Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/qSt6_fPnhc395r0EppghyMpbl50.roa
File: qSt6_fPnhc395r0EppghyMpbl50.roa (raw, json)
Hash identifier: WLU9AacDdZK/vCoUCpNnuiXgsMa/7UTXH1xNyMiTNHg=
Subject key identifier: A9:2B:7A:FD:F3:E7:85:CD:FD:E6:BD:04:A6:98:21:C8:CA:5B:97:9D
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 01942143ED8ECE871B2E139091161902510F
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/qSt6_fPnhc395r0EppghyMpbl50.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50204
IP address blocks: 91.196.60.0/22 maxlen: 22
195.69.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ed:8e:ce:87:1b:2e:13:90:91:16:19:02:51:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a92b7afdf3e785cdfde6bd04a69821c8ca5b979d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6b:5c:35:50:95:d0:7b:55:ee:8e:63:45:74:
35:93:6c:67:1e:55:aa:10:ee:0e:31:32:56:81:ed:
12:b9:b1:6c:9a:e9:57:6e:eb:97:2c:fc:ac:66:2e:
bb:53:52:af:b9:ca:b7:ea:55:e3:ab:76:5f:ea:23:
63:a1:01:cd:1d:03:84:b8:1a:de:92:1e:41:b2:48:
95:8a:fb:8c:c6:a5:56:59:f7:44:57:96:b0:08:aa:
1f:e1:d1:f8:40:61:c2:40:7b:7f:f7:ff:f0:b7:ee:
73:04:52:59:5e:91:84:e6:4c:b7:fd:11:ae:35:66:
d8:be:2c:54:17:33:e5:bb:0e:17:47:11:6c:0a:dd:
35:bc:d5:62:23:c6:1c:9c:b9:9d:5a:73:c6:54:6a:
d5:cd:19:53:c9:13:39:0a:12:96:53:3e:16:7b:40:
6d:fd:a6:0f:f0:9b:8c:69:d5:15:7e:a5:f2:47:2d:
25:4d:58:f7:5b:39:83:05:34:7e:fb:91:6f:90:bc:
77:86:28:19:31:0e:5b:8a:4f:97:31:f5:f6:52:f4:
a7:24:18:b4:50:f6:f1:57:4f:71:82:62:d9:59:52:
06:3a:b8:7d:17:b4:57:a2:1e:25:8f:af:06:0d:a0:
a1:aa:23:2a:c0:9c:74:13:79:bd:30:e3:a5:e9:96:
2d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2B:7A:FD:F3:E7:85:CD:FD:E6:BD:04:A6:98:21:C8:CA:5B:97:9D
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/qSt6_fPnhc395r0EppghyMpbl50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.60.0/22
195.69.248.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:ac:d0:47:cf:6d:ba:78:c7:52:b1:70:52:ef:d1:c0:c8:0b:
57:a6:e3:97:38:0f:de:0f:dc:f6:ba:f6:ef:cb:10:70:33:1c:
a4:92:6f:ea:c8:e3:fe:fc:f4:3f:0b:75:da:07:f0:60:c0:d9:
df:ac:5a:37:e0:3a:0e:ad:6a:0c:cc:7f:08:4a:e6:42:f8:8a:
30:d1:36:8f:51:71:c7:70:19:32:aa:39:03:ac:31:e4:59:96:
c4:5b:4c:91:43:eb:d6:1d:d1:ae:07:70:4a:ab:6d:90:4d:8d:
83:6b:f0:d3:1b:b5:7b:91:d5:42:7f:e5:ce:44:87:b2:69:d4:
60:70:52:63:d1:a9:07:df:c5:37:2f:98:6f:f7:11:58:bd:bc:
2c:de:d6:fc:4e:9e:c4:35:e4:21:cb:d1:6d:26:d1:ee:c7:f9:
7b:35:a4:bd:ad:8a:35:97:9b:83:e6:68:71:60:bd:6b:05:20:
dd:86:39:6a:ca:a5:3d:da:e0:f0:fa:68:49:7a:3c:98:9c:fa:
15:13:d8:d8:9f:a7:da:4b:cd:51:35:55:22:69:37:84:c0:c7:
52:45:a9:13:0f:a2:ab:89:18:d8:6c:56:f0:5a:40:ed:da:1b:
38:d0:6b:db:29:4e:aa:86:89:03:0f:c3:95:2b:15:fb:27:34:
ef:95:f3:33
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhQ+2OzocbLhOQkRYZAlEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZTZlYTgzOTI2YmM0NzhjNzg1NDcxZDgwNWE1YzEyMTBh
OGM5OTMwHhcNMjUwMTAxMDk0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTJiN2FmZGYzZTc4NWNkZmRlNmJkMDRhNjk4MjFjOGNhNWI5NzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmtcNVCV0HtV7o5jRXQ1k2xnHlWq
EO4OMTJWge0SubFsmulXbuuXLPysZi67U1Kvucq36lXjq3Zf6iNjoQHNHQOEuBre
kh5BskiVivuMxqVWWfdEV5awCKof4dH4QGHCQHt/9//wt+5zBFJZXpGE5ky3/RGu
NWbYvixUFzPluw4XRxFsCt01vNViI8YcnLmdWnPGVGrVzRlTyRM5ChKWUz4We0Bt
/aYP8JuMadUVfqXyRy0lTVj3WzmDBTR++5FvkLx3higZMQ5bik+XMfX2UvSnJBi0
UPbxV09xgmLZWVIGOrh9F7RXoh4lj68GDaChqiMqwJx0E3m9MOOl6ZYt9wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKkrev3z54XN/ea9BKaYIcjKW5edMB8GA1UdIwQY
MBaAFGHm6oOSa8R4x4VHHYBaXBIQqMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83NGJmNDEtZDZhNy00ZmI1LTgwMWMt
MzNjYzNhZGIxZTc4LzEvcVN0Nl9mUG5oYzM5NXIwRXBwZ2h5TXBibDUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83NGJmNDEtZDZhNy00ZmI1LTgwMWMtMzNjYzNhZGIxZTc4
LzEvWWVicWc1SnJ4SGpIaFVjZGdGcGNFaENveVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8Q8AwQC
w0X4MA0GCSqGSIb3DQEBCwUAA4IBAQCLrNBHz226eMdSsXBS79HAyAtXpuOXOA/e
D9z2uvbvyxBwMxykkm/qyOP+/PQ/C3XaB/BgwNnfrFo34DoOrWoMzH8ISuZC+Iow
0TaPUXHHcBkyqjkDrDHkWZbEW0yRQ+vWHdGuB3BKq22QTY2Da/DTG7V7kdVCf+XO
RIeyadRgcFJj0akH38U3L5hv9xFYvbws3tb8Tp7ENeQhy9FtJtHux/l7NaS9rYo1
l5uD5mhxYL1rBSDdhjlqyqU92uDw+mhJejyYnPoVE9jYn6faS81RNVUiaTeEwMdS
RakTD6KriRjYbFbwWkDt2hs40GvbKU6qhokDD8OVKxX7JzTvlfMz
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:00:11 2025 by rpki-client