Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qqqHunU5Tx_R9MA8VpLlT6UaT4o.roa
File: qqqHunU5Tx_R9MA8VpLlT6UaT4o.roa (raw, json)
Hash identifier: JEujPa2xFU1c89b1QIalCsMSXgT4FKm7GqfBBb/a0y8=
Subject key identifier: AA:AA:87:BA:75:39:4F:1F:D1:F4:C0:3C:56:92:E5:4F:A5:1A:4F:8A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01959AA96F24ED934DF5926884BD700F5A19
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qqqHunU5Tx_R9MA8VpLlT6UaT4o.roa
Signing time: Sat 15 Mar 2025 16:35:50 +0000
ROA not before: Sat 15 Mar 2025 16:35:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136501
IP address blocks: 31.57.32.0/24 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.8.0/21 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.32.0/21 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9a:a9:6f:24:ed:93:4d:f5:92:68:84:bd:70:0f:5a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 15 16:35:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaaa87ba75394f1fd1f4c03c5692e54fa51a4f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:5d:05:4c:04:08:d0:3d:82:4c:aa:ae:ba:
f0:b5:31:cc:45:44:a6:83:1d:dd:c2:be:f2:97:5c:
81:63:38:ea:8a:14:26:95:bd:ec:f7:67:a0:8d:52:
7f:32:25:9c:66:d4:5f:d1:f4:29:35:c7:a7:85:8c:
8f:fb:de:d9:b4:39:36:38:15:ff:80:20:cd:91:e0:
67:4b:64:23:9b:0d:50:3a:39:34:4a:7c:ff:90:c2:
44:0f:8e:47:7b:a7:5d:ec:1e:c6:ee:ec:49:04:1e:
7e:9c:e5:25:f5:72:e2:93:7b:33:f3:6b:d9:2a:9e:
bc:aa:81:46:31:05:fd:5e:44:5b:9a:69:02:b0:15:
cd:07:2e:eb:88:7d:34:34:43:7b:8a:bb:1e:6f:fe:
56:9e:34:92:f7:8e:57:04:58:03:c3:35:83:ad:07:
3e:8b:8b:35:43:24:54:da:91:a1:3c:10:e7:ce:23:
79:17:8d:99:b4:40:0d:e4:ed:2c:59:14:85:c6:23:
85:60:39:53:f1:ec:f0:df:29:a9:d8:3b:fb:fe:e3:
cb:62:ff:c9:99:a9:7a:3b:50:22:34:16:b3:74:09:
9b:50:dd:49:9b:0b:2c:40:e2:f3:99:1e:0a:ee:1b:
c7:c0:0d:be:b2:8e:77:bb:30:b1:8a:e7:0a:ff:35:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AA:87:BA:75:39:4F:1F:D1:F4:C0:3C:56:92:E5:4F:A5:1A:4F:8A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qqqHunU5Tx_R9MA8VpLlT6UaT4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.32.0/24
217.60.0.0/20
217.60.24.0/22
217.60.32.0/21
217.60.44.0/22
217.60.56.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:a9:03:54:b3:4b:b1:08:67:28:6e:27:3a:12:32:7e:8b:15:
39:c4:5c:2f:33:06:c0:05:53:ed:a3:b6:58:41:08:52:96:3c:
32:30:22:ef:0f:6f:81:64:8f:a5:ad:3d:33:4a:de:da:b8:db:
79:3f:02:14:1f:62:5b:34:f0:83:50:56:fb:62:ae:8a:b9:c2:
c8:c6:25:54:1f:f3:8c:d0:1d:c5:4e:63:18:8d:02:db:cc:3a:
2f:93:84:4f:a5:38:41:81:f7:ed:6a:b5:d1:15:dc:9f:39:d0:
83:79:6a:cf:1f:34:81:fe:b4:4a:3c:39:79:67:ce:fe:c2:bf:
91:9b:ab:8d:e3:35:b7:9e:87:25:ff:fe:ca:c8:33:7e:4f:7f:
35:85:f8:c3:9e:3a:9a:ee:87:74:0d:54:99:87:85:99:5a:6e:
a4:2d:14:44:1f:e7:96:89:38:ba:8f:b8:c2:4e:4e:2a:6a:36:
91:43:b3:44:f4:24:93:41:76:cd:91:02:ba:c4:27:cf:31:0b:
ed:3c:ee:83:54:c9:60:85:8b:49:60:ef:98:77:d8:d1:40:e8:
7e:3e:21:1f:ad:dc:34:01:32:34:cb:ad:d6:4e:c2:16:b6:df:
da:52:c9:d3:61:41:63:7c:25:f3:ef:72:69:71:39:70:fa:59:
f1:53:0d:4c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZWaqW8k7ZNN9ZJohL1wD1oZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzE1MTYzNTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWFhODdiYTc1Mzk0ZjFmZDFmNGMwM2M1NjkyZTU0ZmE1MWE0ZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9xdBUwECNA9gkyqrrrwtTHMRUSm
gx3dwr7yl1yBYzjqihQmlb3s92egjVJ/MiWcZtRf0fQpNcenhYyP+97ZtDk2OBX/
gCDNkeBnS2Qjmw1QOjk0Snz/kMJED45He6dd7B7G7uxJBB5+nOUl9XLik3sz82vZ
Kp68qoFGMQX9XkRbmmkCsBXNBy7riH00NEN7irseb/5WnjSS945XBFgDwzWDrQc+
i4s1QyRU2pGhPBDnziN5F42ZtEAN5O0sWRSFxiOFYDlT8ezw3ymp2Dv7/uPLYv/J
mal6O1AiNBazdAmbUN1JmwssQOLzmR4K7hvHwA2+so53uzCxiucK/zU+zQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKqqh7p1OU8f0fTAPFaS5U+lGk+KMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvcXFxSHVuVTVUeF9SOU1BOFZwTGxUNlVhVDRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzkgAwQE
2TwAAwQC2TwYAwQD2TwgAwQC2TwsAwQD2Tw4MA0GCSqGSIb3DQEBCwUAA4IBAQDB
qQNUs0uxCGcobic6EjJ+ixU5xFwvMwbABVPto7ZYQQhSljwyMCLvD2+BZI+lrT0z
St7auNt5PwIUH2JbNPCDUFb7Yq6KucLIxiVUH/OM0B3FTmMYjQLbzDovk4RPpThB
gfftarXRFdyfOdCDeWrPHzSB/rRKPDl5Z87+wr+Rm6uN4zW3nocl//7KyDN+T381
hfjDnjqa7od0DVSZh4WZWm6kLRREH+eWiTi6j7jCTk4qajaRQ7NE9CSTQXbNkQK6
xCfPMQvtPO6DVMlghYtJYO+Yd9jRQOh+PiEfrdw0ATI0y63WTsIWtt/aUsnTYUFj
fCXz73JpcTlw+lnxUw1M
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:37 2025 by rpki-client