Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/QRORoIVYAi5ufXWXAIn0vn9Aggg.roa
File: QRORoIVYAi5ufXWXAIn0vn9Aggg.roa (raw, json)
Hash identifier: Mp1+ORbGGnB1IL/qNDbqJDDML5CRgaTlLbXvnUomR9I=
Subject key identifier: 41:13:91:A0:85:58:02:2E:6E:7D:75:97:00:89:F4:BE:7F:40:82:08
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAA63B1DBC498D10A0B94308E954E4
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/QRORoIVYAi5ufXWXAIn0vn9Aggg.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201851
IP address blocks: 141.101.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a6:3b:1d:bc:49:8d:10:a0:b9:43:08:e9:54:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=411391a08558022e6e7d75970089f4be7f408208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:74:dd:22:63:9d:8b:65:cc:48:75:a7:7a:
4c:a8:cd:da:03:85:d0:48:ca:1f:05:ef:85:f6:b3:
5b:70:13:60:34:a3:40:93:e6:db:b6:29:ca:c7:f7:
ce:34:95:c8:98:9e:0d:3a:4c:35:37:d4:a9:89:19:
08:33:8f:f1:9d:c7:00:f4:8f:ed:71:8c:ca:a5:1f:
36:a0:4b:08:0e:72:56:39:f5:5b:25:ca:f2:2b:8b:
04:6d:8e:60:cb:1b:23:b6:7c:c1:2a:98:a9:74:65:
c4:36:e8:45:ab:01:71:0a:c4:4e:65:82:73:4b:67:
22:c2:ee:06:ff:6f:4d:7c:86:e3:4a:ed:c1:6d:3a:
5a:ee:bc:72:d9:c1:88:86:21:81:8c:36:01:c4:82:
26:41:ac:d2:5a:b7:4b:b8:95:9d:37:16:75:25:54:
be:b6:39:5e:75:c3:05:e5:1b:26:5e:ff:4b:1e:99:
42:c2:e1:0e:08:e0:d8:98:12:2d:cf:04:50:24:b4:
f9:99:bf:a5:5c:9a:c2:37:75:a9:04:f7:89:d1:de:
ee:a3:de:64:b0:35:03:86:b5:f6:48:9e:13:0c:8c:
aa:30:0a:1e:bf:18:7f:c1:ea:19:71:a1:e7:fb:02:
94:f9:f8:d0:aa:49:d5:03:64:9c:00:1f:37:7b:e9:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:13:91:A0:85:58:02:2E:6E:7D:75:97:00:89:F4:BE:7F:40:82:08
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/QRORoIVYAi5ufXWXAIn0vn9Aggg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.202.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a1:18:f9:5f:de:a6:14:49:51:05:18:c1:8a:c3:6f:7f:1d:
ef:5a:38:f3:ed:56:7e:65:55:55:dc:ea:17:da:a9:74:b3:57:
26:2e:bf:25:60:8a:d1:6e:dc:93:8c:8c:56:0b:cf:11:83:9d:
5a:ba:5a:09:a1:bb:18:2c:0c:64:bf:2e:93:f0:3b:7e:5d:c5:
9d:49:23:70:5e:45:b9:e4:5e:8d:39:d1:a3:6e:e9:40:41:81:
d0:c0:7e:b5:45:41:04:3f:21:69:38:67:f1:0f:03:7c:38:a3:
78:11:04:cc:6b:f3:5f:b6:be:a7:ce:4f:86:1b:6c:c0:3d:45:
c0:4e:81:58:85:dc:57:ec:d0:f7:40:4a:15:41:be:59:03:f0:
20:32:15:c3:ed:0b:e2:0c:ce:7e:ea:35:d0:9e:e3:c4:86:4f:
0a:35:7f:1c:7d:f7:3d:ed:7a:a0:3e:25:83:dc:cc:7d:0c:bf:
af:81:d4:a4:dc:6f:40:89:f1:f2:04:03:7f:f7:d7:f9:d2:b6:
18:35:52:f6:29:33:70:61:f1:61:b8:18:83:c0:df:9b:a6:1f:
9c:08:e0:a0:ca:e1:60:53:70:99:4a:de:45:04:c6:9e:c3:41:
34:2a:02:89:7e:99:04:5b:99:c3:1b:9b:1e:5c:46:2b:25:97:
cf:52:ff:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+qY7HbxJjRCguUMI6VTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjUwMTAxMDM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTEzOTFhMDg1NTgwMjJlNmU3ZDc1OTcwMDg5ZjRiZTdmNDA4MjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvid03SJjnYtlzEh1p3pMqM3aA4XQ
SMofBe+F9rNbcBNgNKNAk+bbtinKx/fONJXImJ4NOkw1N9SpiRkIM4/xnccA9I/t
cYzKpR82oEsIDnJWOfVbJcryK4sEbY5gyxsjtnzBKpipdGXENuhFqwFxCsROZYJz
S2ciwu4G/29NfIbjSu3BbTpa7rxy2cGIhiGBjDYBxIImQazSWrdLuJWdNxZ1JVS+
tjledcMF5RsmXv9LHplCwuEOCODYmBItzwRQJLT5mb+lXJrCN3WpBPeJ0d7uo95k
sDUDhrX2SJ4TDIyqMAoevxh/weoZcaHn+wKU+fjQqknVA2ScAB83e+mkuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEETkaCFWAIubn11lwCJ9L5/QIIIMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvUVJPUm9JVllBaTV1ZlhXWEFJbjB2bjlBZ2dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWXKMA0G
CSqGSIb3DQEBCwUAA4IBAQBQoRj5X96mFElRBRjBisNvfx3vWjjz7VZ+ZVVV3OoX
2ql0s1cmLr8lYIrRbtyTjIxWC88Rg51auloJobsYLAxkvy6T8Dt+XcWdSSNwXkW5
5F6NOdGjbulAQYHQwH61RUEEPyFpOGfxDwN8OKN4EQTMa/Nftr6nzk+GG2zAPUXA
ToFYhdxX7ND3QEoVQb5ZA/AgMhXD7QviDM5+6jXQnuPEhk8KNX8cffc97XqgPiWD
3Mx9DL+vgdSk3G9AifHyBAN/99f50rYYNVL2KTNwYfFhuBiDwN+bph+cCOCgyuFg
U3CZSt5FBMaew0E0KgKJfpkEW5nDG5seXEYrJZfPUv+7
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:50:06 2025 by rpki-client