Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/qnVXtf1TVi5GCQxQhYlNE39LANs.roa
File: qnVXtf1TVi5GCQxQhYlNE39LANs.roa (raw, json)
Hash identifier: Vkby1xioM0TdE4rcN305dR5fIAGrIUI8/ZjjHRe70O4=
Subject key identifier: AA:75:57:B5:FD:53:56:2E:46:09:0C:50:85:89:4D:13:7F:4B:00:DB
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 019421B214CBF0FC066C0CEC7151502BDA29
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/qnVXtf1TVi5GCQxQhYlNE39LANs.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 195.95.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:14:cb:f0:fc:06:6c:0c:ec:71:51:50:2b:da:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa7557b5fd53562e46090c5085894d137f4b00db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:55:0b:dc:e9:20:a3:e8:19:58:31:0d:ac:
44:d9:c2:1e:0f:57:06:4f:70:f7:41:5d:34:45:63:
fc:18:ca:d0:81:77:7b:03:1a:1a:4e:28:df:55:3f:
bf:b1:da:4b:b9:39:6a:e5:f7:59:df:ee:5d:1a:06:
1f:83:dd:9f:bd:0d:d4:98:32:94:27:fe:0b:2e:6c:
97:41:c4:65:ad:58:69:4b:d8:a8:aa:43:98:60:d2:
a9:63:9d:19:1c:c4:f7:37:99:fb:bf:ae:66:e2:de:
33:62:2b:8d:85:49:70:cc:4f:a1:57:32:55:a4:ce:
1c:48:be:ba:d3:5c:ae:20:42:fb:f3:21:eb:60:67:
6d:8c:4c:e0:01:b5:c7:51:36:ea:63:dc:94:fb:7e:
a0:cc:95:1c:f1:2e:4f:eb:e2:79:d3:25:cb:93:a6:
83:f2:7d:f1:93:8f:49:dd:ed:fe:d0:60:6c:45:7d:
e8:25:69:29:c0:ec:57:9a:37:3c:73:de:9d:14:31:
5b:c3:41:7b:49:b7:44:a2:0a:50:83:19:59:ee:10:
d6:fc:cd:c4:61:c4:d5:e9:b8:65:c1:ba:56:a2:05:
3f:7b:b1:82:68:ce:ce:bd:2b:39:81:a3:bb:18:8f:
6e:d7:bf:96:62:63:56:80:98:b7:ef:7a:1b:18:85:
60:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:75:57:B5:FD:53:56:2E:46:09:0C:50:85:89:4D:13:7F:4B:00:DB
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/qnVXtf1TVi5GCQxQhYlNE39LANs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:11:8e:da:5c:05:00:e9:d2:f1:64:ac:f1:ec:08:2c:ae:31:
04:54:a4:f6:ca:9b:04:e6:fc:0c:02:95:17:77:32:fd:b7:3f:
1a:51:40:60:19:dc:97:54:3e:38:8d:c0:84:dd:e1:71:d6:ba:
a3:76:da:1a:39:cc:df:ba:9e:8c:fd:df:86:fd:ae:1c:c2:65:
a9:04:27:36:e9:e4:60:2c:74:b5:53:1e:21:e4:d1:d8:c0:f4:
1c:c1:76:a6:06:b5:49:12:c0:e8:01:25:97:22:53:f0:20:6b:
23:12:d4:85:3e:ec:dd:14:55:89:49:4c:f4:3c:b3:34:c6:d8:
fc:96:bf:ff:03:27:d7:37:9f:03:61:1d:8c:4e:6d:61:e0:45:
58:4b:02:e0:9a:e6:51:5d:41:1e:a6:f5:76:60:9f:50:ad:b1:
6a:95:6f:d2:66:bb:ca:c2:e1:ca:ce:8a:eb:6a:10:b3:e3:ae:
8a:e6:e3:6c:ee:26:71:55:68:18:7a:63:85:c2:78:02:da:0c:
cc:59:68:4d:73:1b:5c:04:84:11:ac:01:ea:02:8f:24:87:6f:
b8:d0:cc:3a:f5:f2:2d:6c:47:ff:c8:21:b0:96:46:bd:f8:84:
8b:0c:63:9b:ad:00:d8:f5:b8:ad:31:a6:b2:c3:f9:a3:41:cf:
4c:df:77:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhshTL8PwGbAzscVFQK9opMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk
NmNlNTEwHhcNMjUwMTAxMTE0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTc1NTdiNWZkNTM1NjJlNDYwOTBjNTA4NTg5NGQxMzdmNGIwMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKBVC9zpIKPoGVgxDaxE2cIeD1cG
T3D3QV00RWP8GMrQgXd7AxoaTijfVT+/sdpLuTlq5fdZ3+5dGgYfg92fvQ3UmDKU
J/4LLmyXQcRlrVhpS9ioqkOYYNKpY50ZHMT3N5n7v65m4t4zYiuNhUlwzE+hVzJV
pM4cSL6601yuIEL78yHrYGdtjEzgAbXHUTbqY9yU+36gzJUc8S5P6+J50yXLk6aD
8n3xk49J3e3+0GBsRX3oJWkpwOxXmjc8c96dFDFbw0F7SbdEogpQgxlZ7hDW/M3E
YcTV6bhlwbpWogU/e7GCaM7OvSs5gaO7GI9u17+WYmNWgJi373obGIVg/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKp1V7X9U1YuRgkMUIWJTRN/SwDbMB8GA1UdIwQY
MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt
ZGY2NGYwZTgyMzYwLzEvcW5WWHRmMVRWaTVHQ1F4UWhZbE5FMzlMQU5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw
LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1/IMA0G
CSqGSIb3DQEBCwUAA4IBAQC2EY7aXAUA6dLxZKzx7AgsrjEEVKT2ypsE5vwMApUX
dzL9tz8aUUBgGdyXVD44jcCE3eFx1rqjdtoaOczfup6M/d+G/a4cwmWpBCc26eRg
LHS1Ux4h5NHYwPQcwXamBrVJEsDoASWXIlPwIGsjEtSFPuzdFFWJSUz0PLM0xtj8
lr//AyfXN58DYR2MTm1h4EVYSwLgmuZRXUEepvV2YJ9QrbFqlW/SZrvKwuHKzorr
ahCz466K5uNs7iZxVWgYemOFwngC2gzMWWhNcxtcBIQRrAHqAo8kh2+40Mw69fIt
bEf/yCGwlka9+ISLDGObrQDY9bitMaayw/mjQc9M33cG
-----END CERTIFICATE-----
Generated at Wed Feb 5 08:37:37 2025 by rpki-client