Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/QeYOzxISXgl6M7OixDgTpfZERu4.roa
File: QeYOzxISXgl6M7OixDgTpfZERu4.roa (raw, json)
Hash identifier: s4UEY+I5WghrV5P9V2zo2Pa66DhiVa+5TyKkmVvFOc4=
Subject key identifier: 41:E6:0E:CF:12:12:5E:09:7A:33:B3:A2:C4:38:13:A5:F6:44:46:EE
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019427B58FA46DEADE2DE39858EAA45D8CD6
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/QeYOzxISXgl6M7OixDgTpfZERu4.roa
Signing time: Thu 02 Jan 2025 15:49:57 +0000
ROA not before: Thu 02 Jan 2025 15:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35577
IP address blocks: 185.245.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8f:a4:6d:ea:de:2d:e3:98:58:ea:a4:5d:8c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jan 2 15:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41e60ecf12125e097a33b3a2c43813a5f64446ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:50:fd:3f:47:a4:ac:5b:a0:e0:7c:c7:14:
7d:84:a8:6c:b6:e1:5d:c2:56:ad:0d:7a:2b:d2:7f:
bd:47:b9:7f:e6:e2:3a:fc:18:0b:ca:3d:58:64:4d:
01:59:f4:9d:a5:7c:12:9a:2c:ad:32:28:35:d1:b6:
6c:e4:97:58:24:ef:4a:09:7c:d9:2c:8a:e5:ea:a5:
d0:ab:f6:f1:78:3b:62:74:17:48:4b:dd:4e:54:ea:
54:99:19:23:61:88:c4:b8:18:a0:fe:d5:58:ee:94:
70:47:fd:fe:c3:a1:a9:10:d2:fc:c1:91:18:b9:04:
57:d2:5d:d2:89:27:06:62:7e:4f:b9:ee:8b:d5:1d:
1c:8d:4d:4e:76:ab:59:b0:e9:cd:5c:63:f1:a2:cc:
34:d1:3e:09:9b:26:4a:6d:bc:1c:5e:fe:4c:e0:50:
af:27:3e:81:46:11:68:01:14:21:96:86:2d:14:b6:
4a:a5:d7:88:7b:3b:d5:cd:d7:0e:cd:29:7f:db:e8:
78:88:a5:28:bf:36:85:e0:da:42:40:ad:94:53:51:
0d:76:02:35:1c:b6:ca:8d:9a:00:81:fb:16:33:49:
4f:36:69:35:b3:02:3a:b5:5c:51:c9:ca:9c:5c:f4:
c1:52:72:fe:5c:57:2a:04:ef:c8:f3:29:48:4e:29:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E6:0E:CF:12:12:5E:09:7A:33:B3:A2:C4:38:13:A5:F6:44:46:EE
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/QeYOzxISXgl6M7OixDgTpfZERu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.244.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4c:fd:05:03:65:10:fe:ea:33:ae:f3:55:bd:ad:38:0e:58:
7b:e9:79:6c:95:69:f1:31:e9:aa:39:2f:27:78:de:ae:eb:5f:
e3:fa:83:e0:88:bb:ae:98:f3:9d:c2:da:25:5b:11:9e:0c:25:
38:92:40:b5:13:10:e1:d7:1d:8e:0e:6c:ff:e2:45:c4:1a:76:
6e:ca:24:eb:bc:83:f0:ca:6c:ff:f8:f4:8d:ed:da:d4:f4:0b:
5b:48:8d:27:09:53:43:25:77:a3:09:15:25:9a:05:66:c8:a9:
de:20:f1:d0:1b:3b:65:4c:d5:d7:fd:15:bf:34:8d:ec:51:a8:
8e:01:7e:aa:22:57:5b:f5:cc:a6:cd:fe:23:8b:cb:32:4d:f1:
cf:aa:9a:34:2c:5c:1b:88:54:e5:97:f7:98:65:22:2c:a5:6d:
20:60:6b:36:66:74:2d:af:a2:1d:02:5e:60:c0:18:e1:b5:b9:
da:68:94:1a:3f:f8:f6:e2:b6:c6:7b:a5:8e:8a:01:4e:ca:11:
67:ea:a8:a3:24:4b:1b:7d:b2:d1:42:1e:6c:91:e1:dc:d6:48:
3e:f2:f0:81:9a:c1:0f:ac:90:d4:f8:ed:ba:b6:b7:10:7c:07:
0f:04:5f:9e:4f:84:53:17:f9:73:a2:f4:2a:d2:c3:29:14:38:
95:a7:d3:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntY+kbereLeOYWOqkXYzWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZTg4OGE3NmU5OTg1MWIwMWZiODZjZWM1MzdkNGQ4ZTYx
MGRlMTYwHhcNMjUwMTAyMTU0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWU2MGVjZjEyMTI1ZTA5N2EzM2IzYTJjNDM4MTNhNWY2NDQ0NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLhQ/T9HpKxboOB8xxR9hKhstuFd
wlatDXor0n+9R7l/5uI6/BgLyj1YZE0BWfSdpXwSmiytMig10bZs5JdYJO9KCXzZ
LIrl6qXQq/bxeDtidBdIS91OVOpUmRkjYYjEuBig/tVY7pRwR/3+w6GpENL8wZEY
uQRX0l3SiScGYn5Pue6L1R0cjU1OdqtZsOnNXGPxosw00T4JmyZKbbwcXv5M4FCv
Jz6BRhFoARQhloYtFLZKpdeIezvVzdcOzSl/2+h4iKUovzaF4NpCQK2UU1ENdgI1
HLbKjZoAgfsWM0lPNmk1swI6tVxRycqcXPTBUnL+XFcqBO/I8ylITinJBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEHmDs8SEl4JejOzosQ4E6X2REbuMB8GA1UdIwQY
MBaAFEToiKdumYUbAfuGzsU31NjmEN4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUt
YmMwZGJhOTMyYjM1LzEvUWVZT3p4SVNYZ2w2TTdPaXhEZ1RwZlpFUnU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUtYmMwZGJhOTMyYjM1
LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufX0MA0G
CSqGSIb3DQEBCwUAA4IBAQBrTP0FA2UQ/uozrvNVva04Dlh76XlslWnxMemqOS8n
eN6u61/j+oPgiLuumPOdwtolWxGeDCU4kkC1ExDh1x2ODmz/4kXEGnZuyiTrvIPw
ymz/+PSN7drU9AtbSI0nCVNDJXejCRUlmgVmyKneIPHQGztlTNXX/RW/NI3sUaiO
AX6qIldb9cymzf4ji8syTfHPqpo0LFwbiFTll/eYZSIspW0gYGs2ZnQtr6IdAl5g
wBjhtbnaaJQaP/j24rbGe6WOigFOyhFn6qijJEsbfbLRQh5skeHc1kg+8vCBmsEP
rJDU+O26trcQfAcPBF+eT4RTF/lzovQq0sMpFDiVp9Pu
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:47 2025 by rpki-client