Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/Qte0y98Y9LrHrXTOy7e_WZVED5A.roa
File: Qte0y98Y9LrHrXTOy7e_WZVED5A.roa (raw, json)
Hash identifier: FqjEi0MQwCtulDy3FoGliTQJvoHi+j/oxOseKBz9nDw=
Subject key identifier: 42:D7:B4:CB:DF:18:F4:BA:C7:AD:74:CE:CB:B7:BF:59:95:44:0F:90
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 01950490F282006A1A2E8FED4CB619AC4D38
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/Qte0y98Y9LrHrXTOy7e_WZVED5A.roa
Signing time: Fri 14 Feb 2025 13:06:02 +0000
ROA not before: Fri 14 Feb 2025 13:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200438
IP address blocks: 5.183.192.0/23 maxlen: 24
5.183.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:90:f2:82:00:6a:1a:2e:8f:ed:4c:b6:19:ac:4d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Feb 14 13:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42d7b4cbdf18f4bac7ad74cecbb7bf5995440f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:55:d1:86:a1:b2:49:79:d6:ef:46:d8:7f:
52:f7:3b:8a:f0:79:cc:ee:8b:6d:a5:d5:b5:f6:26:
8f:0c:49:72:96:ba:3e:aa:11:71:05:90:02:4b:91:
9b:16:2b:22:97:2f:71:11:81:c7:30:fd:7e:3f:b9:
ec:b1:d3:20:a9:40:1c:95:01:84:18:2c:88:42:11:
ce:e6:17:31:5c:4d:a9:4e:b1:d5:6a:5b:95:ec:57:
3f:45:da:e6:45:07:cc:f1:7c:10:ef:73:cf:b3:8c:
a9:84:53:85:46:d1:e0:67:f5:bb:ce:c9:27:63:e8:
19:a5:99:5c:24:3a:48:c2:3a:74:30:83:1e:8a:a4:
4e:cb:98:b5:56:4b:4c:6d:8b:e2:d2:9a:ee:6c:97:
50:8f:be:13:e2:a2:c2:c5:b8:86:7a:19:93:ab:e2:
e4:e9:ca:21:2c:d9:90:6d:58:6e:7b:7a:0f:6f:db:
b6:66:05:07:58:c8:d3:09:37:c2:e3:d0:59:95:44:
f9:a1:a4:e9:db:57:99:f3:ea:3c:ef:40:1c:dc:39:
e4:f9:a3:23:df:da:c1:2b:8a:62:60:9d:51:7f:e2:
76:a8:db:8c:8e:b5:97:28:3d:b4:66:bd:9e:3c:86:
df:c5:87:fe:d2:0a:cf:e3:02:08:c2:87:1a:47:db:
0d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D7:B4:CB:DF:18:F4:BA:C7:AD:74:CE:CB:B7:BF:59:95:44:0F:90
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/Qte0y98Y9LrHrXTOy7e_WZVED5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.192.0-5.183.194.255
Signature Algorithm: sha256WithRSAEncryption
a8:c1:a9:01:f0:1b:0e:47:09:f8:94:62:84:c5:64:5d:d4:ce:
38:ad:cf:3c:0c:18:cc:49:ae:52:8d:7a:96:f0:02:61:f9:f4:
2e:df:6e:46:15:a1:dd:f5:43:ee:7b:51:1b:2e:6f:ce:2d:28:
8e:3a:31:80:d6:b1:2e:c4:46:07:38:ca:12:7f:42:74:5b:dc:
1a:72:a3:dc:be:a0:42:4e:6d:0d:b0:fd:dc:45:44:47:1b:c6:
00:9c:a2:9b:1d:a6:ad:f6:63:31:4d:bf:69:39:38:1d:28:c3:
1e:37:2f:81:5a:c0:bf:62:f4:85:69:3d:c0:3c:ab:45:3c:03:
2a:bf:e1:2f:3f:a5:11:d3:a8:2b:76:c5:27:3e:73:8e:92:e5:
32:3b:0d:10:04:e8:a7:5d:2c:37:d3:bf:85:8d:63:8a:74:75:
a3:f6:d8:67:6e:c0:fa:df:74:44:8c:1a:ee:6f:b1:ed:f9:d1:
15:13:a6:dc:10:1f:9f:56:b4:2c:f4:b3:b1:d1:57:dc:ec:ff:
4a:af:a6:63:6b:87:c7:ec:65:6e:c8:05:f8:0b:20:da:f4:e4:
60:43:00:ce:45:3e:08:3b:51:34:d8:48:c7:78:36:94:44:05:
34:27:73:d5:6d:f9:2d:40:0b:93:1e:9d:6e:dd:0a:79:a7:8c:
0d:64:9a:88
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZUEkPKCAGoaLo/tTLYZrE04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOGI5MzIzY2Q0YzkyYzc1ZDgzZDM0NmYwZDI2OWU1YzJk
NWE4MDgwHhcNMjUwMjE0MTMwNjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmQ3YjRjYmRmMThmNGJhYzdhZDc0Y2VjYmI3YmY1OTk1NDQwZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ClV0Yahskl51u9G2H9S9zuK8HnM
7ottpdW19iaPDElylro+qhFxBZACS5GbFisily9xEYHHMP1+P7nssdMgqUAclQGE
GCyIQhHO5hcxXE2pTrHValuV7Fc/RdrmRQfM8XwQ73PPs4yphFOFRtHgZ/W7zskn
Y+gZpZlcJDpIwjp0MIMeiqROy5i1VktMbYvi0prubJdQj74T4qLCxbiGehmTq+Lk
6cohLNmQbVhue3oPb9u2ZgUHWMjTCTfC49BZlUT5oaTp21eZ8+o870Ac3Dnk+aMj
39rBK4piYJ1Rf+J2qNuMjrWXKD20Zr2ePIbfxYf+0grP4wIIwocaR9sNgwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFELXtMvfGPS6x610zsu3v1mVRA+QMB8GA1UdIwQY
MBaAFB2LkyPNTJLHXYPTRvDSaeXC1agIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFl1VEk4MU1rc2RkZzlORzhOSnA1Y0xWcUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YzdhMzQtNTM4ZC00MzE0LWFhZjQt
MDRkZDgwZDViNzJkLzEvUXRlMHk5OFk5THJIclhUT3k3ZV9XWlZFRDVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84YzdhMzQtNTM4ZC00MzE0LWFhZjQtMDRkZDgwZDViNzJk
LzEvSFl1VEk4MU1rc2RkZzlORzhOSnA1Y0xWcUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAYFt8AD
BAAFt8IwDQYJKoZIhvcNAQELBQADggEBAKjBqQHwGw5HCfiUYoTFZF3UzjitzzwM
GMxJrlKNepbwAmH59C7fbkYVod31Q+57URsub84tKI46MYDWsS7ERgc4yhJ/QnRb
3Bpyo9y+oEJObQ2w/dxFREcbxgCcopsdpq32YzFNv2k5OB0owx43L4FawL9i9IVp
PcA8q0U8Ayq/4S8/pRHTqCt2xSc+c46S5TI7DRAE6KddLDfTv4WNY4p0daP22Gdu
wPrfdESMGu5vse350RUTptwQH59WtCz0s7HRV9zs/0qvpmNrh8fsZW7IBfgLINr0
5GBDAM5FPgg7UTTYSMd4NpREBTQnc9Vt+S1AC5MenW7dCnmnjA1kmog=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:24:13 2025 by rpki-client