Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/qe5ykFg2X3b3t6MuR-AZugNF4JA.roa
File: qe5ykFg2X3b3t6MuR-AZugNF4JA.roa (raw, json)
Hash identifier: lYA0LiGE3mwxqKf8EcIyljYtenHVRof/hSBwfSS+hr0=
Subject key identifier: A9:EE:72:90:58:36:5F:76:F7:B7:A3:2E:47:E0:19:BA:03:45:E0:90
Certificate issuer: /CN=627b305ba1babef4bfec68581e4039d41b5f71f2
Certificate serial: 0194258F64464224862E512717A4117CD35E
Authority key identifier: 62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/qe5ykFg2X3b3t6MuR-AZugNF4JA.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8224
IP address blocks: 159.253.96.0/21 maxlen: 21
185.79.52.0/22 maxlen: 22
195.72.192.0/19 maxlen: 19
2a01:2d8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:64:46:42:24:86:2e:51:27:17:a4:11:7c:d3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627b305ba1babef4bfec68581e4039d41b5f71f2
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9ee729058365f76f7b7a32e47e019ba0345e090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:8b:9d:c6:c2:5a:9e:5f:35:62:bf:9a:0c:
43:50:4e:ee:f3:2c:62:16:29:90:7d:20:9c:eb:83:
47:19:26:6b:74:ad:fe:6f:8d:81:66:8c:96:61:36:
9a:bb:87:8a:48:0c:df:fb:69:3f:69:01:1e:37:e3:
73:d5:a7:b3:b0:5c:9e:5f:56:f0:0c:cb:d2:5e:5e:
8f:d2:05:38:57:8a:fb:a4:a5:92:1f:b6:35:cf:c9:
bb:1e:dc:c2:f8:da:4e:d2:f7:6c:26:a2:8e:f8:18:
62:10:65:ff:53:a2:2f:da:71:09:62:a9:bb:c0:9e:
52:e1:c9:e0:05:a9:47:62:9f:c6:87:dd:f2:68:4f:
4e:74:93:c4:ce:9c:74:be:0e:2e:e6:37:05:34:4e:
66:cf:67:f3:04:a0:01:9a:a5:0f:1b:28:b1:24:4c:
43:40:72:eb:da:b4:eb:3b:68:da:c5:e5:1d:e2:27:
28:ca:83:5f:26:51:87:3e:48:82:dd:95:e8:30:b6:
9d:4a:d8:f1:14:14:c4:15:4a:0e:1a:cb:1e:20:3a:
38:30:78:7e:68:08:26:18:4f:68:f2:0a:df:66:c6:
f5:4f:b2:e4:7c:23:31:a4:f7:07:25:76:57:6b:0a:
ad:40:d1:a3:62:af:a9:cb:bb:1a:c8:c9:61:c5:03:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:72:90:58:36:5F:76:F7:B7:A3:2E:47:E0:19:BA:03:45:E0:90
X509v3 Authority Key Identifier:
keyid:62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/qe5ykFg2X3b3t6MuR-AZugNF4JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.96.0/21
185.79.52.0/22
195.72.192.0/19
IPv6:
2a01:2d8::/29
Signature Algorithm: sha256WithRSAEncryption
27:64:7a:a2:23:0f:dd:61:76:37:ce:69:f0:0a:35:fe:98:0c:
56:f0:bb:15:b0:29:95:62:0d:3a:ed:8e:b1:8c:8a:e3:11:ed:
aa:82:c5:0e:c8:4a:c8:c9:ab:47:9d:57:d5:5a:e5:3d:f5:c1:
2d:bc:3c:31:6e:b0:a0:e3:c0:64:41:0a:31:b8:4f:cc:ec:1e:
ab:31:58:c3:95:f6:05:24:af:bd:e9:ea:a2:10:cf:3a:7f:36:
e6:fc:4b:f5:d1:a8:1c:c7:bf:c0:7c:86:8a:38:36:bd:1d:1e:
71:76:6e:28:08:b9:99:8a:ed:7d:1c:f1:9a:23:8e:b1:bf:74:
8d:16:54:74:f7:e4:ba:99:ed:82:01:ec:8d:cd:4f:4d:77:87:
35:d3:23:09:37:39:22:a8:da:ce:6c:d4:a8:21:b4:0f:34:c9:
bd:7b:c5:60:11:31:37:20:1a:47:08:18:b2:45:44:89:57:50:
37:bd:bd:8f:68:1e:dd:a7:e4:5f:0b:9b:35:14:c0:99:0a:76:
9a:c3:78:3b:a8:39:34:44:c8:ba:3f:2d:18:5c:2d:38:50:48:
1b:d4:cf:78:f5:cf:fe:45:c0:d9:dc:5d:8c:57:47:04:b3:a0:
2f:5c:1c:3c:48:f8:03:2d:9b:ef:06:34:a7:1d:e3:a0:53:ed:
22:e6:94:dc
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQlj2RGQiSGLlEnF6QRfNNeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyN2IzMDViYTFiYWJlZjRiZmVjNjg1ODFlNDAzOWQ0MWI1
ZjcxZjIwHhcNMjUwMTAyMDU0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWVlNzI5MDU4MzY1Zjc2ZjdiN2EzMmU0N2UwMTliYTAzNDVlMDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNyLncbCWp5fNWK/mgxDUE7u8yxi
FimQfSCc64NHGSZrdK3+b42BZoyWYTaau4eKSAzf+2k/aQEeN+Nz1aezsFyeX1bw
DMvSXl6P0gU4V4r7pKWSH7Y1z8m7HtzC+NpO0vdsJqKO+BhiEGX/U6Iv2nEJYqm7
wJ5S4cngBalHYp/Gh93yaE9OdJPEzpx0vg4u5jcFNE5mz2fzBKABmqUPGyixJExD
QHLr2rTrO2jaxeUd4icoyoNfJlGHPkiC3ZXoMLadStjxFBTEFUoOGsseIDo4MHh+
aAgmGE9o8grfZsb1T7LkfCMxpPcHJXZXawqtQNGjYq+py7sayMlhxQNFDQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFKnucpBYNl9297ejLkfgGboDReCQMB8GA1UdIwQY
MBaAFGJ7MFuhur70v+xoWB5AOdQbX3HyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5zd1c2RzZ2dlNfN0doWUhrQTUxQnRmY2ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wNjAyZDQtNTVhNS00ZjQ5LThjZmUt
YmVlN2ExODM5NzEwLzEvcWU1eWtGZzJYM2IzdDZNdVItQVp1Z05GNEpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8wNjAyZDQtNTVhNS00ZjQ5LThjZmUtYmVlN2ExODM5NzEw
LzEvWW5zd1c2RzZ2dlNfN0doWUhrQTUxQnRmY2ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDn/1gAwQC
uU80AwQFw0jAMA0EAgACMAcDBQMqAQLYMA0GCSqGSIb3DQEBCwUAA4IBAQAnZHqi
Iw/dYXY3zmnwCjX+mAxW8LsVsCmVYg067Y6xjIrjEe2qgsUOyErIyatHnVfVWuU9
9cEtvDwxbrCg48BkQQoxuE/M7B6rMVjDlfYFJK+96eqiEM86fzbm/Ev10agcx7/A
fIaKODa9HR5xdm4oCLmZiu19HPGaI46xv3SNFlR09+S6me2CAeyNzU9Nd4c10yMJ
NzkiqNrObNSoIbQPNMm9e8VgETE3IBpHCBiyRUSJV1A3vb2PaB7dp+RfC5s1FMCZ
Cnaaw3g7qDk0RMi6Py0YXC04UEgb1M949c/+RcDZ3F2MV0cEs6AvXBw8SPgDLZvv
BjSnHeOgU+0i5pTc
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:13 2025 by rpki-client