Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/QDlDlVhX5AXc0Bmi9AO2xWdw9Gg.roa
File: QDlDlVhX5AXc0Bmi9AO2xWdw9Gg.roa (raw, json)
Hash identifier: 8XVtM6M7/BL60ckrouMXhUjB2A0Km9VFcXQSDPxpcT0=
Subject key identifier: 40:39:43:95:58:57:E4:05:DC:D0:19:A2:F4:03:B6:C5:67:70:F4:68
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369B49DB785A0EBC77BF01CAEB5CA22
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/QDlDlVhX5AXc0Bmi9AO2xWdw9Gg.roa
Signing time: Wed 01 Jan 2025 19:48:37 +0000
ROA not before: Wed 01 Jan 2025 19:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62042
IP address blocks: 188.215.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b4:9d:b7:85:a0:eb:c7:7b:f0:1c:ae:b5:ca:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=403943955857e405dcd019a2f403b6c56770f468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:9e:4d:d9:02:13:6d:d2:7f:ba:07:b5:b3:
ba:d4:d6:3f:86:78:a6:9d:8a:2f:71:44:f8:23:20:
e1:08:cc:3f:52:82:06:46:ce:2f:83:ad:83:24:58:
b7:05:11:68:dc:ee:4b:7c:e1:42:fb:f9:55:ce:f0:
9a:e8:24:fd:42:8d:37:f2:c4:1e:6a:7d:1e:9d:38:
31:b0:85:3e:6a:fd:55:8c:12:67:4b:98:42:d7:5d:
de:d1:11:3c:2b:d9:c9:8a:37:d8:db:1e:87:c3:b0:
9c:0e:b7:f5:10:46:f5:21:98:d2:a4:c4:63:c9:aa:
39:ba:82:4d:c9:4a:53:42:e4:ca:29:e2:c0:4f:05:
20:66:5e:85:bf:61:4d:05:33:a3:89:6c:c9:a2:63:
f9:1a:1f:c6:26:cd:aa:ad:37:87:8b:66:34:2f:40:
72:28:9c:11:5d:38:02:08:70:75:2f:85:dd:22:e0:
af:ea:19:82:e1:56:10:cd:ab:9d:f2:72:3c:9d:a3:
6e:dc:c7:33:96:ab:31:2e:9e:d4:ec:38:9f:e1:55:
10:3d:6d:fc:07:4c:9b:0d:33:1e:70:9c:26:fc:3e:
81:29:1b:50:f9:14:65:46:eb:9f:ee:6d:0f:04:41:
34:91:75:7e:0d:58:65:ba:65:6d:71:df:18:08:2f:
fa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:39:43:95:58:57:E4:05:DC:D0:19:A2:F4:03:B6:C5:67:70:F4:68
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/QDlDlVhX5AXc0Bmi9AO2xWdw9Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.39.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:bd:1b:5f:e3:5b:b5:b7:0f:06:f2:ab:68:7d:2e:a8:b3:8e:
58:18:46:05:61:1f:8d:7f:5e:c3:9c:33:4c:17:26:32:99:c8:
e2:61:57:fb:b6:9c:6b:14:34:83:7e:07:2d:58:99:f5:74:39:
20:2d:24:ca:d8:a3:f1:19:33:e5:a7:8d:cb:d3:a8:f5:b6:1d:
5a:fc:37:2b:e4:cf:91:45:12:88:4f:78:1a:bd:7d:ef:11:c0:
9a:29:02:00:61:ad:4a:fa:5c:ff:f5:2c:f2:85:7c:2a:4f:db:
22:a1:30:be:0b:30:07:b8:86:9e:90:80:69:1d:c8:d9:78:3d:
31:7d:06:b0:1c:6d:5a:32:3a:dc:57:8d:27:e7:52:3b:35:73:
c1:da:ea:de:88:8c:32:79:8e:72:48:bc:23:33:c2:8f:80:bc:
71:c4:8b:98:c6:68:0a:6a:a6:05:65:2b:55:b3:f2:ea:77:dc:
74:42:68:44:3e:69:72:64:3c:f0:0e:b5:72:3d:b1:e1:28:7f:
15:52:1c:f7:55:f6:6e:c1:b5:65:30:8c:bb:63:4f:70:b5:69:
0c:30:c7:d4:77:30:4d:fe:72:ae:81:13:08:f0:23:c0:39:1b:
b7:4e:a7:93:c4:b9:b1:a7:26:90:d0:be:74:61:dd:ce:81:37:
e1:75:20:8c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQjabSdt4Wg68d78ByutcoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjUwMTAxMTk0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDM5NDM5NTU4NTdlNDA1ZGNkMDE5YTJmNDAzYjZjNTY3NzBmNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHaeTdkCE23Sf7oHtbO61NY/hnim
nYovcUT4IyDhCMw/UoIGRs4vg62DJFi3BRFo3O5LfOFC+/lVzvCa6CT9Qo038sQe
an0enTgxsIU+av1VjBJnS5hC113e0RE8K9nJijfY2x6Hw7CcDrf1EEb1IZjSpMRj
yao5uoJNyUpTQuTKKeLATwUgZl6Fv2FNBTOjiWzJomP5Gh/GJs2qrTeHi2Y0L0By
KJwRXTgCCHB1L4XdIuCv6hmC4VYQzaud8nI8naNu3MczlqsxLp7U7Dif4VUQPW38
B0ybDTMecJwm/D6BKRtQ+RRlRuuf7m0PBEE0kXV+DVhlumVtcd8YCC/6mwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFEA5Q5VYV+QF3NAZovQDtsVncPRoMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL1FEbERsVmhYNUFYYzBCbWk5QU8yeFdkdzlHZy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC81ycw
DQYJKoZIhvcNAQELBQADggEBALC9G1/jW7W3Dwbyq2h9LqizjlgYRgVhH41/XsOc
M0wXJjKZyOJhV/u2nGsUNIN+By1YmfV0OSAtJMrYo/EZM+WnjcvTqPW2HVr8Nyvk
z5FFEohPeBq9fe8RwJopAgBhrUr6XP/1LPKFfCpP2yKhML4LMAe4hp6QgGkdyNl4
PTF9BrAcbVoyOtxXjSfnUjs1c8Ha6t6IjDJ5jnJIvCMzwo+AvHHEi5jGaApqpgVl
K1Wz8up33HRCaEQ+aXJkPPAOtXI9seEofxVSHPdV9m7BtWUwjLtjT3C1aQwwx9R3
ME3+cq6BEwjwI8A5G7dOp5PEubGnJpDQvnRh3c6BN+F1IIw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:51 2025 by rpki-client