Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/qBz1hjzykMH_ZcIwvTn0SDyhgfs.roa
File: qBz1hjzykMH_ZcIwvTn0SDyhgfs.roa (raw, json)
Hash identifier: W/hp3H2l3tBtLyOj1Fa5/YEuC/XubK4WM06Ks3Q9e/8=
Subject key identifier: A8:1C:F5:86:3C:F2:90:C1:FF:65:C2:30:BD:39:F4:48:3C:A1:81:FB
Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial: 01942521390F720E4619AC314D8302DE0EFA
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/qBz1hjzykMH_ZcIwvTn0SDyhgfs.roa
Signing time: Thu 02 Jan 2025 03:48:41 +0000
ROA not before: Thu 02 Jan 2025 03:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61201
IP address blocks: 2a00:eb0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:39:0f:72:0e:46:19:ac:31:4d:83:02:de:0e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Validity
Not Before: Jan 2 03:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a81cf5863cf290c1ff65c230bd39f4483ca181fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:1c:61:ab:c5:5f:ac:24:40:06:a9:2c:ab:
56:92:6b:c5:dc:b9:18:56:46:b1:61:6b:90:33:a7:
f7:7d:e6:ac:4e:c3:ed:55:75:37:5a:a1:80:9c:03:
fb:8f:25:01:3b:81:77:f0:b1:78:5c:88:fe:ef:28:
ad:e0:f6:3e:0c:e4:34:f5:07:54:bd:2d:10:25:12:
b2:85:d4:53:5d:63:7a:ed:ca:42:b2:a1:00:8f:57:
d2:e8:24:2b:4c:ee:a2:92:df:1f:33:5a:07:41:5c:
e2:f8:02:44:be:3b:b0:d5:5c:ee:65:46:85:d9:48:
eb:af:08:41:05:f7:34:09:c8:e2:f6:43:47:c3:15:
98:34:b7:d8:a1:d1:09:a7:cf:29:5f:7b:9f:92:84:
d3:58:62:07:b5:e8:d8:1b:d8:11:c1:d9:38:2a:02:
f8:2e:3f:00:78:ae:a9:b8:1b:0e:d5:7e:4d:75:81:
5b:83:3b:0b:e0:15:55:cd:a5:4d:58:d0:83:e6:25:
de:3f:3e:69:1c:bd:5d:b8:68:3c:d7:2c:2a:19:d3:
a7:6f:ef:1a:ae:a1:f8:a8:db:b7:e4:e2:f7:36:a6:
1c:a3:92:98:86:70:56:e9:01:51:af:58:54:03:ae:
69:da:78:5d:24:cc:a5:aa:7b:4c:73:67:d3:f3:15:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1C:F5:86:3C:F2:90:C1:FF:65:C2:30:BD:39:F4:48:3C:A1:81:FB
X509v3 Authority Key Identifier:
keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/qBz1hjzykMH_ZcIwvTn0SDyhgfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:eb0:100::/48
Signature Algorithm: sha256WithRSAEncryption
8f:20:42:18:9d:58:dc:ed:10:8f:21:b8:bb:99:e4:c4:92:44:
cc:72:67:45:9f:d3:2b:13:e9:39:7a:11:a9:15:ed:bd:ed:e3:
50:06:8d:f9:4e:a1:ee:4c:d0:43:3a:36:c8:20:35:10:4d:c6:
65:55:b7:88:ab:a3:02:28:8e:02:61:a4:f5:09:95:79:ed:84:
45:ee:e9:65:49:4d:aa:16:8c:d0:8e:9b:66:33:0f:26:a8:1e:
ca:ab:8b:93:17:c7:a1:1f:71:f2:85:8d:4c:a4:41:99:d0:75:
37:ff:d3:0a:a6:75:70:f5:dc:2b:ee:b2:1b:27:c9:00:3f:46:
cc:2d:22:f6:45:cb:d6:f3:a4:8d:0f:6f:a8:06:f0:1f:28:cb:
be:c0:10:92:3e:92:c4:c1:24:63:65:ab:88:14:ef:30:af:37:
32:7f:5d:38:9a:ef:dd:50:06:a1:66:38:b4:16:b2:a0:ed:2e:
27:6e:ff:6f:b2:01:a8:5f:95:be:d0:0a:61:f2:46:ce:cd:f9:
36:11:24:5b:05:d9:ad:44:70:f7:14:a1:87:e7:d4:fa:c5:2b:
2e:2c:8a:34:82:dd:cf:2e:15:6a:4d:80:49:84:93:c4:7b:05:
61:8a:08:68:88:6f:33:21:c9:c1:71:b6:53:72:8a:d6:e8:7f:
76:88:72:8d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlITkPcg5GGawxTYMC3g76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm
MGY2NzEwHhcNMjUwMTAyMDM0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODFjZjU4NjNjZjI5MGMxZmY2NWMyMzBiZDM5ZjQ0ODNjYTE4MWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6scYavFX6wkQAapLKtWkmvF3LkY
VkaxYWuQM6f3feasTsPtVXU3WqGAnAP7jyUBO4F38LF4XIj+7yit4PY+DOQ09QdU
vS0QJRKyhdRTXWN67cpCsqEAj1fS6CQrTO6ikt8fM1oHQVzi+AJEvjuw1VzuZUaF
2UjrrwhBBfc0Ccji9kNHwxWYNLfYodEJp88pX3ufkoTTWGIHtejYG9gRwdk4KgL4
Lj8AeK6puBsO1X5NdYFbgzsL4BVVzaVNWNCD5iXePz5pHL1duGg81ywqGdOnb+8a
rqH4qNu35OL3NqYco5KYhnBW6QFRr1hUA65p2nhdJMylqntMc2fT8xVFvQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKgc9YY88pDB/2XCML059Eg8oYH7MB8GA1UdIwQY
MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt
NGM5OGQ5YTUxNDA1LzEvcUJ6MWhqenlrTUhfWmNJd3ZUbjBTRHloZ2ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1
LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAOsAEA
MA0GCSqGSIb3DQEBCwUAA4IBAQCPIEIYnVjc7RCPIbi7meTEkkTMcmdFn9MrE+k5
ehGpFe297eNQBo35TqHuTNBDOjbIIDUQTcZlVbeIq6MCKI4CYaT1CZV57YRF7ull
SU2qFozQjptmMw8mqB7Kq4uTF8ehH3HyhY1MpEGZ0HU3/9MKpnVw9dwr7rIbJ8kA
P0bMLSL2RcvW86SND2+oBvAfKMu+wBCSPpLEwSRjZauIFO8wrzcyf104mu/dUAah
Zji0FrKg7S4nbv9vsgGoX5W+0Aph8kbOzfk2ESRbBdmtRHD3FKGH59T6xSsuLIo0
gt3PLhVqTYBJhJPEewVhighoiG8zIcnBcbZTcorW6H92iHKN
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:05 2025 by rpki-client