Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/bqwyrPoxmVXRueWqADmdY3mrGG0.roa
File: bqwyrPoxmVXRueWqADmdY3mrGG0.roa (raw, json)
Hash identifier: DoTBiSo5d9SpNBc99v9ttgOOUKnC5aTKUP1YPPWUSbU=
Subject key identifier: 6E:AC:32:AC:FA:31:99:55:D1:B9:E5:AA:00:39:9D:63:79:AB:18:6D
Certificate issuer: /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial: 019427B5C7574DB3F1655CDCA2AD473E2413
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/bqwyrPoxmVXRueWqADmdY3mrGG0.roa
Signing time: Thu 02 Jan 2025 15:50:11 +0000
ROA not before: Thu 02 Jan 2025 15:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212945
IP address blocks: 195.85.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c7:57:4d:b3:f1:65:5c:dc:a2:ad:47:3e:24:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Validity
Not Before: Jan 2 15:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6eac32acfa319955d1b9e5aa00399d6379ab186d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:4c:f6:8c:c2:bd:2d:1f:ad:e7:49:3f:56:
84:a1:74:55:f6:a6:76:8f:74:6b:3a:a9:5a:bb:33:
62:8e:9c:5e:68:ea:85:f7:c0:a7:3a:96:db:34:9b:
40:f5:c9:51:ec:54:2c:95:95:fa:f8:e5:cb:c2:6c:
cd:b0:62:1d:05:da:69:24:63:46:37:c0:5a:2d:99:
4d:1e:5f:e7:2d:f4:8e:10:60:fc:c8:85:a8:0e:5c:
81:47:55:3d:90:00:5e:b1:73:b2:a5:fc:9e:47:26:
d6:df:ac:72:a8:a4:0a:c6:58:2d:95:73:cb:ba:88:
b7:97:c1:cd:82:92:c6:c9:1a:02:9a:a6:3b:fa:e4:
62:9f:33:b4:f8:d2:fd:f0:64:27:3d:3e:95:a3:74:
8c:fd:dd:2c:51:20:52:f3:32:92:af:fb:1f:80:02:
58:c3:23:51:3d:90:32:42:f6:5e:65:5d:18:68:fa:
e6:f2:92:79:10:3e:b9:ac:22:ad:13:2e:2f:55:9b:
9e:34:38:0c:6f:78:fd:84:cd:e0:b3:d7:c1:57:b1:
7f:42:a2:1f:7c:a0:46:7c:ae:91:24:8e:6b:05:d8:
f9:43:20:ca:09:bf:7b:63:30:29:36:a7:d6:6f:27:
bc:86:6a:b0:d1:2e:aa:43:a8:a4:a5:44:48:05:79:
8a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AC:32:AC:FA:31:99:55:D1:B9:E5:AA:00:39:9D:63:79:AB:18:6D
X509v3 Authority Key Identifier:
keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/bqwyrPoxmVXRueWqADmdY3mrGG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.212.0/24
Signature Algorithm: sha256WithRSAEncryption
06:97:b9:2a:d4:1f:36:a6:dd:78:83:89:12:a8:62:5f:b0:3e:
04:d7:92:cb:19:29:c1:9f:af:d6:16:6b:03:bc:39:84:e7:dc:
3e:ec:f4:9d:31:ee:9d:50:2c:e7:63:91:0a:26:03:b6:31:0e:
82:f5:0c:72:c4:f7:56:8e:77:93:bd:32:5f:ba:57:ed:c6:ea:
37:ff:a5:2a:91:19:5c:b5:9d:87:09:6b:69:7c:ee:9f:c9:8c:
8f:2c:78:ed:57:75:47:84:75:45:e6:8e:8c:25:1d:07:1f:ed:
46:09:bf:26:75:71:60:18:55:45:d7:c3:39:68:d3:64:d3:96:
92:c7:53:0f:a3:e2:88:8c:bd:9a:0b:78:6a:ea:ec:56:18:b9:
1f:fe:e2:9e:06:89:ce:73:4b:f3:ef:e5:19:33:45:51:89:6f:
5d:a7:00:64:50:54:6b:ba:bd:95:60:95:99:15:5b:17:f0:35:
65:f5:7d:31:0d:34:6c:11:a2:8a:d6:34:e6:87:35:d8:1f:1f:
1e:6a:f4:cd:f1:fb:3b:c0:a3:36:18:07:2b:cf:3f:82:40:4f:
bf:04:74:30:95:5e:ce:97:06:07:47:03:59:28:ee:1f:37:57:
46:d9:3c:c3:c3:b1:98:09:6d:fb:8c:4b:11:5f:d1:f1:a2:27:
c9:94:f2:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntcdXTbPxZVzcoq1HPiQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZDI5ZjcwM2I4ZWM4ZTkzY2E0ODQwNWRlZTQ3MzBlZWQ5
M2M2YjIwHhcNMjUwMTAyMTU1MDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWFjMzJhY2ZhMzE5OTU1ZDFiOWU1YWEwMDM5OWQ2Mzc5YWIxODZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XBM9ozCvS0fredJP1aEoXRV9qZ2
j3RrOqlauzNijpxeaOqF98CnOpbbNJtA9clR7FQslZX6+OXLwmzNsGIdBdppJGNG
N8BaLZlNHl/nLfSOEGD8yIWoDlyBR1U9kABesXOypfyeRybW36xyqKQKxlgtlXPL
uoi3l8HNgpLGyRoCmqY7+uRinzO0+NL98GQnPT6Vo3SM/d0sUSBS8zKSr/sfgAJY
wyNRPZAyQvZeZV0YaPrm8pJ5ED65rCKtEy4vVZueNDgMb3j9hM3gs9fBV7F/QqIf
fKBGfK6RJI5rBdj5QyDKCb97YzApNqfWbye8hmqw0S6qQ6ikpURIBXmKkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG6sMqz6MZlV0bnlqgA5nWN5qxhtMB8GA1UdIwQY
MBaAFKnSn3A7jsjpPKSEBd7kcw7tk8ayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRLZmNEdU95T2s4cElRRjN1UnpEdTJUeHJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83YWI5NmYtMDkzZS00YzUyLWJmOWIt
NTJlMTUxZjQyYzIzLzEvYnF3eXJQb3htVlhSdWVXcUFEbWRZM21yR0cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83YWI5NmYtMDkzZS00YzUyLWJmOWItNTJlMTUxZjQyYzIz
LzEvcWRLZmNEdU95T2s4cElRRjN1UnpEdTJUeHJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1XUMA0G
CSqGSIb3DQEBCwUAA4IBAQAGl7kq1B82pt14g4kSqGJfsD4E15LLGSnBn6/WFmsD
vDmE59w+7PSdMe6dUCznY5EKJgO2MQ6C9QxyxPdWjneTvTJfulftxuo3/6UqkRlc
tZ2HCWtpfO6fyYyPLHjtV3VHhHVF5o6MJR0HH+1GCb8mdXFgGFVF18M5aNNk05aS
x1MPo+KIjL2aC3hq6uxWGLkf/uKeBonOc0vz7+UZM0VRiW9dpwBkUFRrur2VYJWZ
FVsX8DVl9X0xDTRsEaKK1jTmhzXYHx8eavTN8fs7wKM2GAcrzz+CQE+/BHQwlV7O
lwYHRwNZKO4fN1dG2TzDw7GYCW37jEsRX9HxoifJlPIk
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:02 2025 by rpki-client