Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/BQSs352-EOwWdJt5W4JX2r66118.roa
File: BQSs352-EOwWdJt5W4JX2r66118.roa (raw, json)
Hash identifier: SQJWh7RfqqUI9aMjD6YSzrE33eXIstI44fKb5g3qqDI=
Subject key identifier: 05:04:AC:DF:9D:BE:10:EC:16:74:9B:79:5B:82:57:DA:BE:BA:D7:5F
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 0196CE2409EED7909757540D5234AC27AFA6
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/BQSs352-EOwWdJt5W4JX2r66118.roa
Signing time: Wed 14 May 2025 09:33:10 +0000
ROA not before: Wed 14 May 2025 09:33:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210006
IP address blocks: 86.54.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:24:09:ee:d7:90:97:57:54:0d:52:34:ac:27:af:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: May 14 09:33:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0504acdf9dbe10ec16749b795b8257dabebad75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:9b:ab:d3:bf:c6:3d:18:01:03:e1:3d:80:
75:ed:44:b5:14:a1:18:9c:c7:b2:00:eb:9c:e6:3a:
d3:4a:38:81:cc:8b:2e:28:e4:f1:17:29:ff:5c:15:
89:b7:2f:4c:f7:ab:8c:cd:f2:2a:77:1a:7d:3f:bc:
60:92:78:91:94:ac:89:2e:47:61:41:bd:21:25:06:
d8:69:16:88:11:7d:90:0c:52:19:21:5d:fe:69:bc:
b4:35:e2:e0:71:2c:b4:83:ae:25:b9:fc:2b:4b:e8:
08:8e:db:b3:b1:64:5e:4a:74:63:91:b6:86:e0:8e:
69:40:7c:91:57:b7:3c:0c:33:20:8d:86:1b:8c:7c:
f6:37:aa:f8:da:27:45:e6:1f:1a:1b:b8:3d:32:83:
1a:90:c0:3e:3a:d6:cb:67:e6:7a:fc:e8:8d:7d:5c:
44:3b:9d:af:97:77:2e:db:22:ca:93:ba:14:75:33:
09:1b:da:af:b0:c2:7f:39:09:c4:27:71:6c:a8:78:
e2:b0:e4:24:9e:f6:05:98:96:91:27:fd:7d:1f:8b:
f3:39:ba:a4:18:f9:fa:11:19:7c:fb:d3:dd:59:e4:
34:81:d9:1e:46:f8:9a:64:03:be:35:8c:1a:25:27:
78:bc:56:32:2e:de:3c:ca:6a:78:80:08:9f:24:0f:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:04:AC:DF:9D:BE:10:EC:16:74:9B:79:5B:82:57:DA:BE:BA:D7:5F
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/BQSs352-EOwWdJt5W4JX2r66118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.25.0/24
Signature Algorithm: sha256WithRSAEncryption
af:f5:be:37:9d:af:d2:30:85:10:32:45:a4:7f:5b:46:72:40:
ee:0f:88:82:8b:c1:a6:a0:fb:00:88:25:d8:c9:95:63:2f:43:
ed:48:2a:0f:e5:ad:8c:a3:9b:fa:7f:bc:9c:cd:3e:a4:51:dc:
66:a3:04:a7:c1:d7:c7:70:4f:f0:90:08:43:93:9d:b3:be:f8:
13:f2:45:3c:a4:4e:f9:87:b3:95:57:95:5f:6f:d2:db:f4:9c:
d9:83:39:b7:79:90:e5:4e:8d:20:08:5e:2b:8f:2f:99:da:8d:
d8:12:45:b9:be:39:eb:ef:45:26:11:17:01:48:0e:54:6c:9b:
8d:dc:e8:24:bc:22:11:ed:50:24:7e:16:4d:e3:1a:fe:35:fb:
9f:01:22:c9:b9:57:57:c2:fc:b3:65:1a:f0:5f:85:4a:b4:22:
85:5f:e1:a1:62:f0:14:4b:80:80:cc:49:dd:54:6a:05:17:9e:
34:f4:36:96:9e:e3:42:28:c7:ef:2a:d6:2f:ea:91:26:33:bd:
2f:5a:fb:ee:1e:f6:e0:85:b2:a3:22:06:8d:11:0c:75:3e:23:
7b:84:78:cf:f5:a0:a1:74:76:25:e5:73:b5:9e:7a:cf:a7:f2:
31:f2:e4:57:64:19:65:76:10:b0:31:1f:cd:c9:84:0d:41:31:
1a:16:67:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbOJAnu15CXV1QNUjSsJ6+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzJlMGQzZmRjMjE1YTM4OWM3MDQzY2E1YTFhMDZiZTJj
NTU4ZWYwHhcNMjUwNTE0MDkzMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTA0YWNkZjlkYmUxMGVjMTY3NDliNzk1YjgyNTdkYWJlYmFkNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZubq9O/xj0YAQPhPYB17US1FKEY
nMeyAOuc5jrTSjiBzIsuKOTxFyn/XBWJty9M96uMzfIqdxp9P7xgkniRlKyJLkdh
Qb0hJQbYaRaIEX2QDFIZIV3+aby0NeLgcSy0g64lufwrS+gIjtuzsWReSnRjkbaG
4I5pQHyRV7c8DDMgjYYbjHz2N6r42idF5h8aG7g9MoMakMA+OtbLZ+Z6/OiNfVxE
O52vl3cu2yLKk7oUdTMJG9qvsMJ/OQnEJ3FsqHjisOQknvYFmJaRJ/19H4vzObqk
GPn6ERl8+9PdWeQ0gdkeRviaZAO+NYwaJSd4vFYyLt48ymp4gAifJA90uwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAUErN+dvhDsFnSbeVuCV9q+utdfMB8GA1UdIwQY
MBaAFObC4NP9whWjiccEPKWhoGvixVjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQt
ZjNlMDUyYmFiMTQ0LzEvQlFTczM1Mi1FT3dXZEp0NVc0SlgycjY2MTE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQtZjNlMDUyYmFiMTQ0
LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVjYZMA0G
CSqGSIb3DQEBCwUAA4IBAQCv9b43na/SMIUQMkWkf1tGckDuD4iCi8GmoPsAiCXY
yZVjL0PtSCoP5a2Mo5v6f7yczT6kUdxmowSnwdfHcE/wkAhDk52zvvgT8kU8pE75
h7OVV5Vfb9Lb9JzZgzm3eZDlTo0gCF4rjy+Z2o3YEkW5vjnr70UmERcBSA5UbJuN
3OgkvCIR7VAkfhZN4xr+NfufASLJuVdXwvyzZRrwX4VKtCKFX+GhYvAUS4CAzEnd
VGoFF5409DaWnuNCKMfvKtYv6pEmM70vWvvuHvbghbKjIgaNEQx1PiN7hHjP9aCh
dHYl5XO1nnrPp/Ix8uRXZBlldhCwMR/NyYQNQTEaFmdt
-----END CERTIFICATE-----
Generated at Fri Jun 13 13:03:06 2025 by rpki-client