Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/qz_R1TGXZbGqhqM3g1GKGHaKees.roa
File: qz_R1TGXZbGqhqM3g1GKGHaKees.roa (raw, json)
Hash identifier: 43NOOm+JlcC5EDJuUoKJaXArhrxFvOp4ARvvoT/qKOs=
Subject key identifier: AB:3F:D1:D5:31:97:65:B1:AA:86:A3:37:83:51:8A:18:76:8A:79:EB
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019420D5F05839781F6F85DB6BFAD94FFC57
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/qz_R1TGXZbGqhqM3g1GKGHaKees.roa
Signing time: Wed 01 Jan 2025 07:47:59 +0000
ROA not before: Wed 01 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42354
IP address blocks: 94.16.23.0/24 maxlen: 24
94.16.27.0/24 maxlen: 32
144.208.213.140/32 maxlen: 32
144.208.213.143/32 maxlen: 32
185.228.148.84/32 maxlen: 32
185.228.148.184/29 maxlen: 32
185.228.149.112/28 maxlen: 32
185.228.150.176/29 maxlen: 32
2a00:11c0:e:ffff:1::6/128 maxlen: 128
2a00:11c0:e:ffff:1::7/128 maxlen: 128
2a00:11c0:3d::/48 maxlen: 48
2a00:11c0:4b::/48 maxlen: 48
2a00:11c0:62::/48 maxlen: 128
2a00:11c0:82:359:217:146:20:72/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f0:58:39:78:1f:6f:85:db:6b:fa:d9:4f:fc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab3fd1d5319765b1aa86a33783518a18768a79eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:41:88:3f:e8:f4:f3:8a:71:71:a6:a1:c3:
72:ea:da:db:69:1b:d4:aa:42:15:91:e5:c0:a2:72:
13:c0:bb:7b:50:44:f1:b6:63:a1:3f:e7:5b:9f:65:
a0:97:ff:f6:78:11:c1:99:50:ab:a7:7b:9f:77:ff:
34:73:a6:60:69:5e:99:a3:07:da:90:e0:d0:57:d2:
f0:5c:b8:28:b3:cb:1a:66:5a:f5:28:02:d4:ba:96:
7b:df:fb:9b:fc:bd:1b:39:13:c8:b7:1d:d6:24:03:
8c:2b:25:b2:63:af:09:76:9d:e1:63:ff:10:3e:76:
49:3a:25:49:de:83:1e:26:a6:37:0b:60:1c:6b:ac:
a2:5c:ff:99:90:a7:df:03:cf:df:96:35:f6:98:8f:
78:7a:3f:ec:48:a7:85:7f:91:10:cb:10:2c:0a:e4:
a1:2a:6c:5c:60:f1:bf:05:74:c6:c3:1c:2e:da:8b:
4e:d0:40:f8:55:28:45:8c:d5:ce:13:be:12:3a:55:
61:1d:3b:6f:62:84:46:b1:e5:73:ef:cb:6d:ab:1f:
2a:11:eb:68:32:4e:6e:49:cc:16:50:2c:b2:7f:3a:
4f:14:d7:65:5e:46:bd:e1:4f:1d:56:19:72:6d:13:
a8:34:bc:ae:70:6d:e3:45:c2:42:77:1b:e4:0e:68:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3F:D1:D5:31:97:65:B1:AA:86:A3:37:83:51:8A:18:76:8A:79:EB
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/qz_R1TGXZbGqhqM3g1GKGHaKees.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.16.23.0/24
94.16.27.0/24
144.208.213.140/32
144.208.213.143/32
185.228.148.84/32
185.228.148.184/29
185.228.149.112/28
185.228.150.176/29
IPv6:
2a00:11c0:e:ffff:1:0:0:6/127
2a00:11c0:3d::/48
2a00:11c0:4b::/48
2a00:11c0:62::/48
2a00:11c0:82:359:217:146:20:72/128
Signature Algorithm: sha256WithRSAEncryption
d3:fc:fb:5f:ea:4d:57:a6:35:90:14:c1:fc:d2:71:72:83:f3:
01:f7:3b:c9:dc:b9:37:59:a1:fe:57:85:af:c7:3f:a8:26:32:
d6:3f:1f:b9:47:09:13:10:cf:f9:5c:c4:b1:58:e8:7c:8f:57:
26:a6:77:79:5f:a7:21:03:1c:e6:84:4f:ec:d2:55:97:0e:17:
45:7b:ed:40:c1:7a:9c:9d:d6:43:0b:71:49:3a:75:e0:2f:52:
09:b2:ab:ab:7a:e4:c1:5e:9b:c7:20:1c:ac:b7:c4:7e:c4:e6:
77:f2:4e:71:35:2c:48:41:00:6b:05:95:66:b3:eb:48:bf:c7:
23:07:76:1b:05:ee:ab:54:27:74:a2:38:98:70:77:f4:83:62:
c1:58:84:2b:ab:3b:16:1f:8e:6a:39:ec:78:bf:b6:3c:49:4e:
79:5c:ee:29:ba:47:4e:62:ce:67:a9:4d:53:bc:23:4d:16:bd:
c4:a4:08:65:48:39:7f:3e:8b:f3:69:78:15:65:98:19:3b:eb:
f7:e8:8d:2e:55:ef:8c:48:c7:52:3f:29:11:db:ee:89:10:8b:
ee:9f:75:e4:49:56:6c:86:51:a8:9b:ac:ea:a0:27:93:cb:49:
0e:58:85:88:a5:82:ab:5f:0b:1c:0b:24:57:44:2a:5c:0a:8d:
6a:46:be:b0
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZQg1fBYOXgfb4Xba/rZT/xXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3
YTE1MjgwHhcNMjUwMTAxMDc0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjNmZDFkNTMxOTc2NWIxYWE4NmEzMzc4MzUxOGExODc2OGE3OWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbNBiD/o9POKcXGmocNy6trbaRvU
qkIVkeXAonITwLt7UETxtmOhP+dbn2Wgl//2eBHBmVCrp3ufd/80c6ZgaV6Zowfa
kODQV9LwXLgos8saZlr1KALUupZ73/ub/L0bORPItx3WJAOMKyWyY68Jdp3hY/8Q
PnZJOiVJ3oMeJqY3C2Aca6yiXP+ZkKffA8/fljX2mI94ej/sSKeFf5EQyxAsCuSh
KmxcYPG/BXTGwxwu2otO0ED4VShFjNXOE74SOlVhHTtvYoRGseVz78ttqx8qEeto
Mk5uScwWUCyyfzpPFNdlXka94U8dVhlybROoNLyucG3jRcJCdxvkDmiWnwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFKs/0dUxl2WxqoajN4NRihh2innrMB8GA1UdIwQY
MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt
NzQxMzk1OTEzMTJlLzEvcXpfUjFUR1haYkdxaHFNM2cxR0tHSGFLZWVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl
LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzA8BAIAATA2AwQAXhAX
AwQAXhAbAwUAkNDVjAMFAJDQ1Y8DBQC55JRUAwUDueSUuAMFBLnklXADBQO55Jaw
MEcEAgACMEEDEQEqABHAAA7//wABAAAAAAAGAwcAKgARwAA9AwcAKgARwABLAwcA
KgARwABiAxEAKgARwACCA1kCFwFGACAAcjANBgkqhkiG9w0BAQsFAAOCAQEA0/z7
X+pNV6Y1kBTB/NJxcoPzAfc7ydy5N1mh/leFr8c/qCYy1j8fuUcJExDP+VzEsVjo
fI9XJqZ3eV+nIQMc5oRP7NJVlw4XRXvtQMF6nJ3WQwtxSTp14C9SCbKrq3rkwV6b
xyAcrLfEfsTmd/JOcTUsSEEAawWVZrPrSL/HIwd2GwXuq1QndKI4mHB39INiwViE
K6s7Fh+OajnseL+2PElOeVzuKbpHTmLOZ6lNU7wjTRa9xKQIZUg5fz6L82l4FWWY
GTvr9+iNLlXvjEjHUj8pEdvuiRCL7p915ElWbIZRqJus6qAnk8tJDliFiKWCq18L
HAskV0QqXAqNaka+sA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:01:14 2025 by rpki-client