Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/QGeFBaZMcPUbZlccMoyAnOzy3gE.roa
File: QGeFBaZMcPUbZlccMoyAnOzy3gE.roa (raw, json)
Hash identifier: 7YeLQ57g/FUFF/JvQDJhVLUE18/59LuhhMGoWNanM4Y=
Subject key identifier: 40:67:85:05:A6:4C:70:F5:1B:66:57:1C:32:8C:80:9C:EC:F2:DE:01
Certificate issuer: /CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
Certificate serial: 019426D92643A80E219A8000198C3A5B1EA1
Authority key identifier: 0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/QGeFBaZMcPUbZlccMoyAnOzy3gE.roa
Signing time: Thu 02 Jan 2025 11:49:12 +0000
ROA not before: Thu 02 Jan 2025 11:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214484
IP address blocks: 185.188.17.0/24 maxlen: 24
2a01:e800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:26:43:a8:0e:21:9a:80:00:19:8c:3a:5b:1e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
Validity
Not Before: Jan 2 11:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40678505a64c70f51b66571c328c809cecf2de01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:b0:b1:83:d2:d3:18:ec:34:47:69:e2:38:
4a:b1:11:07:47:26:a1:3c:85:1c:ee:9c:a1:83:ae:
23:3c:5e:ae:a5:10:4e:36:72:75:db:75:40:53:9a:
a0:98:e2:19:c2:98:56:b1:79:85:3b:c4:ef:36:ce:
0d:e5:d9:8e:e3:95:b3:92:99:17:b9:4b:bd:24:37:
27:d3:61:20:26:38:66:6a:99:2a:52:b8:e3:30:80:
93:93:aa:c9:61:99:5c:c7:26:3a:67:db:c9:8e:6b:
7c:a8:3e:b1:6d:83:de:e4:42:f9:52:3b:b3:11:7e:
9f:ae:c3:25:64:fa:7a:03:7e:79:f3:db:ee:f0:b8:
56:c6:f9:a9:50:bf:8d:d4:83:72:55:19:80:02:2c:
c6:b5:75:79:47:85:3e:47:91:de:b1:bf:0a:46:f6:
e6:95:8e:30:6f:6b:ed:81:3a:1e:66:fd:a7:bb:21:
41:cf:35:42:7b:b6:2d:28:05:37:d7:9a:b2:4b:3d:
f3:e1:3b:3b:f3:24:3c:bc:0b:7d:df:5a:4e:34:2e:
97:f2:0f:fb:d2:69:0e:d8:04:67:3f:f3:30:ce:e9:
00:0d:3b:7e:4c:52:b2:1c:da:57:04:e6:fd:c5:f4:
c7:1f:ca:c8:35:f4:a8:f9:9f:46:64:ac:b2:54:01:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:67:85:05:A6:4C:70:F5:1B:66:57:1C:32:8C:80:9C:EC:F2:DE:01
X509v3 Authority Key Identifier:
keyid:0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/QGeFBaZMcPUbZlccMoyAnOzy3gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.17.0/24
IPv6:
2a01:e800::/29
Signature Algorithm: sha256WithRSAEncryption
15:f4:d1:47:15:d6:c2:9e:0e:d3:d1:52:83:c0:b0:3e:78:5c:
15:63:e7:a7:58:84:af:20:bd:46:31:53:cb:03:c8:3e:a0:c3:
6c:07:99:92:90:6b:40:08:63:dc:6f:01:57:67:be:4c:b4:18:
37:05:eb:70:dc:0f:ba:86:23:46:71:ce:97:56:22:16:97:36:
6b:90:8d:82:41:d4:5e:19:a8:9a:72:24:e4:b6:01:c2:fa:98:
a9:f1:22:2d:c3:7c:51:08:69:bd:6d:31:78:e0:da:ba:ad:3f:
12:ca:53:01:78:e7:78:7b:c2:3c:ce:0c:e6:dd:fc:ad:a4:7a:
a1:28:ff:2d:81:c8:30:9f:18:73:80:a9:0a:81:50:a5:2f:ff:
3d:af:f8:87:f1:34:8d:a0:3d:c8:28:65:67:af:2c:49:bd:1e:
d9:d7:6f:dd:c9:d7:c9:83:93:e8:ed:c8:96:e5:9a:54:4e:b2:
4e:e5:ca:26:1a:9f:f0:a7:bc:1e:9e:f1:db:e2:b0:bc:1a:94:
96:9e:17:b7:a2:6f:6f:19:26:7a:db:f0:a7:73:dd:05:1b:a1:
5f:a5:cc:21:46:a1:f1:30:9e:3d:68:e2:53:46:99:de:51:0e:
a2:c1:7a:f6:a9:d0:01:96:9f:dc:99:4b:8a:04:e9:69:79:ea:
66:3e:f5:59
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQm2SZDqA4hmoAAGYw6Wx6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOTE2YzJjYTM2YjUwMDk2ZWUyZmU0NGI5NDUyOWMyZGEz
YzNlYzIwHhcNMjUwMTAyMTE0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDY3ODUwNWE2NGM3MGY1MWI2NjU3MWMzMjhjODA5Y2VjZjJkZTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+KwsYPS0xjsNEdp4jhKsREHRyah
PIUc7pyhg64jPF6upRBONnJ123VAU5qgmOIZwphWsXmFO8TvNs4N5dmO45WzkpkX
uUu9JDcn02EgJjhmapkqUrjjMICTk6rJYZlcxyY6Z9vJjmt8qD6xbYPe5EL5Ujuz
EX6frsMlZPp6A35589vu8LhWxvmpUL+N1INyVRmAAizGtXV5R4U+R5Hesb8KRvbm
lY4wb2vtgToeZv2nuyFBzzVCe7YtKAU315qySz3z4Ts78yQ8vAt931pONC6X8g/7
0mkO2ARnP/MwzukADTt+TFKyHNpXBOb9xfTHH8rINfSo+Z9GZKyyVAHwbwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEBnhQWmTHD1G2ZXHDKMgJzs8t4BMB8GA1UdIwQY
MBaAFA6RbCyja1AJbuL+RLlFKcLaPD7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHBGc0xLTnJVQWx1NHY1RXVVVXB3dG84UHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjkwOGItZWVmOS00YTFhLThmODAt
NWZjNDRmZDZiYWZjLzEvUUdlRkJhWk1jUFViWmxjY01veUFuT3p5M2dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yZjkwOGItZWVmOS00YTFhLThmODAtNWZjNDRmZDZiYWZj
LzEvRHBGc0xLTnJVQWx1NHY1RXVVVXB3dG84UHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAubwRMA0E
AgACMAcDBQMqAegAMA0GCSqGSIb3DQEBCwUAA4IBAQAV9NFHFdbCng7T0VKDwLA+
eFwVY+enWISvIL1GMVPLA8g+oMNsB5mSkGtACGPcbwFXZ75MtBg3Betw3A+6hiNG
cc6XViIWlzZrkI2CQdReGaiaciTktgHC+pip8SItw3xRCGm9bTF44Nq6rT8SylMB
eOd4e8I8zgzm3fytpHqhKP8tgcgwnxhzgKkKgVClL/89r/iH8TSNoD3IKGVnryxJ
vR7Z12/dydfJg5Po7ciW5ZpUTrJO5comGp/wp7wenvHb4rC8GpSWnhe3om9vGSZ6
2/Cnc90FG6FfpcwhRqHxMJ49aOJTRpneUQ6iwXr2qdABlp/cmUuKBOlpeepmPvVZ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:02 2025 by rpki-client