Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/PQyZxA46MLTHRc5mobvjFwK5lMw.roa
File: PQyZxA46MLTHRc5mobvjFwK5lMw.roa (raw, json)
Hash identifier: IucPwjrf1WuArHmWX4CO13FVRQsTCjMdmSkeW1oKCHI=
Subject key identifier: 3D:0C:99:C4:0E:3A:30:B4:C7:45:CE:66:A1:BB:E3:17:02:B9:94:CC
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 0194AC2EA8A8EE9EDF9221A627DD4733170A
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/PQyZxA46MLTHRc5mobvjFwK5lMw.roa
Signing time: Tue 28 Jan 2025 09:12:06 +0000
ROA not before: Tue 28 Jan 2025 09:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207326
IP address blocks: 46.31.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:2e:a8:a8:ee:9e:df:92:21:a6:27:dd:47:33:17:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jan 28 09:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d0c99c40e3a30b4c745ce66a1bbe31702b994cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:2f:71:3c:47:a5:12:68:35:25:1e:a7:f7:
95:29:79:c1:29:87:43:f3:ec:93:bb:66:bb:6a:ba:
6a:a9:1c:79:25:8a:9f:f9:3c:00:3a:5c:d8:5c:63:
af:2c:ef:45:ea:aa:a9:33:66:d6:7b:c6:d3:04:b3:
1b:c7:2f:b4:fb:ce:62:3a:b0:8e:34:84:9e:a0:71:
ef:92:06:7a:51:ca:7f:2e:c8:ff:a9:cb:4c:6d:fa:
c5:da:a2:eb:9b:d0:20:39:73:16:c9:8a:53:df:81:
89:95:1b:2d:a4:32:89:8a:c4:d1:10:46:05:34:50:
fe:82:af:ee:48:ba:85:28:d6:68:3e:dc:ff:22:c9:
a1:8a:5f:4d:5d:be:5d:e7:c7:80:92:85:7a:56:43:
41:63:49:d3:16:b5:5b:0c:74:4a:8e:91:37:c6:d7:
de:a8:a3:7b:1b:23:fe:7e:bb:da:c4:0c:c8:41:95:
d1:35:86:8a:f2:b9:6d:bf:e3:6d:57:ad:30:b1:a2:
f8:0a:9d:73:b5:f0:ce:0a:03:f7:5b:fa:09:6b:e7:
de:03:97:de:e2:94:92:e2:a6:b9:23:2f:cd:61:2d:
0d:2e:43:00:ea:7a:a9:e1:68:36:b4:f0:19:11:fd:
34:8c:77:c9:1a:eb:99:57:75:5f:05:ea:e5:44:15:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0C:99:C4:0E:3A:30:B4:C7:45:CE:66:A1:BB:E3:17:02:B9:94:CC
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/PQyZxA46MLTHRc5mobvjFwK5lMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.79.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:ac:93:59:4d:08:ef:c9:1c:b6:61:46:da:6c:ee:6b:1a:a2:
dd:71:51:89:c9:9d:d9:f0:97:67:db:09:46:f7:9e:11:1c:23:
66:b2:f6:c8:27:28:94:08:28:6b:94:c3:6c:53:0a:71:6f:25:
08:0c:5b:2f:ef:da:07:70:ec:60:19:aa:71:35:e3:92:f7:b3:
30:11:c5:e6:d0:a0:e0:2b:92:06:c4:68:60:1c:c6:43:1e:9d:
29:3d:38:33:ad:71:a1:11:8a:b5:58:5f:b3:f8:e1:b9:44:24:
1c:d3:71:54:8a:8c:75:b5:d8:c8:29:bd:65:67:5c:54:12:5a:
b2:24:1e:e9:e1:c0:ae:95:ca:97:e9:30:85:92:ad:5b:37:9b:
7c:f7:f4:66:e6:c2:c2:9b:b8:52:34:93:85:58:b9:93:9c:d0:
26:3c:46:91:69:58:2f:b7:75:a6:56:3a:33:42:fd:28:aa:89:
a8:17:9c:a2:f3:60:4f:0d:ad:7a:e5:b2:11:84:db:25:88:6b:
af:f0:8a:2e:78:66:4f:ca:92:77:a3:e3:68:47:5d:69:97:39:
55:ba:4d:68:35:1c:8c:2b:7c:07:10:2b:58:1c:61:01:50:4b:
bd:24:8a:3d:af:ed:e4:07:87:34:7a:b7:a0:89:39:db:61:c7:
9c:81:73:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSsLqio7p7fkiGmJ91HMxcKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi
ZDEzYjcwHhcNMjUwMTI4MDkxMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDBjOTljNDBlM2EzMGI0Yzc0NWNlNjZhMWJiZTMxNzAyYjk5NGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVwvcTxHpRJoNSUep/eVKXnBKYdD
8+yTu2a7arpqqRx5JYqf+TwAOlzYXGOvLO9F6qqpM2bWe8bTBLMbxy+0+85iOrCO
NISeoHHvkgZ6Ucp/Lsj/qctMbfrF2qLrm9AgOXMWyYpT34GJlRstpDKJisTREEYF
NFD+gq/uSLqFKNZoPtz/Ismhil9NXb5d58eAkoV6VkNBY0nTFrVbDHRKjpE3xtfe
qKN7GyP+frvaxAzIQZXRNYaK8rltv+NtV60wsaL4Cp1ztfDOCgP3W/oJa+feA5fe
4pSS4qa5Iy/NYS0NLkMA6nqp4Wg2tPAZEf00jHfJGuuZV3VfBerlRBXRtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0MmcQOOjC0x0XOZqG74xcCuZTMMB8GA1UdIwQY
MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt
MmFjNmZmNzViZWIwLzEvUFF5WnhBNDZNTFRIUmM1bW9idmpGd0s1bE13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw
LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh9PMA0G
CSqGSIb3DQEBCwUAA4IBAQDSrJNZTQjvyRy2YUbabO5rGqLdcVGJyZ3Z8Jdn2wlG
954RHCNmsvbIJyiUCChrlMNsUwpxbyUIDFsv79oHcOxgGapxNeOS97MwEcXm0KDg
K5IGxGhgHMZDHp0pPTgzrXGhEYq1WF+z+OG5RCQc03FUiox1tdjIKb1lZ1xUElqy
JB7p4cCulcqX6TCFkq1bN5t89/Rm5sLCm7hSNJOFWLmTnNAmPEaRaVgvt3WmVjoz
Qv0oqomoF5yi82BPDa165bIRhNsliGuv8IoueGZPypJ3o+NoR11plzlVuk1oNRyM
K3wHECtYHGEBUEu9JIo9r+3kB4c0eregiTnbYcecgXM2
-----END CERTIFICATE-----
Generated at Sat Apr 12 17:16:09 2025 by rpki-client