Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/QsI91EQU0FfuQWtPM8GSqH3JUGY.roa
File: QsI91EQU0FfuQWtPM8GSqH3JUGY.roa (raw, json)
Hash identifier: E3wsAexKJr8HQY5TnjV1zhmCkOPgMph7WKoFlQ4Vnzc=
Subject key identifier: 42:C2:3D:D4:44:14:D0:57:EE:41:6B:4F:33:C1:92:A8:7D:C9:50:66
Certificate issuer: /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial: 0194266C1650B151F33541F85298D65DAB6A
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/QsI91EQU0FfuQWtPM8GSqH3JUGY.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210727
IP address blocks: 46.253.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:16:50:b1:51:f3:35:41:f8:52:98:d6:5d:ab:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42c23dd44414d057ee416b4f33c192a87dc95066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:df:a9:7c:ba:6b:d9:d6:11:22:62:e8:8c:
51:6b:ea:2c:4d:3d:5d:af:ea:45:e8:13:52:b0:fd:
62:ba:1a:57:f7:34:ef:44:dc:cb:d3:ba:e2:74:8f:
2a:13:b4:6c:45:fc:eb:8d:f8:f3:b9:2c:4c:5c:69:
d6:8b:84:56:af:cc:df:fa:69:bd:37:e6:58:03:a8:
5d:86:44:af:23:7e:c9:37:e0:81:02:00:ac:a0:97:
29:d7:06:d7:7f:25:56:fe:e1:7d:23:23:17:85:6a:
2f:64:49:70:74:39:2a:10:ba:97:4c:4b:6c:5b:f0:
cc:a3:da:11:7d:c1:4f:5a:7c:4f:a2:d5:27:6f:56:
3f:72:f0:10:59:fa:0f:78:6e:1c:f3:83:b1:e7:4f:
8a:c1:ac:ba:e3:3e:69:3a:96:01:86:c3:a4:56:99:
1d:a8:99:4b:d8:70:b4:bb:45:ee:06:2d:c6:a6:a3:
71:0f:39:f2:34:6c:8d:01:cb:be:d6:c8:ba:e0:f8:
ac:8a:73:dc:74:75:f6:6c:33:65:25:b7:09:65:39:
57:03:fd:23:63:6a:b5:d0:29:5a:53:4d:9f:cb:6d:
d0:42:a0:b7:6b:d7:07:27:61:25:b6:72:c1:ed:0c:
26:b3:0a:00:1a:c9:79:8d:9c:53:2c:14:ee:a2:bd:
d6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C2:3D:D4:44:14:D0:57:EE:41:6B:4F:33:C1:92:A8:7D:C9:50:66
X509v3 Authority Key Identifier:
keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/QsI91EQU0FfuQWtPM8GSqH3JUGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.129.0/24
Signature Algorithm: sha256WithRSAEncryption
49:13:0e:07:1d:f5:62:ab:c9:f9:5f:4e:6f:58:fc:7d:b7:d4:
5e:b0:80:05:f8:5d:64:c8:2d:6c:c6:e4:97:17:71:61:2e:2d:
c2:f8:a1:71:01:4c:c1:5a:e0:e1:37:85:50:f8:96:de:fa:49:
08:29:ad:e1:28:15:e3:9e:68:72:66:29:d8:4e:c0:3b:ca:85:
5c:a3:42:ef:6a:f3:16:4a:e2:68:6b:8b:03:bc:7b:e1:8d:6f:
fa:a2:1c:fd:9c:50:22:66:8d:8b:63:7a:a4:3a:33:a1:93:09:
25:47:be:33:c9:b2:fe:e8:5b:31:25:90:ae:44:de:f8:72:80:
bc:5d:d0:2c:bb:e1:e4:24:84:9e:e6:7d:6a:f5:7c:c7:56:8d:
1f:c1:0b:14:2c:9b:17:43:a2:75:ad:6d:82:0e:40:05:74:2f:
b4:33:ec:3b:14:5f:15:46:b8:6e:0c:fe:79:b2:7a:cc:79:5f:
b3:60:95:99:7f:0d:b9:a7:81:58:ff:88:10:d6:bf:ff:f5:22:
77:f4:52:90:21:3c:17:cf:fd:6a:9c:26:13:9e:03:9e:79:a6:
f4:2d:ff:d9:d3:82:29:30:c7:bc:e7:fd:5c:5c:7a:e1:b8:76:
71:1d:28:98:d4:01:46:67:d1:ae:28:97:dc:06:d4:be:7f:6f:
5b:07:37:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbBZQsVHzNUH4UpjWXatqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmM1MzRiYTQ0ZTlkM2NiYTJmMjQ0NmQ0YTNkZDZlZWE5
YjhmNjEwHhcNMjUwMTAyMDk1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmMyM2RkNDQ0MTRkMDU3ZWU0MTZiNGYzM2MxOTJhODdkYzk1MDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CzfqXy6a9nWESJi6IxRa+osTT1d
r+pF6BNSsP1iuhpX9zTvRNzL07ridI8qE7RsRfzrjfjzuSxMXGnWi4RWr8zf+mm9
N+ZYA6hdhkSvI37JN+CBAgCsoJcp1wbXfyVW/uF9IyMXhWovZElwdDkqELqXTEts
W/DMo9oRfcFPWnxPotUnb1Y/cvAQWfoPeG4c84Ox50+Kway64z5pOpYBhsOkVpkd
qJlL2HC0u0XuBi3GpqNxDznyNGyNAcu+1si64PisinPcdHX2bDNlJbcJZTlXA/0j
Y2q10ClaU02fy23QQqC3a9cHJ2EltnLB7QwmswoAGsl5jZxTLBTuor3WcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFELCPdREFNBX7kFrTzPBkqh9yVBmMB8GA1UdIwQY
MBaAFHe8U0ukTp08ui8kRtSj3W7qm49hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8yZmRkNTYtYmEyYy00NmZiLTk4ODIt
OWIyNTdmNGZlYThkLzEvUXNJOTFFUVUwRmZ1UVd0UE04R1NxSDNKVUdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8yZmRkNTYtYmEyYy00NmZiLTk4ODItOWIyNTdmNGZlYThk
LzEvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv2BMA0G
CSqGSIb3DQEBCwUAA4IBAQBJEw4HHfViq8n5X05vWPx9t9ResIAF+F1kyC1sxuSX
F3FhLi3C+KFxAUzBWuDhN4VQ+Jbe+kkIKa3hKBXjnmhyZinYTsA7yoVco0LvavMW
SuJoa4sDvHvhjW/6ohz9nFAiZo2LY3qkOjOhkwklR74zybL+6FsxJZCuRN74coC8
XdAsu+HkJISe5n1q9XzHVo0fwQsULJsXQ6J1rW2CDkAFdC+0M+w7FF8VRrhuDP55
snrMeV+zYJWZfw25p4FY/4gQ1r//9SJ39FKQITwXz/1qnCYTngOeeab0Lf/Z04Ip
MMe85/1cXHrhuHZxHSiY1AFGZ9GuKJfcBtS+f29bBzcy
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:50 2025 by rpki-client