Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa
File: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (raw, json)
Hash identifier: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=
Subject key identifier: 42:EB:C8:1C:9F:F3:0E:9E:FD:3E:52:AE:D9:26:E1:E0:D3:5D:B2:98
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01942521AF41A67C7F893F5CACBC1D8466C5
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa
Signing time: Thu 02 Jan 2025 03:49:12 +0000
ROA not before: Thu 02 Jan 2025 03:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214210
IP address blocks: 31.41.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:af:41:a6:7c:7f:89:3f:5c:ac:bc:1d:84:66:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 2 03:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42ebc81c9ff30e9efd3e52aed926e1e0d35db298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:30:5d:6b:9a:01:a8:75:2a:2c:de:89:f0:
73:0d:36:a6:03:8c:37:fe:bb:2e:b1:2c:98:1f:08:
68:bc:d1:35:a1:e3:e7:59:6d:c9:92:29:51:3b:ac:
ca:16:62:ad:4c:0a:20:29:90:ac:24:7d:be:f1:63:
06:a1:fe:84:38:3c:a5:a0:03:85:b3:3a:7a:7b:b8:
7f:27:98:97:e7:49:3d:ed:d6:25:33:f9:92:e5:aa:
c5:26:2c:36:2d:b3:fb:ec:ac:d6:ed:bc:d3:1f:a9:
0f:0c:79:3e:20:ca:69:59:62:3e:9b:d5:1c:9b:7a:
e2:88:d3:0d:a7:f5:aa:c2:a4:dc:99:30:df:f3:1e:
02:19:c1:44:53:aa:9b:b5:3e:f2:27:9d:80:35:d6:
bb:ef:9d:cf:34:c2:65:b9:4a:25:f8:e2:09:92:50:
eb:ca:38:7b:9e:ac:e8:e3:6e:0e:7d:69:9b:9e:8e:
bd:76:09:f7:bd:0e:cd:13:8e:18:54:43:e1:61:4b:
b5:be:2c:90:90:fd:a0:72:9d:95:21:a3:a3:24:f2:
df:51:3d:99:5d:c1:25:73:2b:6c:20:68:12:b1:e8:
05:03:59:33:c1:34:95:e2:f9:61:50:ca:54:ff:50:
31:cd:f9:a2:ea:62:31:1b:f8:3b:1c:86:3e:1b:b6:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EB:C8:1C:9F:F3:0E:9E:FD:3E:52:AE:D9:26:E1:E0:D3:5D:B2:98
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.15.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ea:26:51:cd:1b:06:20:a1:1d:1e:08:34:0b:4c:30:b6:ee:
92:23:41:5a:cc:01:01:08:24:6b:05:f8:88:98:df:da:37:35:
d9:65:b6:54:ce:3a:e4:f8:c7:1f:5c:da:6b:79:e1:49:78:76:
d6:33:ec:a9:a4:a5:1c:e8:65:af:83:c0:8c:97:d4:f8:38:e8:
54:66:cf:04:1e:85:2a:b2:64:4c:11:29:06:2b:8f:6e:78:f9:
ac:7e:48:07:41:f3:b5:ea:bb:6d:83:8d:02:d3:f3:52:34:66:
8b:82:9c:b6:ef:1b:b0:9e:0b:c4:a9:82:5d:dd:61:a9:97:ab:
28:c8:95:35:44:b0:89:f4:70:22:bc:c8:e6:f3:71:77:74:bc:
8e:c9:83:43:2f:15:78:06:8a:dc:da:71:13:6e:25:a0:9c:08:
0e:26:10:68:62:7b:2a:82:00:0c:ec:95:e3:d3:97:8b:b9:30:
d2:b0:03:26:b1:50:d7:e2:52:e0:f0:c5:e9:0a:0a:70:48:c0:
10:8d:3b:5e:31:bf:1f:c6:eb:c8:bc:1c:7f:79:21:fc:f2:e9:
a4:79:73:4a:e8:51:05:20:77:69:9f:ad:62:d4:a3:0e:19:9a:
e7:a7:e3:b7:6a:38:07:79:0c:f1:48:c1:ee:09:f7:ff:f5:7d:
e8:14:33:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIa9Bpnx/iT9crLwdhGbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh
NTAyNTAwHhcNMjUwMTAyMDM0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmViYzgxYzlmZjMwZTllZmQzZTUyYWVkOTI2ZTFlMGQzNWRiMjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnswXWuaAah1KizeifBzDTamA4w3
/rsusSyYHwhovNE1oePnWW3JkilRO6zKFmKtTAogKZCsJH2+8WMGof6EODyloAOF
szp6e7h/J5iX50k97dYlM/mS5arFJiw2LbP77KzW7bzTH6kPDHk+IMppWWI+m9Uc
m3riiNMNp/WqwqTcmTDf8x4CGcFEU6qbtT7yJ52ANda7753PNMJluUol+OIJklDr
yjh7nqzo424OfWmbno69dgn3vQ7NE44YVEPhYUu1viyQkP2gcp2VIaOjJPLfUT2Z
XcElcytsIGgSsegFA1kzwTSV4vlhUMpU/1Axzfmi6mIxG/g7HIY+G7bwiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFELryByf8w6e/T5Srtkm4eDTXbKYMB8GA1UdIwQY
MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt
YjY2ZmE0ZjQ3NjNhLzEvUXV2SUhKX3pEcDc5UGxLdTJTYmg0Tk5kc3BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh
LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHykPMA0G
CSqGSIb3DQEBCwUAA4IBAQBv6iZRzRsGIKEdHgg0C0wwtu6SI0FazAEBCCRrBfiI
mN/aNzXZZbZUzjrk+McfXNpreeFJeHbWM+yppKUc6GWvg8CMl9T4OOhUZs8EHoUq
smRMESkGK49uePmsfkgHQfO16rttg40C0/NSNGaLgpy27xuwngvEqYJd3WGpl6so
yJU1RLCJ9HAivMjm83F3dLyOyYNDLxV4Borc2nETbiWgnAgOJhBoYnsqggAM7JXj
05eLuTDSsAMmsVDX4lLg8MXpCgpwSMAQjTteMb8fxuvIvBx/eSH88umkeXNK6FEF
IHdpn61i1KMOGZrnp+O3ajgHeQzxSMHuCff/9X3oFDMl
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:33 2025 by rpki-client