Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/QL3J5aUF7REcuSuGJkHRh-T_Mlk.roa
File: QL3J5aUF7REcuSuGJkHRh-T_Mlk.roa (raw, json)
Hash identifier: NRo/K62fCGXaYZyQldEoQlP95+Ec/K3+eWLflyYVYMA=
Subject key identifier: 40:BD:C9:E5:A5:05:ED:11:1C:B9:2B:86:26:41:D1:87:E4:FF:32:59
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 0194266C19AD18181C11A5637CF325186878
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/QL3J5aUF7REcuSuGJkHRh-T_Mlk.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28742
IP address blocks: 194.21.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:19:ad:18:18:1c:11:a5:63:7c:f3:25:18:68:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40bdc9e5a505ed111cb92b862641d187e4ff3259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:01:72:3e:64:49:5b:e2:aa:07:7b:6e:9a:
6e:97:d2:24:d6:45:73:50:ce:9f:dd:22:45:8a:30:
ec:c1:bc:28:dd:30:0d:f9:54:0b:71:e1:d5:d9:17:
d4:62:12:35:9e:16:45:10:f5:45:b3:9c:be:e7:a5:
9d:7b:23:3d:bf:47:99:92:7d:29:29:88:5c:40:87:
e6:55:2c:2a:ff:7d:2c:2e:ba:a3:0e:cf:f8:2b:8c:
7c:7a:d4:57:9f:08:25:26:e3:43:fc:de:fd:6b:9b:
e3:a4:26:09:f3:6f:d4:d3:cc:0f:76:bc:5b:a6:69:
4a:82:b4:8f:e0:41:18:37:c5:7e:b6:f4:db:ff:a3:
ec:cc:2b:6c:6c:e7:07:15:ff:4d:68:2c:22:3a:8f:
28:e2:82:12:92:3c:4f:e3:39:73:aa:98:c9:84:0c:
b2:d9:98:f8:34:0a:8f:2d:d0:9a:6f:18:e4:5a:e9:
22:3f:b2:19:76:5f:86:2f:6f:a6:ae:80:22:0c:87:
3a:17:68:1f:a0:4f:45:52:8a:49:af:67:ca:c5:00:
0f:c9:46:22:09:ba:e3:57:e3:32:37:37:3f:55:71:
d2:c5:62:74:bd:ce:26:22:d7:f2:1a:44:31:b1:82:
dd:20:ef:3c:9f:a8:67:bf:f3:9c:ec:0d:d0:b2:79:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BD:C9:E5:A5:05:ED:11:1C:B9:2B:86:26:41:D1:87:E4:FF:32:59
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/QL3J5aUF7REcuSuGJkHRh-T_Mlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.21.56.0/23
Signature Algorithm: sha256WithRSAEncryption
03:a3:26:fa:20:d1:d2:5e:04:da:0c:a1:5f:c5:78:fe:8d:d8:
b0:b9:49:25:c6:01:65:74:ec:01:1f:bd:01:be:e7:1b:b6:95:
66:00:05:fb:93:a0:9b:f6:da:8d:47:2e:cb:72:d5:18:74:b3:
fb:32:08:29:84:17:a0:5f:3b:1a:cb:c1:4e:5a:f0:f3:7a:b9:
e7:ed:21:12:f4:f0:f4:80:48:65:0c:3d:87:f1:8e:59:c0:28:
93:d8:7a:4c:33:6e:c8:fe:6c:06:37:ce:b1:df:1d:1c:82:c9:
c4:98:64:15:62:1a:0a:b9:c9:a6:5c:c5:4e:0e:78:31:fc:ee:
dc:48:88:07:8f:b9:e6:c4:8c:b5:3d:0b:3d:db:1f:e8:96:96:
88:60:17:c7:6e:f1:33:a0:6f:25:7b:29:55:ca:9f:6c:56:af:
76:1c:e0:28:88:7b:cd:0c:3a:ed:e3:c7:55:23:b7:ab:cd:71:
1b:9c:23:df:a2:6c:2f:1f:00:97:28:b0:6b:82:03:67:d4:cf:
f1:af:49:92:e4:35:dd:29:5f:77:b8:cc:0e:fa:c0:8d:bb:8b:
2b:94:e3:b4:07:2b:39:ad:53:49:e1:19:5b:db:2b:27:ae:0a:
ca:e7:05:2d:00:c5:94:24:47:c0:38:ff:6b:c3:34:10:47:c1:
e3:1c:72:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbBmtGBgcEaVjfPMlGGh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi
MGNhMDkwHhcNMjUwMTAyMDk1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGJkYzllNWE1MDVlZDExMWNiOTJiODYyNjQxZDE4N2U0ZmYzMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp8Bcj5kSVviqgd7bppul9Ik1kVz
UM6f3SJFijDswbwo3TAN+VQLceHV2RfUYhI1nhZFEPVFs5y+56WdeyM9v0eZkn0p
KYhcQIfmVSwq/30sLrqjDs/4K4x8etRXnwglJuND/N79a5vjpCYJ82/U08wPdrxb
pmlKgrSP4EEYN8V+tvTb/6PszCtsbOcHFf9NaCwiOo8o4oISkjxP4zlzqpjJhAyy
2Zj4NAqPLdCabxjkWukiP7IZdl+GL2+mroAiDIc6F2gfoE9FUopJr2fKxQAPyUYi
CbrjV+MyNzc/VXHSxWJ0vc4mItfyGkQxsYLdIO88n6hnv/Oc7A3QsnmQHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEC9yeWlBe0RHLkrhiZB0Yfk/zJZMB8GA1UdIwQY
MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct
NWI1ZTMzY2U3MGFkLzEvUUwzSjVhVUY3UkVjdVN1R0prSFJoLVRfTWxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk
LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwhU4MA0G
CSqGSIb3DQEBCwUAA4IBAQADoyb6INHSXgTaDKFfxXj+jdiwuUklxgFldOwBH70B
vucbtpVmAAX7k6Cb9tqNRy7LctUYdLP7MggphBegXzsay8FOWvDzernn7SES9PD0
gEhlDD2H8Y5ZwCiT2HpMM27I/mwGN86x3x0cgsnEmGQVYhoKucmmXMVODngx/O7c
SIgHj7nmxIy1PQs92x/olpaIYBfHbvEzoG8leylVyp9sVq92HOAoiHvNDDrt48dV
I7erzXEbnCPfomwvHwCXKLBrggNn1M/xr0mS5DXdKV93uMwO+sCNu4srlOO0Bys5
rVNJ4Rlb2ysnrgrK5wUtAMWUJEfAOP9rwzQQR8HjHHK3
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:31 2025 by rpki-client