Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QndopMtIRIDCdpGE2BzTFs2HlUI.roa
File: QndopMtIRIDCdpGE2BzTFs2HlUI.roa (raw, json)
Hash identifier: X9x5Ymmvnho4QG7YBlWZTrpvlQ0S4TO9kNIe12jHpLA=
Subject key identifier: 42:77:68:A4:CB:48:44:80:C2:76:91:84:D8:1C:D3:16:CD:87:95:42
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01955F5C9D1F1324D6FE5C921C6C0C7231D6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QndopMtIRIDCdpGE2BzTFs2HlUI.roa
Signing time: Tue 04 Mar 2025 04:14:19 +0000
ROA not before: Tue 04 Mar 2025 04:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10103
IP address blocks: 151.242.65.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5f:5c:9d:1f:13:24:d6:fe:5c:92:1c:6c:0c:72:31:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 4 04:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=427768a4cb484480c2769184d81cd316cd879542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:fa:82:0f:20:62:ea:6d:3b:f0:4c:82:f6:
34:33:6d:5a:c7:8d:ae:98:e1:6e:a6:69:d4:01:5b:
0a:d0:7d:4a:6d:c8:fd:7d:73:2c:8c:2b:c3:61:6a:
64:a9:91:60:cb:00:77:9f:fa:aa:bc:6d:7e:17:ce:
2b:a3:ea:a4:05:3c:a2:83:65:42:17:8a:29:d1:91:
ea:93:5b:7a:76:d3:46:6a:14:ca:9d:3c:05:c1:fb:
ee:6b:67:1e:3b:0d:e2:6f:71:4c:51:80:4d:45:0a:
9e:6d:24:c5:01:3a:59:60:b6:7a:ca:a6:9d:de:79:
b3:72:8a:3f:1d:69:34:b5:1d:e9:b5:37:99:6d:9f:
1d:6e:33:10:82:6c:aa:d2:62:c7:96:7e:00:cc:41:
3a:5b:dd:b2:f8:c3:da:c0:f5:2d:d3:ad:81:34:75:
8b:0d:72:0a:79:1e:c1:25:b1:00:8e:7f:81:dd:34:
e1:35:c6:30:1c:a6:38:e2:2c:1b:fb:e3:fa:5c:4d:
60:6f:2e:67:d6:39:ab:25:7c:f6:ea:60:3d:93:ba:
61:9b:d2:87:4e:4f:6a:7b:2e:be:df:65:9b:00:d8:
e2:1f:35:af:38:dc:11:d9:6d:81:29:52:d7:02:cf:
3e:c4:63:cd:89:b4:bd:98:cb:c7:c4:c5:dd:01:bd:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:77:68:A4:CB:48:44:80:C2:76:91:84:D8:1C:D3:16:CD:87:95:42
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QndopMtIRIDCdpGE2BzTFs2HlUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.65.0/24
151.243.214.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:43:c5:5b:fb:a5:1c:ea:25:1c:20:ff:ad:98:00:63:6b:36:
03:51:f4:27:81:98:d1:1e:0e:09:ad:9b:77:28:29:11:f1:ba:
cf:c2:9b:7b:31:3a:52:ee:f1:95:be:7a:66:e0:01:92:29:58:
16:45:a6:74:a5:74:c0:7e:4d:19:fd:83:aa:84:63:34:e8:f4:
f1:50:14:87:5b:a9:96:34:fc:2c:e8:95:49:c6:ef:f1:24:ee:
ee:d8:bd:ea:2e:e2:06:3c:ec:d1:42:5d:4a:ef:fe:63:aa:a4:
01:c5:90:19:d2:67:a8:ce:38:76:69:a6:9d:e8:70:71:4b:35:
21:e3:a8:3b:7d:db:58:42:cd:9c:90:7a:80:df:34:48:9f:c4:
44:64:a5:14:62:27:87:e7:e8:b4:4c:d7:df:7f:7d:c0:f1:af:
9d:e0:8d:aa:31:14:0e:22:84:f7:bf:a8:de:e7:b0:7e:a6:75:
29:e3:80:6b:b7:78:cf:80:51:ec:67:be:8b:d2:77:62:16:62:
94:59:e7:9b:76:96:60:7a:95:41:42:ff:fa:fd:46:ae:40:bf:
f8:b7:41:b6:90:cc:d0:bb:59:ad:63:ab:b3:f0:9b:72:9d:4d:
01:c2:31:cb:50:2c:22:fa:a2:f7:69:97:0e:c6:8d:08:22:98:
8b:81:2f:88
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZVfXJ0fEyTW/lySHGwMcjHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMzA0MDQxNDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mjc3NjhhNGNiNDg0NDgwYzI3NjkxODRkODFjZDMxNmNkODc5NTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApub6gg8gYuptO/BMgvY0M21ax42u
mOFupmnUAVsK0H1Kbcj9fXMsjCvDYWpkqZFgywB3n/qqvG1+F84ro+qkBTyig2VC
F4op0ZHqk1t6dtNGahTKnTwFwfvua2ceOw3ib3FMUYBNRQqebSTFATpZYLZ6yqad
3nmzcoo/HWk0tR3ptTeZbZ8dbjMQgmyq0mLHln4AzEE6W92y+MPawPUt062BNHWL
DXIKeR7BJbEAjn+B3TThNcYwHKY44iwb++P6XE1gby5n1jmrJXz26mA9k7phm9KH
Tk9qey6+32WbANjiHzWvONwR2W2BKVLXAs8+xGPNibS9mMvHxMXdAb0Z7QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEJ3aKTLSESAwnaRhNgc0xbNh5VCMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUW5kb3BNdElSSURDZHBHRTJCelRGczJIbFVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/JBAwQA
l/PWMA0GCSqGSIb3DQEBCwUAA4IBAQB/Q8Vb+6Uc6iUcIP+tmABjazYDUfQngZjR
Hg4JrZt3KCkR8brPwpt7MTpS7vGVvnpm4AGSKVgWRaZ0pXTAfk0Z/YOqhGM06PTx
UBSHW6mWNPws6JVJxu/xJO7u2L3qLuIGPOzRQl1K7/5jqqQBxZAZ0meozjh2aaad
6HBxSzUh46g7fdtYQs2ckHqA3zRIn8REZKUUYieH5+i0TNfff33A8a+d4I2qMRQO
IoT3v6je57B+pnUp44Brt3jPgFHsZ76L0ndiFmKUWeebdpZgepVBQv/6/UauQL/4
t0G2kMzQu1mtY6uz8JtynU0BwjHLUCwi+qL3aZcOxo0IIpiLgS+I
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:41 2025 by rpki-client