Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/L5RoqBPAIxt1vyjTWSXmhMfDIGQ.roa
File: L5RoqBPAIxt1vyjTWSXmhMfDIGQ.roa (raw, json)
Hash identifier: /qnDyDKLdI8C1LuTXc4GUnjm3lOo1qcuwAVpaz4euq4=
Subject key identifier: 2F:94:68:A8:13:C0:23:1B:75:BF:28:D3:59:25:E6:84:C7:C3:20:64
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 01942445032D1574181D9E1CD09AA1DF2B55
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/L5RoqBPAIxt1vyjTWSXmhMfDIGQ.roa
Signing time: Wed 01 Jan 2025 23:48:09 +0000
ROA not before: Wed 01 Jan 2025 23:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214591
IP address blocks: 193.34.203.192/26 maxlen: 26
2001:7f8:15b:1::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:03:2d:15:74:18:1d:9e:1c:d0:9a:a1:df:2b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Jan 1 23:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f9468a813c0231b75bf28d35925e684c7c32064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:0c:36:10:e0:c7:09:e2:41:35:37:f2:51:
4a:2e:dc:6f:b8:57:72:4d:e1:54:e3:36:68:57:de:
a0:12:d2:43:e5:91:f7:eb:df:68:e3:d2:b1:44:36:
6a:f0:2c:ab:d8:43:ad:51:34:ff:af:ed:00:8a:a8:
6a:49:9a:58:38:2c:2c:34:55:90:c7:a6:47:bb:d5:
e8:b7:8a:9e:84:64:84:d1:45:24:7e:ab:e6:4e:77:
d6:8d:2f:66:e7:65:8f:76:a3:51:43:55:08:4d:96:
07:04:df:22:e7:c9:6b:f4:7b:33:35:ff:26:f2:a3:
19:4f:f3:96:69:f2:6a:2c:49:5c:d1:d8:80:ff:22:
b4:01:1d:d5:ac:af:15:04:1e:6e:cc:44:f0:3a:30:
53:bc:28:32:cb:4d:4f:07:63:ab:99:b5:cb:5b:fe:
03:d4:52:0d:7e:f2:68:a5:c0:0e:29:6d:72:fe:03:
56:41:fb:20:d3:72:27:1a:07:b9:7d:9d:b9:93:b9:
3f:f6:63:5b:38:be:aa:6a:0e:9e:65:4d:3d:63:44:
42:40:c5:e8:fd:a9:56:89:d7:c3:57:08:3d:ae:a5:
c8:a1:be:f1:82:f1:66:3b:fc:2f:ca:7f:0e:54:f3:
9b:ca:60:dc:03:10:57:2f:e6:63:42:a7:83:cf:d7:
e4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:94:68:A8:13:C0:23:1B:75:BF:28:D3:59:25:E6:84:C7:C3:20:64
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/L5RoqBPAIxt1vyjTWSXmhMfDIGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.203.192/26
IPv6:
2001:7f8:15b:1::/64
Signature Algorithm: sha256WithRSAEncryption
4d:a0:e4:48:cc:f2:3b:1f:18:b2:c8:f9:a1:36:73:a2:e9:f9:
65:87:2e:05:d3:1a:9e:31:e5:ba:5a:01:61:de:b4:d3:a6:35:
0a:be:2a:72:94:44:1a:d5:48:a4:0c:fa:e5:46:51:31:3f:95:
4f:63:c3:25:ff:2c:e0:79:0d:bf:ea:e6:0d:11:f8:0b:4f:46:
f5:59:17:1a:66:67:f0:c1:e1:c9:84:e5:50:1f:1b:5b:c9:f7:
00:59:24:65:e1:df:d5:64:91:ba:09:f0:bd:ce:a6:7f:75:1e:
d8:12:33:b3:d8:8c:a4:44:13:b9:8d:0d:48:1e:08:38:df:49:
5d:ea:80:0c:a2:b6:52:9a:b2:76:33:27:db:d6:2f:4e:da:0f:
14:2e:cd:dd:36:92:8d:da:25:de:09:ae:79:05:fe:eb:22:c7:
a2:25:86:d7:06:5b:e5:ad:2f:ba:db:67:bd:6b:6a:38:b7:55:
9d:af:eb:5d:e6:09:b5:f0:f7:e5:e7:77:6f:83:7d:57:e6:7d:
05:7c:4d:d1:20:b8:5b:bf:15:21:52:5a:0a:ae:d0:aa:95:c6:
91:e3:15:0c:52:d1:27:33:49:c0:69:61:f9:34:8b:aa:75:cf:
d6:51:0f:ff:4c:fb:fe:f6:f8:c7:e6:e2:2a:a3:c7:24:30:84:
57:41:ab:c8
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQkRQMtFXQYHZ4c0Jqh3ytVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWE3NDhiYTE0YTc2ZTVkOGE2ZWRhY2I1NDI2MDgyYTU2
ZjVlM2QwHhcNMjUwMTAxMjM0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjk0NjhhODEzYzAyMzFiNzViZjI4ZDM1OTI1ZTY4NGM3YzMyMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobsMNhDgxwniQTU38lFKLtxvuFdy
TeFU4zZoV96gEtJD5ZH3699o49KxRDZq8Cyr2EOtUTT/r+0AiqhqSZpYOCwsNFWQ
x6ZHu9Xot4qehGSE0UUkfqvmTnfWjS9m52WPdqNRQ1UITZYHBN8i58lr9HszNf8m
8qMZT/OWafJqLElc0diA/yK0AR3VrK8VBB5uzETwOjBTvCgyy01PB2OrmbXLW/4D
1FINfvJopcAOKW1y/gNWQfsg03InGge5fZ25k7k/9mNbOL6qag6eZU09Y0RCQMXo
/alWidfDVwg9rqXIob7xgvFmO/wvyn8OVPObymDcAxBXL+ZjQqeDz9fkvwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFC+UaKgTwCMbdb8o01kl5oTHwyBkMB8GA1UdIwQY
MBaAFLqqdIuhSnbl2KbtrLVCYIKlb149MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgt
YzUxOTUxNjJlM2JlLzEvTDVSb3FCUEFJeHQxdnlqVFdTWG1oTWZESUdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgtYzUxOTUxNjJlM2Jl
LzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjANBAIAATAHAwUGwSLLwDAR
BAIAAjALAwkAIAEH+AFbAAEwDQYJKoZIhvcNAQELBQADggEBAE2g5EjM8jsfGLLI
+aE2c6Lp+WWHLgXTGp4x5bpaAWHetNOmNQq+KnKURBrVSKQM+uVGUTE/lU9jwyX/
LOB5Db/q5g0R+AtPRvVZFxpmZ/DB4cmE5VAfG1vJ9wBZJGXh39VkkboJ8L3Opn91
HtgSM7PYjKREE7mNDUgeCDjfSV3qgAyitlKasnYzJ9vWL07aDxQuzd02ko3aJd4J
rnkF/usix6IlhtcGW+WtL7rbZ71raji3VZ2v613mCbXw9+Xnd2+DfVfmfQV8TdEg
uFu/FSFSWgqu0KqVxpHjFQxS0SczScBpYfk0i6p1z9ZRD/9M+/72+Mfm4iqjxyQw
hFdBq8g=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:27:31 2025 by rpki-client