Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/q-appz8dO4jq67fgxKuZXxmG-yk.roa
File: q-appz8dO4jq67fgxKuZXxmG-yk.roa (raw, json)
Hash identifier: 8Ki2HB4a+kdfNpTOR3yuBj286ApIBQr/QxGJoJ7slFE=
Subject key identifier: AB:E6:A9:A7:3F:1D:3B:88:EA:EB:B7:E0:C4:AB:99:5F:19:86:FB:29
Certificate issuer: /CN=7b8254253dc0213fe58a7aff4b82463e47978063
Certificate serial: 019426D96A35A449CA175DF61FEC23341CEA
Authority key identifier: 7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/q-appz8dO4jq67fgxKuZXxmG-yk.roa
Signing time: Thu 02 Jan 2025 11:49:30 +0000
ROA not before: Thu 02 Jan 2025 11:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213118
IP address blocks: 79.142.40.0/23 maxlen: 23
94.154.125.0/24 maxlen: 24
2a11:fd40:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6a:35:a4:49:ca:17:5d:f6:1f:ec:23:34:1c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8254253dc0213fe58a7aff4b82463e47978063
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abe6a9a73f1d3b88eaebb7e0c4ab995f1986fb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:37:56:cb:a4:d0:3f:32:04:43:2e:44:c1:ae:
19:07:f2:97:b1:c2:aa:73:22:7b:21:61:59:7e:b5:
e8:38:0f:69:3c:88:56:12:c6:12:67:1f:75:e8:f5:
42:b8:b8:e8:01:a9:85:f2:37:ca:59:d9:2d:1e:34:
7e:56:62:a1:1e:c7:a4:fe:62:c1:8e:76:94:c5:55:
4b:a9:8a:6b:99:50:df:5a:8b:48:77:64:4e:b5:0d:
ef:de:bf:34:e6:c3:1d:b3:c7:f2:9a:84:2a:3b:a3:
59:4b:71:30:36:90:63:24:7a:7f:4a:c7:79:fe:00:
17:12:78:21:84:bd:6c:f5:8b:3b:c1:7a:1b:41:c5:
6e:b5:cc:df:e0:ea:4e:af:54:e4:d5:df:5f:70:ae:
2c:41:34:41:2e:e7:ef:cc:46:bd:c5:36:e8:2d:6a:
22:ea:34:ce:10:0e:5a:59:dc:82:0d:fd:2a:8e:a6:
7d:95:87:b5:d7:d0:b1:a6:b3:06:f2:a1:ba:06:ab:
42:ea:86:76:8b:3d:e4:f0:5e:34:bb:b0:ca:6a:2e:
31:b5:43:cd:0d:3e:1c:8c:d5:66:10:c6:07:8d:06:
20:da:08:93:e0:a5:50:1d:27:21:ad:9b:a4:54:a0:
b5:b2:5d:d8:78:ad:11:a1:0d:22:af:07:2a:61:a1:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E6:A9:A7:3F:1D:3B:88:EA:EB:B7:E0:C4:AB:99:5F:19:86:FB:29
X509v3 Authority Key Identifier:
keyid:7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/q-appz8dO4jq67fgxKuZXxmG-yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.40.0/23
94.154.125.0/24
IPv6:
2a11:fd40:1000::/36
Signature Algorithm: sha256WithRSAEncryption
bc:66:6f:40:53:91:9e:69:2b:80:d7:22:1f:c7:dd:e5:28:5a:
02:6b:43:7b:34:da:5a:5a:10:bb:2b:3e:31:2f:27:b4:e6:70:
ab:24:8d:61:b4:17:f8:13:39:d3:af:d9:c4:e6:fd:de:9f:c3:
8a:1a:79:b8:77:18:fd:f2:78:a5:36:09:54:9e:7d:09:cd:67:
48:26:39:46:ed:90:a6:57:16:5b:b1:5a:c2:c6:e5:0c:63:53:
f5:f7:bf:d3:a9:bb:a2:b9:9e:c6:f6:ae:f6:45:47:91:cd:6a:
fa:73:99:70:fb:12:cb:84:89:6c:59:ce:ec:14:c3:97:a1:a0:
a3:a5:d0:bb:70:af:c3:91:3a:5c:a6:3e:8b:b1:bc:ec:3f:ed:
fc:fb:ff:c9:88:c2:1c:87:47:60:51:d9:74:30:0c:0c:d7:f9:
0b:6e:60:81:42:fc:0b:2a:22:89:2b:32:f2:cc:14:8f:4d:28:
1e:fa:7c:90:49:12:23:ee:69:45:6f:cd:25:03:69:bd:37:ff:
74:34:60:ad:89:5e:7c:99:07:e5:3c:93:16:fa:f7:26:ea:6f:
38:73:93:19:41:25:f7:45:26:d5:be:af:4d:05:a2:87:89:9d:
d7:16:17:08:c7:e9:d7:a5:1d:f8:63:99:d5:d6:21:5b:e4:dc:
01:65:13:9e
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZQm2Wo1pEnKF132H+wjNBzqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODI1NDI1M2RjMDIxM2ZlNThhN2FmZjRiODI0NjNlNDc5
NzgwNjMwHhcNMjUwMTAyMTE0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmU2YTlhNzNmMWQzYjg4ZWFlYmI3ZTBjNGFiOTk1ZjE5ODZmYjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jdWy6TQPzIEQy5Ewa4ZB/KXscKq
cyJ7IWFZfrXoOA9pPIhWEsYSZx916PVCuLjoAamF8jfKWdktHjR+VmKhHsek/mLB
jnaUxVVLqYprmVDfWotId2ROtQ3v3r805sMds8fymoQqO6NZS3EwNpBjJHp/Ssd5
/gAXEnghhL1s9Ys7wXobQcVutczf4OpOr1Tk1d9fcK4sQTRBLufvzEa9xTboLWoi
6jTOEA5aWdyCDf0qjqZ9lYe119CxprMG8qG6BqtC6oZ2iz3k8F40u7DKai4xtUPN
DT4cjNVmEMYHjQYg2giT4KVQHSchrZukVKC1sl3YeK0RoQ0irwcqYaHo6QIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFKvmqac/HTuI6uu34MSrmV8ZhvspMB8GA1UdIwQY
MBaAFHuCVCU9wCE/5Yp6/0uCRj5Hl4BjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRKVUpUM0FJVF9saW5yX1M0SkdQa2VYZ0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hYjdhMDQtZmZlMS00YTA1LWE1ZWYt
OGY1MzliNjRiOGRiLzEvcS1hcHB6OGRPNGpxNjdmZ3hLdVpYeG1HLXlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hYjdhMDQtZmZlMS00YTA1LWE1ZWYtOGY1MzliNjRiOGRi
LzEvZTRKVUpUM0FJVF9saW5yX1M0SkdQa2VYZ0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBT44oAwQA
Xpp9MA4EAgACMAgDBgQqEf1AEDANBgkqhkiG9w0BAQsFAAOCAQEAvGZvQFORnmkr
gNciH8fd5ShaAmtDezTaWloQuys+MS8ntOZwqySNYbQX+BM506/ZxOb93p/Dihp5
uHcY/fJ4pTYJVJ59Cc1nSCY5Ru2QplcWW7FawsblDGNT9fe/06m7ormexvau9kVH
kc1q+nOZcPsSy4SJbFnO7BTDl6Ggo6XQu3Cvw5E6XKY+i7G87D/t/Pv/yYjCHIdH
YFHZdDAMDNf5C25ggUL8CyoiiSsy8swUj00oHvp8kEkSI+5pRW/NJQNpvTf/dDRg
rYlefJkH5TyTFvr3JupvOHOTGUEl90Um1b6vTQWih4md1xYXCMfp16Ud+GOZ1dYh
W+TcAWUTng==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:46 2025 by rpki-client