Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/bLQJ6PqP5RCL9FnudZAW-bU8UJo.roa
File: bLQJ6PqP5RCL9FnudZAW-bU8UJo.roa (raw, json)
Hash identifier: 7tlhCqNfPH7JwDNGdsdIP2BnMS7k6jeLuHxoXiLn2eY=
Subject key identifier: 6C:B4:09:E8:FA:8F:E5:10:8B:F4:59:EE:75:90:16:F9:B5:3C:50:9A
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 019421B1D216BB673CCC7EE68B108CB9031C
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/bLQJ6PqP5RCL9FnudZAW-bU8UJo.roa
Signing time: Wed 01 Jan 2025 11:48:09 +0000
ROA not before: Wed 01 Jan 2025 11:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61264
IP address blocks: 95.181.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d2:16:bb:67:3c:cc:7e:e6:8b:10:8c:b9:03:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cb409e8fa8fe5108bf459ee759016f9b53c509a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:c9:28:dc:ba:5e:f3:32:03:a0:79:5b:7c:
b6:15:22:94:f6:0d:bc:12:bc:d3:99:66:90:9a:8c:
d8:92:ff:c9:8f:06:e4:4c:99:c7:0b:6f:90:cc:ae:
69:f3:6d:14:15:c1:dd:e5:a2:45:b2:42:5c:5d:d5:
48:50:c2:97:e6:89:f6:3d:9b:59:a4:b9:9b:74:90:
2a:9b:cb:6d:d7:a0:c6:f1:34:2d:37:69:80:8d:07:
3b:3d:e4:03:b8:19:c6:8c:b7:0c:90:90:b8:64:fb:
ce:e7:59:c4:2b:5e:0a:a5:76:6c:b6:55:b6:ca:09:
24:64:9d:a6:48:7e:e8:f7:14:f7:76:1d:0d:e9:9e:
02:82:16:74:34:bf:0a:8f:d7:83:34:26:8c:ff:12:
f2:27:5d:d5:08:64:31:34:6c:03:33:fd:95:46:6b:
74:c0:f8:43:e5:8c:8c:50:ae:ba:61:05:b9:dd:b5:
5d:bf:55:56:16:77:67:0d:37:e4:ab:2e:e9:9b:32:
7a:ed:e6:66:05:db:38:9d:32:3c:39:08:c6:71:99:
81:c5:3c:14:d1:08:5a:90:a1:c4:fe:6f:6d:33:05:
b1:a1:1c:9b:4c:af:4b:a0:27:d2:63:b0:a5:e3:2d:
b8:15:12:9a:18:db:a5:c4:e1:f0:ee:e8:3a:b8:49:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B4:09:E8:FA:8F:E5:10:8B:F4:59:EE:75:90:16:F9:B5:3C:50:9A
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/bLQJ6PqP5RCL9FnudZAW-bU8UJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.144.0/24
Signature Algorithm: sha256WithRSAEncryption
10:22:8e:42:5f:a9:16:60:0b:b3:df:f1:19:83:ec:e3:3b:91:
c9:ed:68:1f:32:49:34:da:8c:ba:83:5b:93:bc:4c:51:a2:3e:
cf:9c:bc:f1:24:71:7c:a3:1a:01:05:48:47:44:2b:81:0a:87:
0f:9c:1d:64:73:5a:01:83:78:97:9a:b0:8f:a7:c3:51:e6:79:
18:2f:1c:e5:3b:38:d4:b8:94:35:a6:5c:23:b6:2d:17:6c:ed:
21:81:13:32:f2:76:0d:46:e6:e0:68:d1:73:23:ff:04:2d:b7:
54:20:cd:91:ee:b2:e9:a0:89:be:f4:60:dd:b8:94:f7:99:ec:
63:e8:c8:42:17:31:2d:d2:fc:23:80:6a:80:28:30:6b:ad:05:
2c:49:6e:94:d0:4b:e7:24:9c:5f:8c:4f:80:64:43:ed:ac:57:
40:64:8d:0e:54:b0:66:85:7a:e9:a6:da:5c:95:5f:85:18:81:
0d:8e:8f:05:85:e7:85:3c:89:9c:6b:d6:14:bb:ed:14:62:92:
9e:f3:bf:d6:35:45:1f:ca:80:cf:9e:ff:19:e3:39:bb:54:52:
c5:bf:66:96:10:ff:62:ba:c6:c3:48:cf:b7:cc:3f:1b:38:28:
86:37:3b:eb:e3:30:34:70:7d:cf:a2:74:95:4b:86:f7:50:e0:
20:e9:a5:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsdIWu2c8zH7mixCMuQMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjUwMTAxMTE0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2I0MDllOGZhOGZlNTEwOGJmNDU5ZWU3NTkwMTZmOWI1M2M1MDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W7JKNy6XvMyA6B5W3y2FSKU9g28
ErzTmWaQmozYkv/JjwbkTJnHC2+QzK5p820UFcHd5aJFskJcXdVIUMKX5on2PZtZ
pLmbdJAqm8tt16DG8TQtN2mAjQc7PeQDuBnGjLcMkJC4ZPvO51nEK14KpXZstlW2
ygkkZJ2mSH7o9xT3dh0N6Z4CghZ0NL8Kj9eDNCaM/xLyJ13VCGQxNGwDM/2VRmt0
wPhD5YyMUK66YQW53bVdv1VWFndnDTfkqy7pmzJ67eZmBds4nTI8OQjGcZmBxTwU
0QhakKHE/m9tMwWxoRybTK9LoCfSY7Cl4y24FRKaGNulxOHw7ug6uEnaFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGy0Cej6j+UQi/RZ7nWQFvm1PFCaMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEvYkxRSjZQcVA1UkNMOUZudWRaQVctYlU4VUpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7WQMA0G
CSqGSIb3DQEBCwUAA4IBAQAQIo5CX6kWYAuz3/EZg+zjO5HJ7WgfMkk02oy6g1uT
vExRoj7PnLzxJHF8oxoBBUhHRCuBCocPnB1kc1oBg3iXmrCPp8NR5nkYLxzlOzjU
uJQ1plwjti0XbO0hgRMy8nYNRubgaNFzI/8ELbdUIM2R7rLpoIm+9GDduJT3mexj
6MhCFzEt0vwjgGqAKDBrrQUsSW6U0EvnJJxfjE+AZEPtrFdAZI0OVLBmhXrpptpc
lV+FGIENjo8FheeFPImca9YUu+0UYpKe87/WNUUfyoDPnv8Z4zm7VFLFv2aWEP9i
usbDSM+3zD8bOCiGNzvr4zA0cH3PonSVS4b3UOAg6aW4
-----END CERTIFICATE-----
Generated at Tue Apr 15 20:58:25 2025 by rpki-client