Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tWQ0X6qZcWhkxF1mS3tjCfTRquo.roa
File: tWQ0X6qZcWhkxF1mS3tjCfTRquo.roa (raw, json)
Hash identifier: rb/2KlShn3lMS9CXr/PjNlzJqvG6wtCS+gfrvUydlU0=
Subject key identifier: B5:64:34:5F:AA:99:71:68:64:C4:5D:66:4B:7B:63:09:F4:D1:AA:EA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FB2E48C54C2D9942183D0479057DF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tWQ0X6qZcWhkxF1mS3tjCfTRquo.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49393
IP address blocks: 31.148.22.0/24 maxlen: 24
93.171.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 02:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b2:e4:8c:54:c2:d9:94:21:83:d0:47:90:57:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b564345faa99716864c45d664b7b6309f4d1aaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:c6:53:6e:eb:0f:ce:98:6f:3d:e7:dc:b5:
25:f1:84:03:5e:b6:1a:e2:5f:31:16:ad:a9:7b:fa:
6d:39:6e:8f:d4:5f:fb:6f:0b:62:e0:7e:0a:6b:89:
ee:94:2d:0c:d5:be:33:5c:d4:b3:af:ca:93:84:32:
f8:07:b3:15:19:7e:dd:6a:3c:ca:3a:ed:e1:9c:57:
6a:43:a3:35:9b:90:95:98:73:21:30:26:b5:df:80:
85:43:2b:14:c4:b8:b8:a4:da:e9:63:f3:0b:4d:f7:
20:c2:7c:0c:71:26:60:3d:60:77:54:74:4d:c0:fc:
b1:31:11:ff:c3:10:ef:20:86:2f:f3:21:3d:48:72:
eb:6a:0d:bc:1d:eb:0e:4f:ca:4b:2b:13:a4:bc:35:
9a:95:31:c8:0f:8a:31:02:89:6e:57:63:f4:b5:ef:
03:53:64:25:cf:f8:89:74:3e:b3:24:ca:a8:fd:f3:
78:ad:68:59:96:f8:f5:d7:68:af:fb:7e:c2:26:01:
45:ac:2c:23:a6:e5:c7:44:67:b8:62:70:f0:00:6f:
d4:31:f9:4a:e3:3d:0d:12:8c:1c:a7:bc:62:d8:1e:
3a:fb:18:04:66:69:67:98:5b:c6:07:46:c3:78:aa:
52:a6:4e:17:8e:ee:7c:b1:00:8e:77:4e:0b:5f:40:
cf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:64:34:5F:AA:99:71:68:64:C4:5D:66:4B:7B:63:09:F4:D1:AA:EA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/tWQ0X6qZcWhkxF1mS3tjCfTRquo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.22.0/24
93.171.153.0/24
Signature Algorithm: sha256WithRSAEncryption
17:cd:81:e1:42:e4:23:42:ff:2b:18:82:b9:cd:1d:4a:71:19:
e6:34:75:8a:4e:04:ce:7b:aa:54:e3:c0:81:5e:ee:b0:65:a6:
66:39:8c:8a:c9:a2:a9:01:c3:d6:59:73:dc:31:43:fb:05:0b:
fe:b6:c1:09:8e:35:46:fd:23:a8:c5:a7:88:5d:99:f0:95:fe:
7c:56:62:c6:46:6b:eb:66:72:11:e6:35:1d:c1:3f:48:d6:a4:
4f:12:a2:c8:da:87:e4:cb:89:60:2f:59:72:da:ae:15:1e:18:
1f:ff:6a:e2:b9:32:56:59:1c:40:d7:65:f7:f6:27:1e:b1:6f:
d6:f8:b3:2a:93:ac:87:d8:2d:7c:3a:49:06:73:5b:1f:99:dc:
c7:21:c9:19:de:e0:3b:9d:c1:b2:a0:4c:4d:bf:45:43:2d:ef:
9b:00:3d:14:4e:7e:42:18:f5:32:d3:50:b0:49:9a:6e:56:08:
94:24:99:63:c4:a2:5e:b3:43:e3:13:5f:59:91:26:97:83:e1:
a7:44:d7:46:17:65:91:84:7a:87:d1:f9:19:55:fd:d3:c6:e2:
32:5f:d1:63:f5:93:43:cf:90:e4:45:3f:43:bf:8d:81:47:26:
09:ee:00:b9:15:dc:4a:b2:e4:97:1f:32:44:c6:14:9a:c1:4d:
35:66:0d:c8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj7LkjFTC2ZQhg9BHkFffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTY0MzQ1ZmFhOTk3MTY4NjRjNDVkNjY0YjdiNjMwOWY0ZDFhYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVzGU27rD86Ybz3n3LUl8YQDXrYa
4l8xFq2pe/ptOW6P1F/7bwti4H4Ka4nulC0M1b4zXNSzr8qThDL4B7MVGX7dajzK
Ou3hnFdqQ6M1m5CVmHMhMCa134CFQysUxLi4pNrpY/MLTfcgwnwMcSZgPWB3VHRN
wPyxMRH/wxDvIIYv8yE9SHLrag28HesOT8pLKxOkvDWalTHID4oxAoluV2P0te8D
U2Qlz/iJdD6zJMqo/fN4rWhZlvj112iv+37CJgFFrCwjpuXHRGe4YnDwAG/UMflK
4z0NEowcp7xi2B46+xgEZmlnmFvGB0bDeKpSpk4Xju58sQCOd04LX0DPqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLVkNF+qmXFoZMRdZkt7Ywn00arqMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvdFdRMFg2cVpjV2hreEYxbVMzdGpDZlRScXVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH5QWAwQA
XauZMA0GCSqGSIb3DQEBCwUAA4IBAQAXzYHhQuQjQv8rGIK5zR1KcRnmNHWKTgTO
e6pU48CBXu6wZaZmOYyKyaKpAcPWWXPcMUP7BQv+tsEJjjVG/SOoxaeIXZnwlf58
VmLGRmvrZnIR5jUdwT9I1qRPEqLI2ofky4lgL1ly2q4VHhgf/2riuTJWWRxA12X3
9icesW/W+LMqk6yH2C18OkkGc1sfmdzHIckZ3uA7ncGyoExNv0VDLe+bAD0UTn5C
GPUy01CwSZpuVgiUJJljxKJes0PjE19ZkSaXg+GnRNdGF2WRhHqH0fkZVf3TxuIy
X9Fj9ZNDz5DkRT9Dv42BRyYJ7gC5FdxKsuSXHzJExhSawU01Zg3I
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:39 2025 by rpki-client