Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Q1FzunJJgm72n4cjnOFriVc18KU.roa
File: Q1FzunJJgm72n4cjnOFriVc18KU.roa (raw, json)
Hash identifier: 9QqXBfYauaWBi+EvcV0793mlb9DkJUiHomWOWZ5zJGk=
Subject key identifier: 43:51:73:BA:72:49:82:6E:F6:9F:87:23:9C:E1:6B:89:57:35:F0:A5
Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial: 01941FFA03C60A0C90738A75E61F5D755E5A
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Q1FzunJJgm72n4cjnOFriVc18KU.roa
Signing time: Wed 01 Jan 2025 03:47:46 +0000
ROA not before: Wed 01 Jan 2025 03:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203416
IP address blocks: 91.244.192.0/22 maxlen: 22
185.131.8.0/24 maxlen: 24
185.131.9.0/24 maxlen: 24
185.131.10.0/23 maxlen: 23
2a06:dd40::/29 maxlen: 29
2a06:dd40::/48 maxlen: 48
2a06:dd40:1::/48 maxlen: 48
2a06:dd40:2::/48 maxlen: 48
2a06:dd40:3::/48 maxlen: 48
2a06:dd40:5600::/48 maxlen: 48
2a06:dd40:5601::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:03:c6:0a:0c:90:73:8a:75:e6:1f:5d:75:5e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=435173ba7249826ef69f87239ce16b895735f0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:39:f2:7c:8f:10:5d:2e:8e:11:29:be:58:
71:98:f8:44:4d:91:c5:06:ee:a2:53:e5:f8:20:d5:
91:16:44:09:81:fa:38:4b:e3:a9:44:d6:23:8a:74:
37:13:15:41:ee:e8:50:94:fe:9d:b4:96:d3:c7:81:
ca:dd:03:97:0e:ba:38:58:b3:f2:21:72:8d:d8:fb:
55:61:a3:5d:ab:fc:92:d7:3f:96:a0:d7:b7:23:1e:
d3:04:dc:c8:2a:54:00:c2:ba:fa:af:87:58:d7:a5:
60:bd:bf:21:29:c5:b3:e3:b0:35:b9:35:09:9c:16:
b8:8a:87:84:eb:70:5e:7a:13:e7:c8:f3:37:ae:4e:
fb:51:c9:d8:a3:75:1e:59:40:dc:48:88:80:c7:5b:
cd:e9:ca:94:3a:f6:a7:5f:3a:e9:6b:c7:14:96:3d:
ea:0b:fd:a9:a6:f3:4f:60:37:a7:95:31:9f:80:6d:
e3:41:b9:0b:8c:b8:0d:e9:c1:86:bd:2e:64:f2:20:
09:b7:49:a5:e2:10:6d:06:e6:fb:cc:0b:ad:14:10:
e2:95:f5:4a:2e:34:2b:b8:ea:78:9f:8f:42:63:d8:
f9:82:be:8f:a6:10:5d:37:eb:06:30:51:f8:6b:36:
0b:01:b4:d4:c6:c0:83:de:bd:e1:fb:03:4d:b4:57:
00:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:51:73:BA:72:49:82:6E:F6:9F:87:23:9C:E1:6B:89:57:35:F0:A5
X509v3 Authority Key Identifier:
keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Q1FzunJJgm72n4cjnOFriVc18KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.192.0/22
185.131.8.0/22
IPv6:
2a06:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
4a:48:e1:d7:14:84:86:7b:e8:36:a0:6c:31:ad:b0:54:75:6a:
e9:0d:98:36:63:e0:8e:60:90:16:cc:f2:95:90:31:f7:e8:6f:
3d:f1:f3:42:09:c3:43:a5:a8:d7:a6:2b:0e:5a:5c:45:b7:20:
50:a6:87:0b:62:5a:b5:eb:e8:42:e9:54:0d:4f:06:c4:de:34:
f6:49:aa:f6:94:8d:3d:0e:b8:10:9d:b4:77:e9:a0:99:8d:37:
aa:21:8d:0a:70:2b:9e:43:01:17:21:bf:f2:9f:68:7d:90:e2:
c7:ab:11:6a:5f:46:a2:d3:ce:fd:5c:ad:e5:45:ff:5d:a0:9f:
e4:08:72:fe:a6:19:19:25:4a:2b:24:f0:b0:41:80:83:01:bc:
81:bd:85:79:8c:5b:35:da:3a:76:92:0b:33:3d:64:3d:26:fc:
55:35:fb:d2:be:e0:71:71:a2:cf:4e:01:4e:cf:1e:30:3d:9f:
14:8b:d6:2d:44:1d:fc:9c:28:e1:b3:2b:c2:4d:4b:33:bb:fc:
6a:61:95:58:f2:05:20:a4:97:c7:d3:bc:b6:62:a1:48:ae:a8:
32:c3:3b:a6:fc:57:d2:be:13:7e:1f:ad:1c:3b:93:20:4a:f8:
0a:81:7a:04:b1:06:0e:29:97:a2:aa:c2:7e:06:4c:2c:0c:2e:
55:49:f3:d3
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQf+gPGCgyQc4p15h9ddV5aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NGVhZDM4MDk2MzAzYmM0YjZhMWYyYjAyZTFiOTFiZTQ4
NDkxNDYwHhcNMjUwMTAxMDM0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzUxNzNiYTcyNDk4MjZlZjY5Zjg3MjM5Y2UxNmI4OTU3MzVmMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTc58nyPEF0ujhEpvlhxmPhETZHF
Bu6iU+X4INWRFkQJgfo4S+OpRNYjinQ3ExVB7uhQlP6dtJbTx4HK3QOXDro4WLPy
IXKN2PtVYaNdq/yS1z+WoNe3Ix7TBNzIKlQAwrr6r4dY16Vgvb8hKcWz47A1uTUJ
nBa4ioeE63BeehPnyPM3rk77UcnYo3UeWUDcSIiAx1vN6cqUOvanXzrpa8cUlj3q
C/2ppvNPYDenlTGfgG3jQbkLjLgN6cGGvS5k8iAJt0ml4hBtBub7zAutFBDilfVK
LjQruOp4n49CY9j5gr6PphBdN+sGMFH4azYLAbTUxsCD3r3h+wNNtFcAuQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFENRc7pySYJu9p+HI5zha4lXNfClMB8GA1UdIwQY
MBaAFFZOrTgJYwO8S2ofKwLhuRvkhJFGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xNDI1YTYtMTg2My00MmEwLTgzMjMt
M2M3Mjk2N2ZmN2MxLzEvUTFGenVuSkpnbTcybjRjam5PRnJpVmMxOEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xNDI1YTYtMTg2My00MmEwLTgzMjMtM2M3Mjk2N2ZmN2Mx
LzEvVms2dE9BbGpBN3hMYWg4ckF1RzVHLVNFa1VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW/TAAwQC
uYMIMA0EAgACMAcDBQMqBt1AMA0GCSqGSIb3DQEBCwUAA4IBAQBKSOHXFISGe+g2
oGwxrbBUdWrpDZg2Y+COYJAWzPKVkDH36G898fNCCcNDpajXpisOWlxFtyBQpocL
Ylq16+hC6VQNTwbE3jT2Sar2lI09DrgQnbR36aCZjTeqIY0KcCueQwEXIb/yn2h9
kOLHqxFqX0ai0879XK3lRf9doJ/kCHL+phkZJUorJPCwQYCDAbyBvYV5jFs12jp2
kgszPWQ9JvxVNfvSvuBxcaLPTgFOzx4wPZ8Ui9YtRB38nCjhsyvCTUszu/xqYZVY
8gUgpJfH07y2YqFIrqgywzum/FfSvhN+H60cO5MgSvgKgXoEsQYOKZeiqsJ+Bkws
DC5VSfPT
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:58:13 2025 by rpki-client