Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/qUlLIE5OvssPved2_GU9Z8GFglU.roa
File: qUlLIE5OvssPved2_GU9Z8GFglU.roa (raw, json)
Hash identifier: S7bFZ1rRYB+JTmrHRfuu5cY821Jfik9JjzyPO/AFRnM=
Subject key identifier: A9:49:4B:20:4E:4E:BE:CB:0F:BD:E7:76:FC:65:3D:67:C1:85:82:55
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 0194228E288B01C40FEB5E442935AF997D11
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/qUlLIE5OvssPved2_GU9Z8GFglU.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215568
IP address blocks: 2a01:ef40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:28:8b:01:c4:0f:eb:5e:44:29:35:af:99:7d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9494b204e4ebecb0fbde776fc653d67c1858255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:73:08:42:db:8c:29:50:95:b2:f7:b8:2d:32:
3f:e9:f6:1f:33:73:ee:24:5f:ff:55:45:3e:11:dc:
d4:a1:00:04:af:11:75:9a:4b:fc:61:d1:8b:92:f2:
2d:52:7c:67:f5:dd:dd:c4:bd:95:5a:4f:70:84:c0:
c8:63:bd:f9:60:64:bc:df:9c:8b:66:06:4b:b6:cd:
94:7a:1d:3b:99:41:d1:4e:70:b5:c4:bc:20:b0:53:
5f:d6:ad:a8:c7:7d:f5:5b:06:7e:c9:53:77:7a:87:
d3:81:9e:c3:e8:65:66:e3:21:56:f6:1e:ad:42:4d:
e7:fc:75:a4:5a:69:a9:f9:bc:85:9a:9f:2e:22:69:
0c:d4:91:45:a2:c8:9f:02:7d:9a:1e:00:f3:1a:0b:
da:16:87:ee:6a:9e:01:0d:2f:1a:a1:20:5d:7c:07:
a4:eb:76:a5:ba:16:b2:aa:fb:59:74:89:07:98:c8:
21:cf:5a:9c:29:60:aa:fd:67:be:3b:8c:f4:96:eb:
eb:87:80:2a:c0:71:4d:04:81:5b:c5:5e:9f:59:41:
d0:e5:bb:3e:6f:28:92:d1:e9:f4:09:c8:af:42:3c:
37:28:27:e0:52:2c:43:af:10:46:27:ca:e8:88:2f:
6f:af:86:b8:1b:43:d3:a6:5c:e3:ea:80:38:67:10:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:49:4B:20:4E:4E:BE:CB:0F:BD:E7:76:FC:65:3D:67:C1:85:82:55
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/qUlLIE5OvssPved2_GU9Z8GFglU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
09:3e:d9:e4:fe:5d:59:ff:15:31:65:ec:5c:1b:2b:6a:08:ff:
d6:bd:ae:25:c3:96:8e:09:6b:b3:ba:9e:4f:68:5c:2d:65:b8:
03:53:e7:c6:fd:1b:e3:3b:90:5e:df:0c:5c:12:14:9f:ea:45:
d8:28:24:13:a9:46:af:67:7a:4f:1a:97:f3:25:bc:78:88:38:
d4:57:3d:e3:c5:32:a8:6c:8d:74:a2:4f:da:80:f3:0d:ff:1c:
d9:53:c4:9b:51:5b:19:f3:4f:0f:16:d3:f6:cc:9a:d5:8e:42:
59:cf:6d:40:3d:28:bb:77:45:0e:a2:85:93:e3:ff:be:94:bb:
5c:2b:c1:3c:5a:87:9c:0b:57:56:80:1b:4f:03:3d:91:15:0f:
fe:b7:23:d0:2d:b6:c5:bf:31:c0:44:86:c1:ad:b0:74:73:f4:
3f:32:95:55:b4:3d:b1:04:97:ed:72:47:f4:ab:ef:c1:b9:ba:
a1:81:e7:3a:ff:0a:bc:65:4a:b3:04:6d:6f:d9:44:42:3d:b4:
fa:da:23:46:ee:e8:bb:d3:66:e3:3a:ad:38:f8:34:b4:4d:c0:
f6:9b:b7:21:f0:33:fa:b9:55:80:92:83:9d:0f:29:7f:6f:ca:
1e:dc:0a:99:e3:86:81:00:35:60:80:7d:3d:b7:2b:28:72:07:
e0:79:cb:72
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQijiiLAcQP615EKTWvmX0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNjc0ZTgyMmYzODc2ZDI3ZGVhZWQ1ZjY2ZGJlOWMxYTQy
MmViMTYwHhcNMjUwMTAxMTU0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTQ5NGIyMDRlNGViZWNiMGZiZGU3NzZmYzY1M2Q2N2MxODU4MjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HMIQtuMKVCVsve4LTI/6fYfM3Pu
JF//VUU+EdzUoQAErxF1mkv8YdGLkvItUnxn9d3dxL2VWk9whMDIY735YGS835yL
ZgZLts2Ueh07mUHRTnC1xLwgsFNf1q2ox331WwZ+yVN3eofTgZ7D6GVm4yFW9h6t
Qk3n/HWkWmmp+byFmp8uImkM1JFFosifAn2aHgDzGgvaFofuap4BDS8aoSBdfAek
63aluhayqvtZdIkHmMghz1qcKWCq/We+O4z0luvrh4AqwHFNBIFbxV6fWUHQ5bs+
byiS0en0CcivQjw3KCfgUixDrxBGJ8roiC9vr4a4G0PTplzj6oA4ZxB5TwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKlJSyBOTr7LD73ndvxlPWfBhYJVMB8GA1UdIwQY
MBaAFLNnToIvOHbSfertX2bb6cGkIusWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczJkT2dpODRkdEo5NnUxZlp0dnB3YVFpNnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zOTMyNTEtYjQ4OC00MGQzLWJlMzkt
ZjhmMDhmZTY0ODM4LzEvcVVsTElFNU92c3NQdmVkMl9HVTlaOEdGZ2xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zOTMyNTEtYjQ4OC00MGQzLWJlMzktZjhmMDhmZTY0ODM4
LzEvczJkT2dpODRkdEo5NnUxZlp0dnB3YVFpNnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHvQDAN
BgkqhkiG9w0BAQsFAAOCAQEACT7Z5P5dWf8VMWXsXBsragj/1r2uJcOWjglrs7qe
T2hcLWW4A1Pnxv0b4zuQXt8MXBIUn+pF2CgkE6lGr2d6TxqX8yW8eIg41Fc948Uy
qGyNdKJP2oDzDf8c2VPEm1FbGfNPDxbT9sya1Y5CWc9tQD0ou3dFDqKFk+P/vpS7
XCvBPFqHnAtXVoAbTwM9kRUP/rcj0C22xb8xwESGwa2wdHP0PzKVVbQ9sQSX7XJH
9Kvvwbm6oYHnOv8KvGVKswRtb9lEQj20+tojRu7ou9Nm4zqtOPg0tE3A9pu3IfAz
+rlVgJKDnQ8pf2/KHtwKmeOGgQA1YIB9PbcrKHIH4HnLcg==
-----END CERTIFICATE-----
Generated at Sun Apr 13 11:31:15 2025 by rpki-client