GzNduybCBzkQ26XZa0F14Xfi19ie5MLoNe/FxwEvRQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEPGAGqeSWjLYBgvZYH+i0Bw6tjpMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvUThZQWFwNUphTXRnR0M5bGdmNkxRSERxMk9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBI5kD
BADBI5owDQYJKoZIhvcNAQELBQADggEBAAAg6CJA9/3/JeG4kt3Hx8qeRaNWsoC2
e6F0Cp09ylJUGZuUqL9PN+8wGmhigDNS60mImR1jgexM7GJKjLzcSZXHV6msevpj
6KVn9ihWLHjr2OKsj+wDhxX46/pu7JFOby5k47f1kvPepwVx/zJJmRGAp41r6QFC
BBUKXqo0cPCZmRdn+n7z0MGxyPywME1WmOnQ+s0tPFYxY4lKD1u1U9M0K9IpUcxA
qu40/YLhwRATWpGN8lCvAOicNBeSyLkUeiuZLL44jNFmkrErmSaYOxnMEpgO8Mzi
QdB+oNSWPChrScv0UlkMYjNENs0o+L9mZIPAConRWRhdhEyAM1Atyyk=
-----END CERTIFICATE-----
Generated at Thu Apr 10 17:26:22 2025 by rpki-client