Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/1-Q1JJEM-283CkQsyWnWZizkRRH0.roa
File: 1-Q1JJEM-283CkQsyWnWZizkRRH0.roa (raw, json)
Hash identifier: pMkrNzbMgj6JidKdCAH0olpZAepxai3+rIJ34FZ4TEQ=
Subject key identifier: F9:0D:49:24:43:3E:DB:CD:C2:91:0B:32:5A:75:99:8B:39:11:44:7D
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 019420685AF041191A786C7AFA14B5455942
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/1-Q1JJEM-283CkQsyWnWZizkRRH0.roa
Signing time: Wed 01 Jan 2025 05:48:17 +0000
ROA not before: Wed 01 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42012
IP address blocks: 194.36.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5a:f0:41:19:1a:78:6c:7a:fa:14:b5:45:59:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f90d4924433edbcdc2910b325a75998b3911447d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:3a:65:30:ec:48:1c:bf:d9:30:98:9c:11:
d1:7f:67:79:f8:9c:4b:e7:f6:63:08:fb:9c:36:5a:
2f:8d:b3:1e:eb:9b:ce:a0:3e:3d:96:48:0b:f2:50:
91:35:3c:5d:4a:9e:5a:bf:2b:8d:6b:fe:31:d0:17:
01:eb:7c:e5:52:64:a5:8e:0f:d5:7b:8c:db:f3:0e:
4a:d4:1d:dc:20:aa:c4:55:91:fe:c2:9b:24:63:6f:
17:9b:9f:47:59:85:f8:e7:33:e8:75:34:fa:65:39:
99:0b:8a:83:02:16:b1:fc:da:11:30:65:10:22:4d:
d1:d9:e6:4e:a8:d7:88:c9:74:40:0f:d2:31:71:4f:
25:de:d9:91:f3:46:34:f0:0a:1d:f9:ac:22:af:29:
07:9f:cc:49:68:5a:19:a1:32:6f:a6:5d:6d:42:43:
2e:75:7d:df:41:81:ef:8d:96:da:d6:4d:8e:96:1c:
6e:d7:23:13:3b:40:52:20:9c:e8:0f:b0:89:2e:9e:
99:24:06:d4:7b:c1:20:3e:52:fd:ea:4f:65:99:19:
15:ea:73:78:82:43:f7:34:c0:c1:40:28:4d:17:b9:
45:d4:f1:4d:cb:b8:d3:e9:02:fc:56:2c:0e:43:66:
23:72:fc:9c:59:f2:e2:12:26:89:30:c8:cf:67:9f:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0D:49:24:43:3E:DB:CD:C2:91:0B:32:5A:75:99:8B:39:11:44:7D
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/1-Q1JJEM-283CkQsyWnWZizkRRH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.162.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:42:9b:e3:c6:88:67:ef:ec:b4:d9:b1:30:9e:4f:6a:96:4e:
14:2b:28:36:2d:59:90:ab:f9:61:ad:30:33:9e:9d:57:e4:7c:
17:69:15:66:31:18:fc:1a:c2:f7:e7:64:20:ec:2d:c7:72:d6:
3d:1c:24:96:c6:8b:90:e8:77:9c:eb:33:1c:be:ae:00:e1:a0:
ed:c3:e9:c3:03:92:ae:e8:0c:31:61:a2:24:43:a9:dd:01:62:
e8:39:31:c0:43:ca:53:6f:7b:b2:e9:d3:07:66:d8:51:e6:9b:
4d:02:ce:4c:8a:88:7d:5e:04:5e:57:9b:36:10:64:91:f8:a3:
c1:3f:ee:2f:2c:57:c1:e5:c2:ef:e5:38:ef:c9:13:a6:66:3c:
6c:b7:9b:9e:b8:37:eb:8d:36:61:03:ba:72:1d:2c:f2:71:cd:
ff:9f:e7:a4:5c:ba:39:c2:37:a9:d5:d3:05:8b:f6:28:1e:0a:
5c:ee:ba:f0:bf:75:36:52:a5:0b:66:c4:b4:fc:7c:61:b3:f9:
f0:78:4c:df:ff:13:6b:1e:1a:de:53:81:f5:b5:bb:e8:d4:d2:
a6:64:96:e0:a3:aa:95:d9:e9:12:8f:3d:d3:23:ab:3d:91:8e:
16:76:23:f2:f5:36:31:71:cf:7f:52:c2:93:12:56:70:b4:db:
be:a2:c7:68
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQgaFrwQRkaeGx6+hS1RVlCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NjhhMzFlNWM4YTVhODgyMjU5ODlhMWJhZWY0YTM4MTMz
ODYwMWEwHhcNMjUwMTAxMDU0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTBkNDkyNDQzM2VkYmNkYzI5MTBiMzI1YTc1OTk4YjM5MTE0NDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWM6ZTDsSBy/2TCYnBHRf2d5+JxL
5/ZjCPucNlovjbMe65vOoD49lkgL8lCRNTxdSp5avyuNa/4x0BcB63zlUmSljg/V
e4zb8w5K1B3cIKrEVZH+wpskY28Xm59HWYX45zPodTT6ZTmZC4qDAhax/NoRMGUQ
Ik3R2eZOqNeIyXRAD9IxcU8l3tmR80Y08Aod+awirykHn8xJaFoZoTJvpl1tQkMu
dX3fQYHvjZba1k2Olhxu1yMTO0BSIJzoD7CJLp6ZJAbUe8EgPlL96k9lmRkV6nN4
gkP3NMDBQChNF7lF1PFNy7jT6QL8ViwOQ2YjcvycWfLiEiaJMMjPZ5/oEwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPkNSSRDPtvNwpELMlp1mYs5EUR9MB8GA1UdIwQY
MBaAFHdoox5cilqIIlmJobrvSjgTOGAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzkt
NzY2ZWFkN2U2NTEzLzEvMS1RMUpKRU0tMjgzQ2tRc3lXbldaaXprUlJIMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTcvZTMwNTBlLTk5OTQtNGI5Ni1iYzc5LTc2NmVhZDdlNjUx
My8xL2QyaWpIbHlLV29naVdZbWh1dTlLT0JNNFlCby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIkojAN
BgkqhkiG9w0BAQsFAAOCAQEAakKb48aIZ+/stNmxMJ5PapZOFCsoNi1ZkKv5Ya0w
M56dV+R8F2kVZjEY/BrC9+dkIOwtx3LWPRwklsaLkOh3nOszHL6uAOGg7cPpwwOS
rugMMWGiJEOp3QFi6DkxwEPKU297sunTB2bYUeabTQLOTIqIfV4EXlebNhBkkfij
wT/uLyxXweXC7+U478kTpmY8bLebnrg36402YQO6ch0s8nHN/5/npFy6OcI3qdXT
BYv2KB4KXO668L91NlKlC2bEtPx8YbP58HhM3/8Tax4a3lOB9bW76NTSpmSW4KOq
ldnpEo890yOrPZGOFnYj8vU2MXHPf1LCkxJWcLTbvqLHaA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:51:15 2025 by rpki-client