Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qgOYaE-EAg5UpaT6Sgh7RWT9P2g.roa
File: qgOYaE-EAg5UpaT6Sgh7RWT9P2g.roa (raw, json)
Hash identifier: emVq1G+CN/k+uiJq5DaXjKh7c18VZvj4BQpFwvsJJ4I=
Subject key identifier: AA:03:98:68:4F:84:02:0E:54:A5:A4:FA:4A:08:7B:45:64:FD:3F:68
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA9219A458C8795562B1952093DF33
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qgOYaE-EAg5UpaT6Sgh7RWT9P2g.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25513
IP address blocks: 37.230.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:92:19:a4:58:c8:79:55:62:b1:95:20:93:df:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa0398684f84020e54a5a4fa4a087b4564fd3f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:f3:68:ed:aa:e9:b9:38:20:17:1f:2f:4f:
f1:e4:ce:d0:dc:9a:c1:c0:76:dd:51:27:22:ea:80:
38:6e:14:b5:b9:c5:f0:51:73:55:5f:b6:f5:3f:24:
8d:5c:c3:45:13:bc:19:e8:e2:61:01:ce:64:89:1f:
e8:e0:12:d1:5b:2a:c2:fd:66:21:33:54:7c:54:f8:
da:37:fe:63:b4:ad:10:f4:f5:3e:3c:06:79:7a:86:
9a:d5:0d:f9:30:7f:31:ba:9a:65:58:7f:d5:25:b9:
8e:7e:ee:b2:27:58:70:d7:53:fb:ee:ba:99:00:e9:
c8:3e:1b:61:f5:9d:20:37:ed:03:a9:37:f3:fd:54:
7a:ce:a1:5d:25:a0:ba:63:b8:fd:51:f0:16:e9:be:
65:d9:ba:03:b9:7b:da:e6:c8:d6:ba:88:46:c0:04:
9e:53:0e:5b:9c:6c:d8:7f:60:59:83:0d:32:2f:a0:
38:8f:11:35:98:04:85:05:58:cb:9a:79:bd:8b:12:
9c:27:e6:47:7f:91:72:44:ba:1f:c1:0b:27:ed:dd:
6b:6d:c6:f2:4c:b4:e9:de:19:af:85:bd:76:72:d9:
e0:37:32:ed:54:f4:89:25:27:65:00:3a:a7:0d:73:
5f:7e:94:66:5e:61:e0:8f:5f:18:fe:04:7c:85:f5:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:03:98:68:4F:84:02:0E:54:A5:A4:FA:4A:08:7B:45:64:FD:3F:68
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qgOYaE-EAg5UpaT6Sgh7RWT9P2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.157.0/24
Signature Algorithm: sha256WithRSAEncryption
21:33:e5:9e:97:be:d1:70:3f:6d:72:7c:01:ae:43:0e:84:be:
22:86:34:78:fc:18:3f:1c:d4:6f:39:45:96:c7:14:40:6d:74:
79:bd:ae:31:54:c5:fd:3d:5b:0b:d8:49:05:c4:a1:28:c4:7a:
1e:21:66:1a:85:70:07:e5:da:63:de:14:8e:31:88:18:27:76:
b3:16:77:f6:84:13:70:07:ee:03:80:db:b1:70:ac:6a:40:6b:
28:fd:3c:74:c9:ac:46:a3:51:22:a9:14:da:25:7b:0a:95:2f:
30:af:11:35:b8:f1:3f:db:6d:3f:66:d5:48:d9:16:9d:78:48:
94:b5:31:fe:cf:e4:0b:6e:8a:da:f7:f5:ba:d5:95:00:03:2b:
44:cf:f2:1e:f2:f2:86:84:e2:08:94:2e:9b:b1:5c:58:f0:62:
bb:1b:44:1c:ee:5c:b5:03:79:99:91:77:40:a7:c4:09:4f:2c:
33:78:11:9d:24:13:c3:63:4c:b1:a5:c8:5c:ad:2b:3e:c7:89:
49:98:a4:d8:5d:a8:16:ff:4f:92:10:f0:2b:7a:e9:c5:7d:a0:
1a:db:77:73:e1:cc:f6:03:e1:06:ae:a2:96:a6:bc:d2:73:18:
dc:ff:08:01:15:ed:d3:7b:46:8a:ed:e9:c6:e4:d5:f5:db:ed:
d1:e9:d5:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+pIZpFjIeVVisZUgk98zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjUwMTAxMDM0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTAzOTg2ODRmODQwMjBlNTRhNWE0ZmE0YTA4N2I0NTY0ZmQzZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SzzaO2q6bk4IBcfL0/x5M7Q3JrB
wHbdUSci6oA4bhS1ucXwUXNVX7b1PySNXMNFE7wZ6OJhAc5kiR/o4BLRWyrC/WYh
M1R8VPjaN/5jtK0Q9PU+PAZ5eoaa1Q35MH8xupplWH/VJbmOfu6yJ1hw11P77rqZ
AOnIPhth9Z0gN+0DqTfz/VR6zqFdJaC6Y7j9UfAW6b5l2boDuXva5sjWuohGwASe
Uw5bnGzYf2BZgw0yL6A4jxE1mASFBVjLmnm9ixKcJ+ZHf5FyRLofwQsn7d1rbcby
TLTp3hmvhb12ctngNzLtVPSJJSdlADqnDXNffpRmXmHgj18Y/gR8hfVHswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKoDmGhPhAIOVKWk+koIe0Vk/T9oMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvcWdPWWFFLUVBZzVVcGFUNlNnaDdSV1Q5UDJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeadMA0G
CSqGSIb3DQEBCwUAA4IBAQAhM+Wel77RcD9tcnwBrkMOhL4ihjR4/Bg/HNRvOUWW
xxRAbXR5va4xVMX9PVsL2EkFxKEoxHoeIWYahXAH5dpj3hSOMYgYJ3azFnf2hBNw
B+4DgNuxcKxqQGso/Tx0yaxGo1EiqRTaJXsKlS8wrxE1uPE/220/ZtVI2RadeEiU
tTH+z+QLbora9/W61ZUAAytEz/Ie8vKGhOIIlC6bsVxY8GK7G0Qc7ly1A3mZkXdA
p8QJTywzeBGdJBPDY0yxpchcrSs+x4lJmKTYXagW/0+SEPAreunFfaAa23dz4cz2
A+EGrqKWprzScxjc/wgBFe3Te0aK7enG5NX12+3R6dVm
-----END CERTIFICATE-----
Generated at Thu Apr 10 11:15:26 2025 by rpki-client